Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Sjj1yoGoyRre072BdpjU_hprl48.roa
File:                     Sjj1yoGoyRre072BdpjU_hprl48.roa (raw, json)
Hash identifier:          h0LRPH0p1ADkvGmzv0PIM2HD6e0b94bRFDS/42YcNag=
Subject key identifier:   4A:38:F5:CA:81:A8:C9:1A:DE:D3:BD:81:76:98:D4:FE:1A:6B:97:8F
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17E02A4E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Sjj1yoGoyRre072BdpjU_hprl48.roa
Signing time:             Sat 01 Jan 2022 04:54:39 +0000
ROA not before:           Sat 01 Jan 2022 04:54:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205512
IP address blocks:        185.122.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400566862 (0x17e02a4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a38f5ca81a8c91aded3bd817698d4fe1a6b978f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:5c:98:16:b2:73:ae:cc:c7:86:71:79:9d:
                    46:b9:a9:22:74:2a:71:3b:95:65:a1:07:94:de:f4:
                    14:20:f0:34:2c:bf:8c:b0:f1:d2:34:9d:7b:e2:a3:
                    81:ed:18:b8:00:72:29:cd:db:25:78:1d:ba:d4:85:
                    b7:e4:81:5d:d5:cd:33:48:a2:e8:94:51:f0:9c:1d:
                    eb:68:e2:39:4e:18:42:c9:0a:c9:31:66:cc:a9:ea:
                    f4:39:26:ba:9b:b4:c6:93:88:96:85:df:a5:97:ba:
                    32:87:4e:d4:6f:c0:16:fb:9b:24:f4:09:ce:05:63:
                    e9:47:82:66:83:9e:d0:b5:96:df:72:e1:e4:fc:4f:
                    c1:05:58:71:6a:89:cd:34:bb:38:b9:05:c9:77:dd:
                    63:6b:8a:d1:2e:30:0b:bc:5c:c8:f2:9b:6a:26:ae:
                    5b:57:85:6a:49:75:76:fc:61:73:d9:73:ba:60:cb:
                    98:35:7b:c5:cc:ad:b6:44:cc:cc:ac:0f:f6:fd:79:
                    f2:e0:5f:9b:bd:53:24:35:6a:49:ca:4b:05:6a:20:
                    79:8a:37:0e:20:0d:0d:5b:94:9b:76:c3:27:21:87:
                    0b:1b:de:00:52:10:36:62:4a:ae:15:82:27:d9:e5:
                    69:04:d9:a2:a4:c7:10:25:5a:3b:53:4b:b5:40:3a:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:38:F5:CA:81:A8:C9:1A:DE:D3:BD:81:76:98:D4:FE:1A:6B:97:8F
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Sjj1yoGoyRre072BdpjU_hprl48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:2a:dc:03:9f:59:04:15:50:bc:f8:bb:46:dc:ec:9f:57:ca:
         af:08:5f:6d:77:a1:5a:94:b0:89:50:95:00:6f:72:d2:49:77:
         a7:c2:64:e3:fc:3a:30:1f:eb:54:27:ab:82:3e:0c:c1:12:8b:
         5b:75:48:f7:62:85:3e:91:ea:e0:6f:d0:72:f8:8d:55:fc:c3:
         03:af:d0:c8:e8:40:4f:5d:a8:3a:29:c1:c8:6e:11:28:24:d7:
         c7:d9:3a:f8:e3:a1:e2:85:7b:e1:4e:9d:40:3d:2d:0d:b6:ec:
         4b:fd:91:e1:6f:cc:5a:b0:0d:01:b3:ae:57:a4:47:36:98:b5:
         55:cb:5a:7d:5f:7c:49:f4:b2:2e:be:61:96:2b:4c:2f:68:b4:
         35:57:5e:3e:55:78:23:7a:c5:36:76:00:52:ae:9c:42:d1:72:
         12:a6:de:b1:c6:d5:8e:1e:6d:b8:18:ea:bf:24:21:80:47:39:
         fe:ba:40:1b:58:a1:2b:d1:08:d7:67:90:b3:5e:07:b4:16:40:
         fd:55:d2:8a:92:7e:58:b0:72:af:58:47:73:e4:3d:21:69:56:
         bc:74:00:f2:9c:c2:a9:2e:bd:07:8b:00:ee:3e:b0:08:7b:58:
         01:ee:0c:13:f7:4a:38:45:46:fc:1e:2d:c9:f8:29:ed:7e:5e:
         2b:19:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:32 2024 by rpki-client on console-ams.rpki-client.org