Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/eCPQhgWvhs7sT0T54_7SRxt-mjc.roa
File:                     eCPQhgWvhs7sT0T54_7SRxt-mjc.roa (raw, json)
Hash identifier:          JXPFgubYsWMF2X+/1lA84myQKVh/MC34b1MQfC0ODw8=
Subject key identifier:   78:23:D0:86:05:AF:86:CE:EC:4F:44:F9:E3:FE:D2:47:1B:7E:9A:37
Certificate issuer:       /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial:       0FF72A3B
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/eCPQhgWvhs7sT0T54_7SRxt-mjc.roa
Signing time:             Sat 01 Jan 2022 02:58:54 +0000
ROA not before:           Sat 01 Jan 2022 02:58:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62381
IP address blocks:        185.37.80.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267856443 (0xff72a3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08759158de234b754b7150f21933096c1094aac4
        Validity
            Not Before: Jan  1 02:58:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7823d08605af86ceec4f44f9e3fed2471b7e9a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:04:e0:7c:82:d6:1a:f8:8a:75:4a:5f:d8:
                    eb:a4:e8:b7:39:66:38:18:5c:7e:04:85:06:15:33:
                    3d:fb:81:36:5b:de:10:13:3d:d6:74:01:87:4d:c9:
                    70:16:bd:19:54:8f:e3:da:91:73:d8:b3:94:7d:de:
                    dc:f3:d0:49:a1:61:25:cc:1b:fa:72:9a:4a:ed:aa:
                    2a:f7:67:75:4a:f3:74:d0:70:d1:50:1d:c8:69:61:
                    76:ff:c1:af:ae:4e:ed:ce:e0:19:a0:0e:43:35:40:
                    7b:45:2f:59:a0:71:4b:f9:b0:91:13:cc:b3:80:95:
                    31:9e:3e:11:a9:ef:22:0a:2f:29:34:6c:ba:de:64:
                    c0:74:2b:6f:fb:a3:37:65:98:db:32:06:a4:97:17:
                    ab:a9:3e:3a:25:e5:1e:33:a7:e0:13:97:55:c2:62:
                    5a:50:09:2e:55:02:f9:ce:64:c6:5c:61:4c:0f:df:
                    11:98:8b:d2:6c:25:cd:16:72:24:e1:52:f6:3a:a8:
                    43:3a:38:73:64:6d:92:d8:6c:45:95:15:a7:63:0d:
                    f8:4c:a2:bd:f1:10:f5:92:97:2c:4f:7d:26:d2:68:
                    30:fa:0b:50:a2:5e:2c:5f:e3:53:b8:0f:26:06:05:
                    6d:e6:ef:3b:07:c4:4c:49:b4:42:4b:a0:d5:d5:47:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:23:D0:86:05:AF:86:CE:EC:4F:44:F9:E3:FE:D2:47:1B:7E:9A:37
            X509v3 Authority Key Identifier:
                keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/eCPQhgWvhs7sT0T54_7SRxt-mjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:ae:18:3f:e8:37:68:f9:0d:f8:53:a5:be:35:d8:75:56:
         a0:a2:a0:23:02:8f:a9:0f:da:cf:7f:e3:96:4e:e0:25:ae:3c:
         e2:3f:62:c5:63:26:c0:01:68:14:3d:6f:63:2f:e7:3a:11:f2:
         38:ae:04:a2:1a:92:8d:2f:06:75:a5:49:98:b4:07:58:ba:4e:
         79:77:1c:b9:b7:e2:ba:a4:36:53:9d:66:39:0b:1c:c8:dc:8d:
         37:3f:a8:f5:6b:68:5e:ee:b0:92:10:2e:c9:8c:ea:6e:8c:3d:
         ec:80:6f:0a:3a:fe:a8:57:90:63:74:9f:2b:84:99:69:d4:01:
         4f:ac:03:b8:cc:14:ad:b3:a2:1f:8f:b4:a2:5f:6e:b8:87:88:
         91:60:83:aa:96:21:ee:b5:bd:7a:eb:45:3b:16:d4:ab:d4:b1:
         3b:c6:d5:fc:e5:f1:38:79:f3:9e:5d:f1:87:3b:aa:e2:f9:61:
         56:0d:b1:35:d3:14:4c:0f:d0:90:63:cf:4a:ae:aa:f5:96:db:
         a4:31:f5:24:b4:e3:38:9c:c0:25:5d:9c:97:d9:92:d0:fd:bc:
         64:5c:6e:ed:c9:58:b6:8d:b6:ae:a2:ca:42:6c:02:7a:2a:c3:
         b8:dc:e3:1c:d1:00:08:5c:76:cb:2a:95:8b:77:0c:47:8e:03:
         c5:b2:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org