Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa
File:                     S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa (raw, json)
Hash identifier:          ZtBs8fdRwSfhrXAA8qEpP8iG0NFXFSyn4rxbLIrtPCc=
Subject key identifier:   4B:56:0B:2C:FE:9D:27:7A:73:74:E7:8E:FA:A5:57:E2:80:97:88:CB
Certificate issuer:       /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial:       01823B6185B291EFFB1E5D0165E3B4E02968
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa
Signing time:             Tue 26 Jul 2022 16:40:23 +0000
ROA not before:           Tue 26 Jul 2022 16:40:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212058
IP address blocks:        185.197.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3b:61:85:b2:91:ef:fb:1e:5d:01:65:e3:b4:e0:29:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
        Validity
            Not Before: Jul 26 16:40:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4b560b2cfe9d277a7374e78efaa557e2809788cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:2c:bb:be:b0:f2:80:5f:bb:e1:bf:c2:3d:
                    6a:f0:65:d8:36:6e:64:de:bd:5a:cd:41:4b:46:d7:
                    8a:74:f2:f1:e7:15:63:98:29:98:b1:bd:a9:79:52:
                    85:52:4f:c6:61:01:4f:57:98:d0:a4:1c:25:95:7a:
                    08:6b:05:e3:ba:2b:9c:20:28:c2:b3:37:ab:aa:a2:
                    75:15:82:69:82:dd:35:7d:3b:82:a6:82:6b:41:f2:
                    59:86:03:8c:f4:d1:83:54:0f:90:e0:76:99:78:e6:
                    2c:81:cd:3f:87:15:ca:3d:69:d1:cd:f8:6e:6d:9b:
                    4f:1f:d1:0a:21:c4:98:9b:0f:ca:b2:af:31:c1:ee:
                    c5:46:58:bf:e9:bc:ab:4c:0a:79:12:8b:33:97:b9:
                    df:6c:01:44:b3:54:e4:09:78:da:a1:3c:3e:3c:e6:
                    77:7f:57:d8:d6:e1:98:86:09:42:c0:33:78:a2:2b:
                    06:05:b8:f3:26:31:d6:e2:6c:fd:e2:a3:1b:af:f9:
                    e7:cf:8d:d7:20:af:a5:4f:6c:41:a8:46:1b:11:a7:
                    16:ad:ed:21:c7:99:5e:87:44:a5:be:1b:cf:40:c0:
                    df:c3:a2:da:14:b6:3a:2a:26:68:c3:e2:f6:21:22:
                    dc:de:28:90:2b:1f:bb:c1:d9:aa:26:0b:6d:ff:88:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:0B:2C:FE:9D:27:7A:73:74:E7:8E:FA:A5:57:E2:80:97:88:CB
            X509v3 Authority Key Identifier:
                keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bd:f6:c2:fa:77:25:3e:14:0e:a6:9c:11:56:9b:bc:7a:4e:
         8f:40:3b:4c:bf:9b:6e:83:2e:d3:1c:df:cf:a7:33:f3:44:d8:
         35:b1:78:9c:16:fa:ea:c0:4f:b7:fb:f2:29:19:04:b4:7a:e4:
         3c:2e:4e:26:22:95:82:58:19:d4:00:f6:34:84:cf:1f:97:a6:
         3b:7e:88:bb:73:da:3b:00:ae:c6:f3:0b:bc:88:43:03:0a:ca:
         d5:e0:7c:9c:13:f6:10:64:2f:bf:68:af:2a:db:1a:a5:7b:3f:
         7c:fc:e1:6b:05:c7:e3:75:9f:6d:d3:a7:7a:76:8d:9a:ae:5e:
         8a:23:be:b6:12:57:4d:7c:b7:6a:dc:a5:a5:b6:d0:e6:c2:b5:
         de:20:d9:2b:13:45:53:8c:dd:b4:43:40:11:f0:56:d7:0b:b6:
         52:c2:2a:7f:fd:ae:a9:d8:86:ab:da:66:b8:f9:6e:96:a9:cd:
         78:c6:15:f7:d0:d6:52:d6:df:9c:99:92:98:af:9d:bd:9a:40:
         7e:dd:2f:36:45:7a:b5:68:08:45:67:79:92:6f:fa:82:2e:2a:
         b4:4e:c3:10:26:65:ba:92:3b:a2:e2:b3:42:d3:fb:41:f2:ba:
         99:0f:1d:28:3f:8d:48:f6:0a:bc:11:f7:59:9b:5b:d9:1d:4c:
         dc:3c:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:11 2024 by rpki-client on console-ams.rpki-client.org