Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/52uqMewQa5elseknNSjs8OvJix8.roa
File:                     52uqMewQa5elseknNSjs8OvJix8.roa (raw, json)
Hash identifier:          o77/rFofK8PBHujpG2gqdmfliRpDiYHF/F/t34eaeJ8=
Subject key identifier:   E7:6B:AA:31:EC:10:6B:97:A5:B1:E9:27:35:28:EC:F0:EB:C9:8B:1F
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       03C800
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/52uqMewQa5elseknNSjs8OvJix8.roa
Signing time:             Thu 02 Jun 2022 08:19:20 +0000
ROA not before:           Thu 02 Jun 2022 08:19:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1820
IP address blocks:        185.170.192.0/22 maxlen: 32
                          195.66.93.0/24 maxlen: 32
                          185.45.244.0/22 maxlen: 32
                          193.16.47.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247808 (0x3c800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jun  2 08:19:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e76baa31ec106b97a5b1e9273528ecf0ebc98b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:44:5e:89:e5:45:b6:a0:72:06:bf:8e:d5:
                    73:ec:e0:5d:6a:fc:bb:c4:d6:12:20:e6:b5:61:b5:
                    a5:00:10:8f:92:82:66:88:cb:6c:d2:71:26:ca:65:
                    f2:58:90:c1:64:7d:6b:64:36:30:ba:d8:40:ad:68:
                    33:e4:29:9a:88:a6:fc:40:9e:99:0b:2f:4c:f1:1b:
                    d2:d8:39:d6:3c:5b:16:c6:22:90:23:7a:52:2e:bc:
                    a3:83:bd:e2:bb:fe:f7:95:56:66:82:47:26:cc:5c:
                    51:9b:91:ee:8c:4a:17:4f:4b:1b:48:93:96:95:c6:
                    d4:8b:14:e7:10:15:b1:a8:22:3f:9e:ef:f7:02:2e:
                    29:17:2a:e5:c4:41:3c:c8:bb:e7:d7:8a:7f:1b:28:
                    1d:c3:e4:1c:dd:47:0a:c2:55:d2:42:39:ec:48:aa:
                    84:29:21:8e:7c:82:9b:c4:1f:a0:ae:95:ab:90:94:
                    cf:93:5e:60:26:76:75:00:2b:6a:a2:1d:01:24:ac:
                    d9:3f:8b:8e:54:2b:74:d2:de:99:a7:23:48:71:f4:
                    59:70:05:4a:f1:b2:a8:cb:3a:e8:bc:55:20:ea:bc:
                    e0:98:15:96:f9:36:f3:a3:83:bc:3f:67:74:49:bb:
                    6e:22:78:a7:cc:f2:3e:d2:12:6c:32:4f:fc:4c:07:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:AA:31:EC:10:6B:97:A5:B1:E9:27:35:28:EC:F0:EB:C9:8B:1F
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/52uqMewQa5elseknNSjs8OvJix8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.45.244.0/22
                  185.170.192.0/22
                  193.16.47.0/24
                  195.66.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:40:3b:67:d0:fb:87:42:03:c0:0f:4d:a2:b8:0f:0d:2e:
         a4:d3:04:2b:14:0e:2a:7e:a6:eb:41:5b:fd:f2:36:fe:5c:96:
         a7:fe:3d:f3:75:0f:54:d5:71:11:f9:fa:71:82:47:ca:1a:f9:
         e1:de:4b:a8:f7:93:5d:76:84:a7:58:12:3c:ba:aa:9f:e1:5b:
         98:1c:ed:a1:c6:3a:da:74:c3:2c:5f:a5:d5:0b:02:c0:0f:5f:
         82:f0:8f:6e:83:67:69:3b:d0:58:a5:72:fb:e6:66:cf:06:4f:
         96:e3:6a:24:7d:af:60:af:42:76:39:9d:d7:04:cf:61:7f:be:
         8d:2f:82:80:83:5a:04:1f:0d:4b:06:fa:5a:b6:29:3f:ef:32:
         c4:19:2c:e6:8d:eb:a4:ce:2e:25:4c:a0:f2:fb:50:84:5b:81:
         2d:6e:26:c8:ce:ea:8f:ab:20:fe:94:ab:06:31:39:44:8e:62:
         85:4c:e1:b8:64:77:8d:29:8b:b3:18:f6:c4:ec:e9:fa:00:f0:
         e2:c0:0e:a8:5c:ab:a6:95:f6:8b:ff:30:e7:e5:c4:71:22:5d:
         85:85:e8:e0:38:6d:35:b0:46:06:14:74:ec:33:65:c9:8f:b2:
         31:f1:18:99:01:37:a1:69:1c:97:9a:03:84:e9:48:2e:c0:41:
         d5:46:2e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org