Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/e5MVNl8JKLrh0jQevvMPdmSHMK0.roa
File:                     e5MVNl8JKLrh0jQevvMPdmSHMK0.roa (raw, json)
Hash identifier:          KOGZqCK4YyeKaVRTPCvPlCtcXobNgXP2pBkVdMjh5yY=
Subject key identifier:   7B:93:15:36:5F:09:28:BA:E1:D2:34:1E:BE:F3:0F:76:64:87:30:AD
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       0A3EA50B
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/e5MVNl8JKLrh0jQevvMPdmSHMK0.roa
Signing time:             Sat 01 Jan 2022 09:53:41 +0000
ROA not before:           Sat 01 Jan 2022 09:53:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213157
IP address blocks:        185.254.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171877643 (0xa3ea50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Jan  1 09:53:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b9315365f0928bae1d2341ebef30f76648730ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:39:a8:6d:d8:c4:7a:e1:c1:10:a8:18:9c:
                    53:93:9c:42:e8:4c:45:2e:26:4f:77:d3:43:56:57:
                    e9:ae:58:2a:61:86:d4:da:a9:46:da:f7:55:ca:95:
                    b8:ce:12:08:17:d7:e9:4f:01:26:b4:00:7d:b0:8d:
                    33:99:f3:d4:b9:cb:d9:71:aa:1b:c0:a0:93:c4:72:
                    0d:f2:ea:3f:cf:8e:44:22:c9:3d:2b:ef:57:59:fb:
                    ea:b7:88:07:51:d3:0d:41:7e:39:c0:a5:7b:4c:26:
                    18:6b:31:b6:b7:6d:35:13:4c:6d:a3:81:8f:2e:f4:
                    ff:9b:9e:9b:1a:50:68:59:0a:c3:14:52:9e:12:98:
                    07:12:9e:99:49:e9:d6:7d:8a:59:04:39:7e:64:d0:
                    8a:b8:24:b7:e9:38:52:44:4e:43:cd:f2:eb:ba:19:
                    14:0f:5a:61:b8:34:1a:9a:f4:65:4e:7e:ac:4c:74:
                    71:39:5a:44:c1:ca:43:d2:55:fa:7c:97:e1:21:11:
                    6f:6b:3e:cf:d1:38:3d:2f:2b:86:91:c5:d3:44:62:
                    db:d8:16:11:bb:c8:9d:49:e2:27:b2:f4:03:5c:28:
                    8f:b0:96:0f:4c:88:01:60:0a:8b:ba:5d:9d:a8:09:
                    34:0f:b0:de:36:03:5d:a7:3b:49:f3:70:7f:7b:ef:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:93:15:36:5F:09:28:BA:E1:D2:34:1E:BE:F3:0F:76:64:87:30:AD
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/e5MVNl8JKLrh0jQevvMPdmSHMK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e5:ca:4d:ba:19:82:c5:fe:94:e8:15:04:4c:e7:27:90:f0:
         56:2b:73:53:55:f1:05:3c:ff:94:eb:6f:03:1d:6a:00:78:18:
         0d:ce:f0:e8:46:6c:81:b8:46:9a:36:6a:c9:2e:a7:2f:70:5c:
         c0:3c:cc:08:16:b1:d7:60:4a:a6:74:06:78:79:02:22:ee:45:
         20:49:e3:b2:63:41:8e:95:53:1b:2a:43:cd:32:fc:a0:e0:ab:
         6b:22:37:d7:41:c9:a8:22:88:29:e6:5f:dc:ec:a6:ea:3c:6b:
         d9:15:74:b1:97:13:65:92:35:75:ab:73:04:35:bf:3a:33:ff:
         9f:23:a3:56:b8:2f:92:5e:fd:02:05:06:4a:7b:f6:9c:b9:65:
         9e:ad:7f:25:bd:28:bf:67:85:9c:27:81:32:3b:3d:af:b4:05:
         db:97:64:82:9e:84:60:10:98:00:ae:46:9e:8b:ec:d3:ad:c0:
         fd:8a:35:47:cc:0b:ae:8c:85:81:cd:28:3f:47:39:6b:19:4f:
         4b:71:d1:e0:9d:f5:de:64:ec:62:dd:61:ee:f8:24:b3:20:9f:
         7a:ff:9e:15:3f:df:5c:5e:5f:6f:92:90:f0:7d:07:1d:47:1c:
         08:e3:d1:91:94:62:d3:fa:ff:10:11:9d:b6:7a:82:e4:17:5f:
         3c:ab:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org