Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Rpc6VGyz5XWB2OhbKqbCuByAQtg.roa
File:                     Rpc6VGyz5XWB2OhbKqbCuByAQtg.roa (raw, json)
Hash identifier:          5O1jCcKWnsLUAD85k+a5TyVuQi9LWvfyaYwR/ZM3TB0=
Subject key identifier:   46:97:3A:54:6C:B3:E5:75:81:D8:E8:5B:2A:A6:C2:B8:1C:80:42:D8
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       0AECD5AE
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Rpc6VGyz5XWB2OhbKqbCuByAQtg.roa
Signing time:             Wed 09 Mar 2022 19:42:15 +0000
ROA not before:           Wed 09 Mar 2022 19:42:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        185.237.82.0/24 maxlen: 24
                          185.237.81.0/24 maxlen: 24
                          185.237.83.0/24 maxlen: 24
                          185.86.81.0/24 maxlen: 24
                          185.86.80.0/24 maxlen: 24
                          185.205.16.0/24 maxlen: 24
                          185.86.83.0/24 maxlen: 24
                          185.86.82.0/24 maxlen: 24
                          185.205.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183293358 (0xaecd5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Mar  9 19:42:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46973a546cb3e57581d8e85b2aa6c2b81c8042d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:cb:69:f0:b0:9e:25:aa:cb:35:80:18:ac:
                    4a:9c:59:65:17:1a:71:09:37:53:c5:cb:40:66:25:
                    ab:81:5c:35:38:0c:03:85:0b:7b:07:32:68:68:3e:
                    ff:47:d4:94:b9:b5:2d:6f:8e:25:6a:76:b8:23:ce:
                    60:cf:8c:fd:67:1e:3d:a5:41:68:60:e6:7e:ce:ac:
                    7f:14:f4:74:de:84:60:77:17:0d:36:e2:51:fa:fb:
                    a5:f8:30:c4:ba:d4:30:ef:98:19:3a:74:96:58:92:
                    05:84:35:e2:fe:b8:6b:4f:9a:71:6b:7b:2d:c5:6c:
                    fd:eb:d2:ae:fc:a5:53:7e:ec:f8:45:d1:dc:f3:02:
                    b5:84:17:ad:29:c6:60:30:f0:8d:89:f1:c2:8a:c5:
                    1f:b8:36:30:4f:54:0e:24:e1:e1:c4:6a:19:6f:a8:
                    12:be:a7:61:94:18:8b:05:7d:0b:af:02:16:30:bc:
                    4e:41:e9:ee:b4:1f:49:9e:91:53:f9:55:51:c5:be:
                    e7:8c:00:df:46:eb:98:0f:8c:b1:e2:4a:b4:86:3a:
                    e9:60:41:5c:e6:23:af:36:4b:89:2f:9f:c3:85:3f:
                    f2:a0:1c:65:5f:b8:74:38:4b:20:80:71:dc:ed:ae:
                    f9:8b:fc:08:0c:35:ac:4c:84:be:61:87:75:3d:7d:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:97:3A:54:6C:B3:E5:75:81:D8:E8:5B:2A:A6:C2:B8:1C:80:42:D8
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Rpc6VGyz5XWB2OhbKqbCuByAQtg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.86.80.0/22
                  185.205.16.0/24
                  185.205.19.0/24
                  185.237.81.0-185.237.83.255

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:94:44:dd:dc:ca:d6:c4:c3:ef:3c:cd:df:29:3d:6f:02:
         48:1b:17:50:7d:c4:0e:fb:5d:8d:c9:e6:ad:83:80:c0:87:a2:
         a1:a0:73:a2:9e:b0:c5:f8:45:dc:17:6c:02:e2:65:7c:c5:80:
         1e:e0:0f:ce:0e:ca:9d:e3:8c:28:84:bf:1f:53:06:b1:6b:ed:
         08:9c:9a:1b:87:da:d9:a7:54:47:5f:e1:d9:94:03:f7:93:c1:
         90:fc:05:08:72:5f:41:b5:e4:f3:63:bf:46:03:fa:08:7d:fc:
         07:82:c2:bb:a9:0a:a9:a4:51:38:cf:0d:cd:51:47:2b:68:aa:
         57:74:bf:93:9a:06:06:0d:78:46:27:be:3f:46:20:3a:da:4a:
         93:c9:57:aa:c2:fd:6e:3e:04:46:9b:24:87:c6:d7:62:9a:13:
         9d:b5:c8:09:d5:3a:fe:1c:a7:4d:9b:39:d0:43:c1:70:0f:a3:
         72:b0:1d:f1:48:69:db:6d:2b:a6:e4:87:b5:a8:5a:95:26:d8:
         47:90:53:90:3a:ae:c1:85:6c:5a:58:26:b7:b3:8d:05:90:e2:
         4b:81:9d:17:7a:92:3d:90:f3:cd:27:6b:c1:66:93:0b:53:f7:
         b4:95:5b:ce:19:f4:b8:7c:92:b2:4c:45:14:66:0f:5d:a1:a8:
         f0:9f:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org