Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/zj48iFqaVgyrHj4r1yTpUeg4qtI.roa
File:                     zj48iFqaVgyrHj4r1yTpUeg4qtI.roa (raw, json)
Hash identifier:          wauBmwMZ3xKC2J8VKP5vNzYMtdupy+pgk8TUv2oKYSc=
Subject key identifier:   CE:3E:3C:88:5A:9A:56:0C:AB:1E:3E:2B:D7:24:E9:51:E8:38:AA:D2
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       0183F76AC0A31683C5E1A3C294EFE6D049D7
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/zj48iFqaVgyrHj4r1yTpUeg4qtI.roa
Signing time:             Thu 20 Oct 2022 22:01:51 +0000
ROA not before:           Thu 20 Oct 2022 22:01:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205570
IP address blocks:        185.237.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f7:6a:c0:a3:16:83:c5:e1:a3:c2:94:ef:e6:d0:49:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Oct 20 22:01:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce3e3c885a9a560cab1e3e2bd724e951e838aad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:38:ad:41:15:82:20:30:17:cb:38:95:97:
                    a0:17:8a:15:21:52:56:8d:82:56:0a:9a:85:3a:1e:
                    d9:fb:28:ee:c8:40:21:8e:5e:37:15:d2:e7:7f:31:
                    33:f1:67:aa:fa:6f:a7:c3:3f:5b:b7:75:6b:91:3c:
                    6e:da:64:c2:3a:fb:08:eb:0f:0d:6b:34:e1:35:2a:
                    67:89:f2:7c:d0:53:62:91:0b:49:ed:4c:8a:2e:63:
                    95:95:8a:78:bb:77:7a:b7:5e:b8:84:62:2e:6a:05:
                    1b:16:4b:7f:a7:02:29:3c:22:c4:e6:18:96:20:39:
                    10:c3:fa:19:03:9d:7c:f8:bd:83:86:0f:ea:c2:18:
                    48:f5:33:15:95:92:1a:02:b5:bf:01:d1:30:bb:cc:
                    c5:e7:d8:c3:99:4f:d7:45:e9:d1:ee:91:14:64:2c:
                    67:d1:f1:2b:69:bd:88:e2:ce:74:ab:d4:b3:4e:3c:
                    7e:34:d1:47:72:35:8a:62:c5:b1:ee:f0:78:79:e9:
                    f8:84:cb:95:01:4c:ae:bc:96:a3:7e:ba:5f:dd:f3:
                    a3:01:f0:d0:38:6d:7d:bc:99:87:5e:79:34:3a:46:
                    83:c5:16:38:b8:21:7b:db:ba:48:3d:fc:d7:9f:b1:
                    fc:90:b8:8f:51:d3:83:fc:e9:fc:cc:d8:d0:0a:45:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3E:3C:88:5A:9A:56:0C:AB:1E:3E:2B:D7:24:E9:51:E8:38:AA:D2
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/zj48iFqaVgyrHj4r1yTpUeg4qtI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:2e:83:8a:c3:1e:7d:94:6d:70:3e:0f:0e:fa:a0:9d:c4:
         44:42:aa:6e:86:9f:fe:9c:38:6e:56:a4:29:b7:e7:ee:5e:4e:
         df:44:b4:1c:33:37:c9:81:9a:8f:ef:35:e3:5a:7d:8e:78:88:
         f5:ce:9e:75:53:f6:95:7e:74:e0:16:39:bb:d1:dd:99:06:80:
         61:fe:52:f1:37:33:73:83:9d:7b:a6:03:c8:3a:e3:8d:29:be:
         78:8b:53:45:ee:04:34:12:b0:fc:5f:f6:c8:76:f5:b2:f0:70:
         11:59:bb:45:31:44:e8:d1:79:3a:cb:2a:40:30:bc:fe:a4:50:
         6d:4c:49:be:ac:b8:93:a0:30:a8:cc:68:22:17:df:63:6e:43:
         d8:bb:bc:59:29:1e:a5:21:82:ad:0e:68:e7:aa:83:b7:da:41:
         98:db:6c:63:b6:4d:60:64:b9:8e:6e:81:6c:c9:cd:55:a8:78:
         d1:82:d5:92:f4:50:2e:a9:98:2c:db:78:a6:00:95:6d:35:53:
         8b:32:2e:ad:f4:c4:eb:eb:0e:05:43:09:05:9b:9d:90:85:7e:
         1a:4f:b1:15:fe:ca:36:b5:ae:08:99:c8:eb:54:13:a6:f5:d5:
         6f:8e:4f:8d:f0:51:a8:34:f5:59:92:dc:bc:52:26:34:58:43:
         5f:97:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org