Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/TqXH1eytdcVwZ09ElThKT304Zuk.roa
File:                     TqXH1eytdcVwZ09ElThKT304Zuk.roa (raw, json)
Hash identifier:          Nhd23nrcZIYNQrxc97bjhSl43R2COnVR4XHbNhhYX4w=
Subject key identifier:   4E:A5:C7:D5:EC:AD:75:C5:70:67:4F:44:95:38:4A:4F:7D:38:66:E9
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       0183F76ABFF6556C21A33637244F74A0B6CE
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/TqXH1eytdcVwZ09ElThKT304Zuk.roa
Signing time:             Thu 20 Oct 2022 22:01:51 +0000
ROA not before:           Thu 20 Oct 2022 22:01:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        185.237.82.0/24 maxlen: 24
                          185.237.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f7:6a:bf:f6:55:6c:21:a3:36:37:24:4f:74:a0:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Oct 20 22:01:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ea5c7d5ecad75c570674f4495384a4f7d3866e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:db:21:10:21:6d:93:ee:23:54:07:bd:ba:
                    33:3b:2e:c1:04:d8:c2:87:3b:46:29:62:e2:94:01:
                    27:b9:af:a5:d9:73:c3:06:bf:c8:0f:c3:ea:fb:db:
                    85:04:4d:69:71:f4:7c:5d:33:36:ec:a9:bd:50:b6:
                    bb:70:85:ff:b1:f4:07:18:d7:37:5d:0c:7a:85:1c:
                    a7:5c:ba:31:ae:09:12:f1:e4:d1:c5:5c:25:13:1b:
                    5b:6e:ed:f4:17:61:d2:dd:65:32:59:2d:9e:56:f6:
                    bf:1c:69:e9:7b:43:6a:5c:d3:fd:99:7e:42:cb:71:
                    97:e9:a7:f3:b5:a6:50:90:52:a3:40:7c:9f:e2:ab:
                    b3:59:c0:90:3c:72:7b:26:93:89:0b:0e:39:b7:14:
                    fb:2e:b8:2a:6a:95:29:0e:dd:a2:04:af:37:18:86:
                    12:d6:fb:07:38:31:f2:05:e8:66:9c:1d:b0:eb:6f:
                    ed:c3:b1:7c:d3:e8:1d:a2:8f:ff:e2:b0:f0:0c:2d:
                    af:b9:5a:e4:40:12:02:08:d0:46:a0:87:85:9e:6d:
                    49:b3:f6:4d:29:93:51:c5:f4:ba:a9:a5:17:9d:d4:
                    7d:e0:1b:9b:06:e4:6c:cb:8e:fe:e6:d2:00:c2:b0:
                    65:0b:83:ce:cc:25:44:3b:91:7c:48:fd:be:5c:d1:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A5:C7:D5:EC:AD:75:C5:70:67:4F:44:95:38:4A:4F:7D:38:66:E9
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/TqXH1eytdcVwZ09ElThKT304Zuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:96:c0:8b:ed:67:91:57:bd:5e:7a:3b:16:d2:51:60:e7:
         4f:f6:a2:bf:38:0e:d3:52:ae:33:b4:1e:5f:49:da:1f:76:d8:
         75:fc:1b:63:ca:df:3b:da:0a:1c:aa:5e:37:ec:04:b9:5b:bf:
         64:18:a6:ef:ee:27:48:c0:e9:b4:9c:69:d5:3d:24:5a:78:44:
         71:2f:13:fc:ec:8a:c7:1e:ff:c2:a4:bd:09:0d:aa:3f:02:3c:
         3b:74:6a:2f:2c:bb:24:74:67:73:69:35:c7:05:11:5f:6d:aa:
         85:27:51:76:89:0d:07:cd:a8:f4:89:5a:e3:b0:f4:03:18:3c:
         e2:c7:82:c7:5c:dc:f5:88:48:c2:88:ba:9a:12:7a:a0:5c:ea:
         93:36:6d:b5:a9:b7:0b:09:77:5b:62:53:94:0c:49:cd:aa:d0:
         3b:9c:bd:72:fb:76:b5:90:b6:fb:95:a1:5d:66:05:a1:80:87:
         d5:0f:29:c8:75:17:1e:25:a2:ff:8f:76:9d:08:54:59:27:1d:
         5f:37:24:0e:32:62:71:66:28:78:db:c2:33:69:c4:a3:ba:78:
         59:ec:61:65:85:7f:a6:9f:ad:e7:1a:53:82:52:5a:e4:31:e7:
         51:56:0f:2c:0b:d3:30:b3:74:3b:79:77:47:5d:1b:0c:e4:53:
         ad:d0:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org