Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wrSLPRRjMApkSQO29V2ArRoe7Ac.roa
File:                     wrSLPRRjMApkSQO29V2ArRoe7Ac.roa (raw, json)
Hash identifier:          jkCsWm0YUlJ9r0fmeF9uM6QOZY/BzNp6pH4kTe/IvLk=
Subject key identifier:   C2:B4:8B:3D:14:63:30:0A:64:49:03:B6:F5:5D:80:AD:1A:1E:EC:07
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       07E5C620
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wrSLPRRjMApkSQO29V2ArRoe7Ac.roa
Signing time:             Wed 11 May 2022 08:04:02 +0000
ROA not before:           Wed 11 May 2022 08:04:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        185.206.248.0/24 maxlen: 24
                          185.223.76.0/24 maxlen: 24
                          185.225.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132498976 (0x7e5c620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: May 11 08:04:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2b48b3d1463300a644903b6f55d80ad1a1eec07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:56:ed:93:8a:84:5e:6c:c3:37:80:f8:eb:
                    96:c0:ee:db:91:8a:c0:6c:6c:71:79:ef:5d:49:da:
                    cf:8e:d9:26:b8:e4:8c:65:f7:b5:e4:64:36:85:94:
                    0b:66:5e:c3:15:cf:e9:99:db:9f:04:87:d1:00:ef:
                    3b:cb:14:b3:78:f7:2f:8f:11:8c:05:c6:b0:bf:87:
                    64:76:3b:0a:09:b4:11:94:03:04:9c:3f:bf:38:c9:
                    19:e0:71:9c:14:0c:31:e4:2b:9a:6c:74:18:ba:f8:
                    08:e2:08:bd:58:62:82:6b:91:2b:c9:59:d9:31:c6:
                    f5:3d:43:fd:40:e5:dd:b3:2b:58:bd:43:31:d3:b9:
                    27:60:e0:00:25:69:39:c3:7e:82:ff:3d:32:5c:72:
                    b2:b5:53:59:70:32:67:fc:1a:81:c3:90:67:49:fa:
                    00:a0:92:96:10:7e:d4:18:f9:e0:d5:ea:35:8f:1f:
                    16:a3:81:c8:5c:c4:f0:8e:a5:d3:7f:36:fe:2b:b3:
                    f5:d3:19:82:26:dc:21:cb:00:98:96:ee:2e:da:ec:
                    5f:d7:df:82:6d:d4:de:58:aa:a0:8a:8b:cd:f4:10:
                    9b:d8:6d:2b:17:17:10:50:47:8f:80:a2:27:58:ba:
                    57:9f:86:01:38:5f:91:fd:65:1f:94:92:ba:97:73:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B4:8B:3D:14:63:30:0A:64:49:03:B6:F5:5D:80:AD:1A:1E:EC:07
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wrSLPRRjMApkSQO29V2ArRoe7Ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.248.0/24
                  185.223.76.0/24
                  185.225.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:a3:5c:ab:52:1b:ca:e9:78:43:14:4f:fe:00:70:11:a5:
         b6:9a:da:1a:dc:3b:c0:e2:75:c3:97:86:bf:15:fe:dc:09:15:
         d6:73:54:9a:78:ab:72:5c:c6:21:95:8d:64:79:52:a6:75:5f:
         d6:af:28:ae:3e:57:73:4a:6e:0d:b1:c1:22:d0:04:b9:85:ab:
         b2:8a:8b:c1:62:d9:a5:c6:09:77:68:8c:20:75:fd:05:29:e2:
         d3:6f:de:e3:7b:6b:58:b3:22:50:23:71:36:83:cb:70:e9:9f:
         57:8d:d2:b6:f2:60:6c:48:2a:4a:20:78:09:b0:70:ef:95:bc:
         8b:3d:81:b5:d1:5d:1f:64:26:da:79:cf:54:36:73:23:a3:de:
         93:e8:fe:fb:88:bd:05:56:94:4e:42:af:26:89:84:c8:b5:5c:
         95:91:c3:eb:98:1a:62:ea:b9:fa:b4:63:8c:4b:2e:a6:92:aa:
         33:ad:a5:9b:fd:66:66:55:43:c6:18:f5:05:4f:35:7b:dd:dc:
         4e:bb:4d:ee:a3:8c:b7:0b:aa:b8:dd:eb:f2:c9:08:a6:34:45:
         8c:b4:3c:6e:93:fe:90:fa:8a:00:18:52:8f:46:14:c1:93:7c:
         69:c5:71:ab:ac:a9:25:62:36:ba:cf:da:df:de:d1:be:38:ca:
         3a:09:55:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org