Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/sb5rWKzg_7nQp2TXEr8frmUI9Jc.roa
File:                     sb5rWKzg_7nQp2TXEr8frmUI9Jc.roa (raw, json)
Hash identifier:          NLcS6goaSfc0VeS5ypQH1lnFfubPz4CagSl5ABaTXOo=
Subject key identifier:   B1:BE:6B:58:AC:E0:FF:B9:D0:A7:64:D7:12:BF:1F:AE:65:08:F4:97
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       022452D7
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/sb5rWKzg_7nQp2TXEr8frmUI9Jc.roa
Signing time:             Sat 01 Jan 2022 01:01:18 +0000
ROA not before:           Sat 01 Jan 2022 01:01:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397373
IP address blocks:        185.251.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35934935 (0x22452d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Jan  1 01:01:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b1be6b58ace0ffb9d0a764d712bf1fae6508f497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:e7:98:32:d8:76:52:2d:ad:ca:a9:e5:56:
                    67:42:ab:99:b9:65:e4:90:d2:41:4c:2e:2c:e8:78:
                    49:12:0a:3a:b2:17:9f:75:34:3c:e8:4e:af:14:55:
                    38:7b:d0:8f:25:14:74:5f:8e:9c:82:8b:8e:aa:73:
                    68:66:75:60:19:ce:57:ce:ca:04:cf:5e:50:ca:03:
                    a4:a3:a2:a0:3a:37:29:c1:61:d6:4a:eb:fd:bc:b5:
                    88:3c:8e:05:a8:07:0d:6b:0a:7d:83:e6:3d:2a:a1:
                    de:a6:59:f9:2c:0b:89:0e:9f:de:0d:5f:c1:bb:87:
                    3d:88:3a:60:5d:41:67:af:eb:60:4e:a2:68:d3:79:
                    72:76:93:de:54:fa:65:02:55:52:f0:d4:93:23:16:
                    6e:e4:54:48:28:c4:7e:95:27:4a:11:26:62:3a:a3:
                    76:7e:cd:7e:c9:7c:85:4c:4d:20:85:1c:43:f3:55:
                    c6:d6:8f:d9:05:71:91:bd:c2:15:ac:1e:25:4f:ad:
                    0f:e5:c2:4e:98:15:b1:2b:4d:8c:bf:d0:98:9c:60:
                    bb:4d:b6:94:b8:24:3c:ff:8f:da:cf:ee:d2:5b:11:
                    0b:2d:8f:84:89:6e:cd:f5:26:88:a0:39:1e:c9:b2:
                    f1:5b:28:87:93:13:8d:af:11:c4:93:42:7c:22:84:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BE:6B:58:AC:E0:FF:B9:D0:A7:64:D7:12:BF:1F:AE:65:08:F4:97
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/sb5rWKzg_7nQp2TXEr8frmUI9Jc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:2b:ae:df:c5:42:97:86:81:24:fc:df:71:5e:06:06:ca:14:
         cf:2d:1b:86:e0:16:21:91:c3:a9:fd:16:a5:d5:1d:e4:bb:bd:
         f9:fe:0b:2a:e0:90:58:72:a7:90:1a:01:a1:2a:57:98:3f:65:
         26:b6:9c:f0:38:d4:f7:43:20:8a:b0:e8:b3:3d:29:e8:1f:da:
         6c:b2:9b:fd:fe:21:9c:77:7c:60:75:52:2f:73:58:a3:e9:80:
         65:75:32:35:82:d1:4e:e4:2e:b8:6c:cc:54:e7:3f:3a:6f:42:
         25:5f:11:14:41:81:b0:d9:c1:ab:67:93:d1:17:7f:7a:ae:06:
         1c:e1:4d:7f:7c:35:b4:57:61:1c:ed:0b:97:f5:a9:7e:0e:bc:
         fb:e5:ae:80:0f:bc:05:d8:5d:42:f4:04:e7:06:ce:21:67:3e:
         ca:49:20:bd:e7:57:ea:81:7b:45:93:d5:7c:3e:d4:6b:ec:f8:
         e7:e6:e4:ef:21:2e:95:0b:05:20:48:38:ab:f6:76:f0:d4:05:
         b8:fb:ff:4f:61:54:75:4f:e8:40:85:6b:12:98:92:a2:9d:30:
         32:d3:b2:f9:6f:d8:4c:63:4f:cb:5e:12:29:72:c3:bd:62:86:
         7f:b4:9c:95:cc:dd:3c:17:07:4d:86:14:44:de:2b:c4:b3:9e:
         96:12:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:49 2024 by rpki-client on console-fra.rpki-client.org