Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7dTWXMvhOTVlX6pJXN6CmEj9Zgs.roa
File:                     7dTWXMvhOTVlX6pJXN6CmEj9Zgs.roa (raw, json)
Hash identifier:          GITw1wiAzaNwE7WXrXgRxxV8pY8ZmRBjdNSre7XQjc4=
Subject key identifier:   ED:D4:D6:5C:CB:E1:39:35:65:5F:AA:49:5C:DE:82:98:48:FD:66:0B
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       0A38FC3D
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7dTWXMvhOTVlX6pJXN6CmEj9Zgs.roa
Signing time:             Sat 01 Jan 2022 09:53:39 +0000
ROA not before:           Sat 01 Jan 2022 09:53:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15924
IP address blocks:        185.205.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171506749 (0xa38fc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Jan  1 09:53:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edd4d65ccbe13935655faa495cde829848fd660b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:1f:0f:e2:68:0c:b5:c3:8a:21:e2:33:c9:
                    aa:43:bf:82:07:87:3a:2a:a7:31:07:f0:59:cd:3e:
                    6f:46:4b:b0:60:18:e7:10:d4:8d:6e:9f:3d:51:05:
                    2b:97:a5:6c:04:01:d6:d7:fb:43:b0:ef:4f:81:90:
                    3f:bd:77:75:a3:d6:fd:8b:f3:4d:03:33:a2:16:e1:
                    25:a2:28:6d:f6:89:71:ff:42:34:c7:73:6f:76:c3:
                    3c:df:91:ea:f8:42:eb:13:6d:60:d7:c3:35:73:65:
                    84:9c:07:8e:15:76:bf:12:7e:c8:73:b6:9b:4e:c5:
                    0a:24:33:3e:38:ea:47:eb:40:42:0f:04:8a:7c:c5:
                    f1:44:36:38:ff:e7:86:ae:48:31:00:8f:2d:cb:cd:
                    bf:1c:6d:0f:20:d7:f6:9e:e2:2f:03:c1:68:53:37:
                    23:d4:73:91:9c:8b:65:14:5d:76:5d:93:91:4a:46:
                    62:26:88:10:42:5c:d8:ae:48:24:1f:d2:14:0d:ac:
                    91:a7:d1:a5:d7:30:8b:50:43:4e:8b:6d:94:46:f8:
                    ad:78:7c:ab:dc:88:26:d1:12:36:30:2e:bb:65:7b:
                    d0:0c:cc:30:e7:65:60:8a:1d:86:d9:0d:b2:e4:e5:
                    e9:24:57:24:3a:b3:d5:be:2e:17:09:20:39:83:5b:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:D6:5C:CB:E1:39:35:65:5F:AA:49:5C:DE:82:98:48:FD:66:0B
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7dTWXMvhOTVlX6pJXN6CmEj9Zgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:4b:73:b8:65:4f:64:9a:25:9b:c0:b5:8a:ce:25:b9:05:
         21:ed:4b:73:3d:0a:13:4c:ee:0c:ee:44:03:04:3a:73:9b:b4:
         08:1a:78:d9:26:b7:45:72:34:0e:ed:da:b8:69:f1:ea:e8:81:
         06:8c:89:07:3c:78:cd:c3:d9:d1:df:d8:eb:4f:e4:8e:2f:70:
         9b:1b:a4:0f:9e:7b:b9:84:a5:a0:89:0e:f9:a1:54:38:ed:47:
         1c:ce:f7:34:e9:81:fc:30:d8:ec:df:46:6c:3f:f8:de:e6:55:
         d3:89:3a:5f:b4:82:ed:b5:00:ea:37:58:b1:d6:2d:0e:59:de:
         4a:3d:ad:d1:24:f1:2f:ec:8f:9e:44:23:be:2a:9a:9b:18:27:
         21:7a:a3:66:14:8a:c8:e9:c0:ea:61:c3:29:84:d9:ab:64:e2:
         48:ca:34:63:26:4f:e9:3d:ee:cf:2d:9f:65:b3:bb:9e:a7:da:
         ba:f1:35:83:15:43:bf:6d:4a:c0:c3:7e:41:dc:12:79:65:7a:
         c8:aa:c9:9f:c4:52:b2:c2:b2:05:5a:cf:c5:e9:7c:ba:8d:8a:
         fb:d0:8d:4d:68:63:4f:75:c6:d9:60:58:c4:1c:44:15:c3:89:
         d1:e1:33:da:bd:3f:27:4d:93:d5:08:4e:fa:ae:d3:bc:a4:30:
         48:e3:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org