Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/w675ruCi57HFpZXN-wdSrpywrzM.roa
File:                     w675ruCi57HFpZXN-wdSrpywrzM.roa (raw, json)
Hash identifier:          O1jh8fz0NzvIWV+bwPRQ8iMT6yLN+Y8st+1TJfEFicc=
Subject key identifier:   C3:AE:F9:AE:E0:A2:E7:B1:C5:A5:95:CD:FB:07:52:AE:9C:B0:AF:33
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0183CDD08BD8F140CB2B81F994508FD22020
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/w675ruCi57HFpZXN-wdSrpywrzM.roa
Signing time:             Wed 12 Oct 2022 20:09:00 +0000
ROA not before:           Wed 12 Oct 2022 20:09:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        185.223.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cd:d0:8b:d8:f1:40:cb:2b:81:f9:94:50:8f:d2:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Oct 12 20:09:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3aef9aee0a2e7b1c5a595cdfb0752ae9cb0af33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:af:6c:7b:15:64:42:b7:ae:ac:bd:7c:69:
                    06:4b:7f:3b:d3:d3:33:58:96:25:fa:25:de:54:39:
                    ff:92:50:18:4a:97:5a:b1:c2:16:fe:c9:a2:53:a8:
                    d4:0f:a7:00:2e:5e:b5:3b:fe:3d:6c:92:39:d3:00:
                    7b:84:00:7c:57:2f:8c:11:1e:06:84:c8:ec:0d:95:
                    cb:b4:cf:cd:c4:a2:33:1e:e8:c5:61:b5:b1:83:0e:
                    d2:82:cd:ea:b4:ee:f8:78:42:13:90:96:8e:3b:f7:
                    51:e7:95:fd:3b:d3:42:c2:2b:c8:17:b1:e9:02:d1:
                    15:d3:46:49:0c:ea:d8:6a:43:cb:62:97:a2:53:42:
                    37:b5:39:c2:50:24:87:83:6d:04:64:a5:e7:a3:91:
                    cc:86:40:f1:f2:43:5d:87:b5:6c:b1:36:b9:9d:11:
                    32:b9:fd:0f:b0:4d:0e:eb:17:bf:ef:65:3e:f9:b3:
                    b1:fe:72:8f:98:b7:85:40:e0:14:11:58:63:8a:27:
                    50:92:61:98:5f:7d:cb:97:71:f9:64:bc:22:8c:7f:
                    3e:7f:c1:26:51:e2:cf:96:ed:82:45:72:86:4a:c9:
                    f4:4d:38:d7:22:49:24:0c:15:9c:6f:98:cc:76:e6:
                    6c:7b:69:5b:40:15:19:ac:93:4a:70:58:d1:ce:f2:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AE:F9:AE:E0:A2:E7:B1:C5:A5:95:CD:FB:07:52:AE:9C:B0:AF:33
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/w675ruCi57HFpZXN-wdSrpywrzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:3b:34:ad:c8:46:29:4e:6b:0e:f2:60:d5:f1:cb:df:29:
         02:7e:d0:ed:f5:30:8a:0d:42:6f:b9:35:d4:ca:62:79:8f:c0:
         3e:92:20:32:ca:18:22:58:c1:4b:e0:30:f5:35:d9:0e:0e:fe:
         55:d3:a3:ca:8c:d9:ec:ca:6a:32:bc:77:4f:70:b6:d0:dc:1f:
         85:f0:56:bf:48:3d:69:ba:12:44:84:7d:b9:a0:1a:4f:1c:c2:
         d0:14:8c:a8:61:68:16:79:11:fa:f7:51:18:2b:c1:5a:3a:0b:
         0a:17:cb:c3:34:35:30:9b:03:b9:08:2c:8e:c9:0c:85:94:e5:
         ec:0d:e4:a4:14:2f:87:27:0a:b6:83:cb:2c:91:b7:f5:fb:f4:
         80:af:b7:4f:22:e1:32:18:f6:1c:c4:3d:ae:60:9e:a4:42:d4:
         a3:f9:e7:36:9f:3f:b7:d0:15:fe:ed:ae:1f:8a:f4:e1:bf:39:
         22:34:8d:ab:00:76:4d:a6:76:71:78:24:5b:20:38:78:76:e1:
         bf:b0:b4:83:7a:3e:e9:52:ec:68:9a:5f:cc:f7:21:f2:de:f3:
         56:4d:cb:c2:33:14:58:e7:66:1e:02:fd:f0:01:1c:5c:ec:bf:
         16:dd:40:84:2f:84:e0:a5:d9:82:91:0c:32:60:c1:9c:99:5e:
         d9:79:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org