Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h7Uu8MKd_2sehrgQ0pi6tKISHVs.roa
File:                     h7Uu8MKd_2sehrgQ0pi6tKISHVs.roa (raw, json)
Hash identifier:          7Yy0MqjFKNBGNxO6X2WgSK3v297FpmuFvfp5Ub8pSXA=
Subject key identifier:   87:B5:2E:F0:C2:9D:FF:6B:1E:86:B8:10:D2:98:BA:B4:A2:12:1D:5B
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0641EEAA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h7Uu8MKd_2sehrgQ0pi6tKISHVs.roa
Signing time:             Sat 01 Jan 2022 06:52:38 +0000
ROA not before:           Sat 01 Jan 2022 06:52:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139660
IP address blocks:        185.230.52.0/24 maxlen: 24
                          185.225.1.0/24 maxlen: 24
                          185.225.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104984234 (0x641eeaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  1 06:52:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=87b52ef0c29dff6b1e86b810d298bab4a2121d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:cd:01:ff:34:ec:7f:b7:43:bf:c6:4b:6e:
                    0f:5c:be:29:1e:40:5e:45:a3:f4:5f:90:81:30:15:
                    c6:3a:58:cb:00:d9:98:2b:43:45:94:4d:f3:f4:58:
                    2c:d2:20:cf:53:18:1d:af:e0:a4:92:be:9f:93:8b:
                    28:e6:71:8e:60:3a:6c:d6:d6:f4:b9:94:50:cb:fe:
                    d0:f3:f5:88:f0:b1:fb:ba:cc:4a:94:42:9e:59:ff:
                    c2:dc:6a:f1:a7:3c:57:be:4e:d9:16:4d:17:98:5e:
                    5e:ca:56:f7:87:53:1c:a9:8c:da:82:26:37:c8:0f:
                    82:f0:d4:25:d7:1b:6a:ba:54:cd:c2:df:d5:c8:3d:
                    54:33:f4:af:24:40:8f:66:e8:5e:11:42:06:cb:f9:
                    73:92:c1:36:85:96:e2:18:6d:d4:de:ed:16:06:bf:
                    02:cd:df:c0:3d:ff:bd:ad:ac:bc:5b:6c:58:34:ec:
                    b3:fd:d7:17:ba:ea:a3:d2:8a:c8:be:c8:bc:5f:8e:
                    8e:ed:64:99:66:27:97:81:28:51:cd:f6:e9:11:e0:
                    a7:18:5f:1b:b3:03:d4:66:73:46:5f:fd:8a:80:24:
                    96:0a:8e:0a:e1:09:a7:1d:f4:07:b3:c5:7c:80:b7:
                    cb:d3:9f:15:1a:45:dc:50:4c:fb:67:bb:c2:f2:2e:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B5:2E:F0:C2:9D:FF:6B:1E:86:B8:10:D2:98:BA:B4:A2:12:1D:5B
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h7Uu8MKd_2sehrgQ0pi6tKISHVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.1.0-185.225.2.255
                  185.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:75:e8:fd:ca:1e:ae:f3:f6:71:10:a4:3d:fc:04:1e:fe:e2:
         c4:7c:08:48:ce:a7:30:4e:6f:64:da:4a:e7:2d:7a:77:3f:ee:
         53:11:60:44:6b:9f:ab:8b:7d:83:34:36:fb:df:75:d1:9d:ac:
         51:90:54:b2:30:4a:49:26:2f:1c:3f:45:98:2c:82:04:eb:07:
         f3:15:d4:43:36:a2:98:a3:c7:42:11:a3:98:89:0d:7f:d9:47:
         96:27:49:01:99:93:56:1f:72:18:93:0a:e7:65:5e:d4:1e:83:
         4a:cf:c5:c4:b7:20:ba:be:15:29:60:16:33:02:95:2c:0f:67:
         3b:78:73:93:bc:99:b9:44:90:48:e4:ad:46:7b:06:56:90:0f:
         1e:28:52:ee:7e:40:0c:37:38:ca:0a:24:7e:72:f9:80:96:0e:
         94:79:0c:46:aa:f7:5a:73:46:68:21:ff:78:58:1e:d1:9d:32:
         a3:4c:a7:59:a5:7c:d6:03:c0:5a:34:0a:1d:5e:b5:94:35:94:
         29:10:20:df:63:16:4c:ea:7c:21:45:ca:1e:65:ec:e7:19:a5:
         73:d7:e0:16:c8:b4:99:92:52:7c:e8:66:7e:b0:09:60:07:dd:
         24:82:76:15:33:1e:44:ff:67:f6:74:e8:4e:1d:89:84:c0:4a:
         69:92:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org