Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/EFi2eSc3Po5rrduhh5u1Ibpj-is.roa
File:                     EFi2eSc3Po5rrduhh5u1Ibpj-is.roa (raw, json)
Hash identifier:          qraYBHuuULdbk9EhtHxsYJzs+FRrM4ZmYzidGBtP55s=
Subject key identifier:   10:58:B6:79:27:37:3E:8E:6B:AD:DB:A1:87:9B:B5:21:BA:63:FA:2B
Certificate issuer:       /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial:       08C482E8
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/EFi2eSc3Po5rrduhh5u1Ibpj-is.roa
Signing time:             Sat 01 Jan 2022 10:56:50 +0000
ROA not before:           Sat 01 Jan 2022 10:56:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48602
IP address blocks:        185.140.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147096296 (0x8c482e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
        Validity
            Not Before: Jan  1 10:56:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1058b67927373e8e6baddba1879bb521ba63fa2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:78:4c:5a:03:af:cf:f1:e6:38:cf:c3:54:
                    a0:e6:f1:77:88:a0:8f:ac:11:2e:f1:3b:df:97:4f:
                    e2:c8:26:0a:33:1b:9b:03:37:06:34:36:c6:8c:ed:
                    81:85:c4:4e:34:33:0d:9c:bf:d3:cd:c6:4d:cb:2d:
                    b2:c3:ce:c7:c0:ae:85:9c:92:55:5a:d9:66:bf:d1:
                    ab:78:74:ba:20:19:41:12:5c:b8:2b:85:f5:76:00:
                    7b:91:7a:15:d0:61:82:e5:5f:cb:3f:d7:64:91:69:
                    a1:32:98:1f:00:92:0c:d8:ef:57:b3:51:a3:a5:6f:
                    54:0d:ff:9e:34:dc:ea:cd:e8:94:f8:26:3b:12:25:
                    98:06:17:be:8a:2e:41:f2:d4:6f:14:0d:ff:19:94:
                    1a:15:c7:93:f9:fc:97:02:f3:31:2a:4c:1f:18:1d:
                    69:ee:18:6f:02:7d:b6:a7:17:11:31:86:30:8e:59:
                    9d:be:2f:06:b0:3e:66:1d:96:36:eb:0b:f2:da:78:
                    c6:81:97:d1:ee:b0:8c:40:7e:e9:75:57:20:b5:1e:
                    e9:99:a9:41:cd:c0:29:29:43:fc:64:52:ec:0a:74:
                    d1:56:ca:e3:38:58:ec:a4:a2:85:c8:4d:f8:a4:0b:
                    d8:b4:fd:96:f0:70:93:e1:6a:3a:fd:c8:ea:80:09:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:58:B6:79:27:37:3E:8E:6B:AD:DB:A1:87:9B:B5:21:BA:63:FA:2B
            X509v3 Authority Key Identifier:
                keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/EFi2eSc3Po5rrduhh5u1Ibpj-is.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.140.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:13:27:22:7e:9b:20:a0:af:7d:fa:d1:11:ff:aa:d8:70:d4:
         1c:84:59:70:2c:8f:c0:3e:ea:88:7c:35:5f:1d:5e:44:ea:68:
         7b:5e:d4:7e:80:89:05:4e:87:85:65:21:7e:35:9c:2c:d0:c8:
         28:20:29:d0:e9:4b:7e:4e:29:cd:ff:45:5b:39:ad:29:11:12:
         73:c6:86:4f:4a:5b:18:d3:43:c0:91:98:02:42:ba:25:e4:46:
         f3:64:fa:08:11:c4:4b:31:b7:00:8d:9b:3d:2a:8f:7e:3d:e8:
         37:ee:16:de:92:e5:2f:1c:36:4a:14:1c:c7:e8:53:07:81:ba:
         4c:c0:35:85:a1:1e:97:0b:67:d1:86:74:ee:19:39:1c:ed:19:
         6e:94:98:3f:62:1f:3c:24:81:8d:af:34:ab:26:a7:f0:0a:c0:
         5f:3c:69:6f:3d:d5:78:04:7e:dc:f6:5a:92:d1:17:24:47:be:
         80:af:96:16:40:e3:38:60:95:ed:23:a4:27:ac:6e:55:30:d5:
         9b:11:20:97:02:d4:76:0a:70:45:ee:05:bb:ce:04:2d:31:32:
         1c:4b:7a:9b:a3:1f:05:d8:29:e8:98:64:e1:ae:72:9e:d1:cc:
         aa:c5:a3:83:20:5a:f3:f1:7c:66:78:c0:f0:9b:8c:ad:b6:cc:
         d5:80:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:04 2024 by rpki-client on console-fra.rpki-client.org