Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/rMOG_QgO7a76tBPn9ZhdtWvhszE.roa
File:                     rMOG_QgO7a76tBPn9ZhdtWvhszE.roa (raw, json)
Hash identifier:          sLgkP1pGRvHb7qkxrp9rjmpdTUwb4z7uAAT2tfY12jY=
Subject key identifier:   AC:C3:86:FD:08:0E:ED:AE:FA:B4:13:E7:F5:98:5D:B5:6B:E1:B3:31
Certificate issuer:       /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial:       03D17D7E
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/rMOG_QgO7a76tBPn9ZhdtWvhszE.roa
Signing time:             Sat 01 Jan 2022 10:55:19 +0000
ROA not before:           Sat 01 Jan 2022 10:55:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61386
IP address blocks:        185.167.124.0/22 maxlen: 22
                          185.167.124.0/24 maxlen: 24
                          185.167.125.0/24 maxlen: 24
                          185.167.126.0/24 maxlen: 24
                          185.167.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64060798 (0x3d17d7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
        Validity
            Not Before: Jan  1 10:55:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=acc386fd080eedaefab413e7f5985db56be1b331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e8:a1:be:40:16:76:ec:c2:42:81:aa:85:e4:
                    12:bf:82:29:07:93:3b:1b:8b:ac:62:bf:26:26:a5:
                    a7:74:37:e2:f2:5d:a9:ba:43:40:f9:53:69:dd:d5:
                    0d:1c:1a:41:47:b8:6c:70:4a:61:7b:38:4f:f4:84:
                    6e:a0:27:7c:67:e8:e1:88:64:2a:f0:2d:a8:11:35:
                    89:2e:58:19:63:9d:db:0a:e0:2a:53:b3:9a:43:4d:
                    71:35:d7:21:e6:e6:e4:5e:f0:8f:dd:f5:38:ac:c0:
                    ec:84:2e:4e:47:97:30:f8:45:d9:f8:e0:20:11:ad:
                    fc:87:eb:7a:3b:81:ec:f8:e2:f1:a0:d2:d4:30:1b:
                    a8:43:46:df:9a:38:b3:96:a8:3e:ac:6a:30:2a:f8:
                    f0:ec:a8:06:12:c5:d3:22:c9:db:83:70:4c:78:d9:
                    45:43:75:a1:dc:d5:87:8d:75:35:7d:c5:d0:04:14:
                    e8:10:f6:40:54:03:4e:79:64:07:ac:dd:30:a0:00:
                    b2:2e:e2:80:db:ed:d2:37:b0:d2:fc:a6:d8:81:a0:
                    2a:f6:cd:55:1b:ef:aa:9c:5b:39:4e:88:a5:13:57:
                    4e:69:8f:c9:e7:71:d2:be:b8:28:ae:24:d6:36:21:
                    fb:d4:a3:3c:49:ec:df:be:92:ce:c8:8d:ea:fa:35:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C3:86:FD:08:0E:ED:AE:FA:B4:13:E7:F5:98:5D:B5:6B:E1:B3:31
            X509v3 Authority Key Identifier:
                keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/rMOG_QgO7a76tBPn9ZhdtWvhszE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:87:4f:bc:6b:75:e0:d7:11:06:5a:fb:45:36:92:bc:a7:
         fa:28:9f:1b:ec:81:bd:90:e2:9b:d4:32:e8:a5:c4:9d:f2:5e:
         4d:dc:cf:a4:71:02:11:1f:81:ba:c4:bb:22:ad:10:99:ee:28:
         4d:61:2c:a6:df:28:d8:7c:34:6b:f1:c3:f2:c9:5c:e2:82:c4:
         c9:60:ea:61:3e:fc:e4:c0:73:b6:ae:2a:d6:31:31:19:94:05:
         df:72:55:1c:91:33:50:7d:9c:6b:c9:db:b1:4f:ed:b7:61:1c:
         85:51:51:14:a5:01:87:c7:83:d2:b1:23:b1:9f:46:63:d6:4b:
         48:6e:7f:7f:4c:da:b8:a3:56:7b:66:49:e9:65:73:2d:5b:20:
         20:73:a8:89:76:0a:00:73:57:9c:c1:26:f5:d5:5c:69:5c:1a:
         5b:3e:26:e1:d0:dd:3b:cb:a5:42:c8:63:73:41:f0:76:a9:d7:
         2a:82:df:e0:98:74:8e:1b:a1:41:86:22:46:98:e6:ab:d2:2d:
         8f:b9:da:59:62:7a:6c:c4:05:98:c2:e9:ec:86:fa:ac:6d:5f:
         3b:94:a5:4c:60:1b:91:8e:bc:43:a9:c1:b3:b4:a0:56:47:06:
         63:d1:60:63:35:83:91:61:5e:57:9e:ce:d6:e9:7f:74:14:a7:
         09:72:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:58 2024 by rpki-client on console-ams.rpki-client.org