Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6bxRjQiXMqKB8NAsPjby4tE9r6Y.roa
File:                     6bxRjQiXMqKB8NAsPjby4tE9r6Y.roa (raw, json)
Hash identifier:          X5r2iQ2j7KMJFMrWLwmE0D3I9gb8O5p5oyY49fr5RnY=
Subject key identifier:   E9:BC:51:8D:08:97:32:A2:81:F0:D0:2C:3E:36:F2:E2:D1:3D:AF:A6
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       01F0F9C4
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6bxRjQiXMqKB8NAsPjby4tE9r6Y.roa
Signing time:             Sat 01 Jan 2022 11:55:49 +0000
ROA not before:           Sat 01 Jan 2022 11:55:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.210.168.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32569796 (0x1f0f9c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Jan  1 11:55:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9bc518d089732a281f0d02c3e36f2e2d13dafa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:1a:c5:01:10:64:95:f9:fc:0b:84:42:86:
                    99:5f:90:15:80:a8:8f:99:4f:a3:60:df:52:f4:ca:
                    22:29:ac:74:ab:9b:ee:09:ff:66:c9:5e:6d:d3:63:
                    24:9e:d3:aa:95:ec:58:bf:04:3d:f5:63:db:d8:c5:
                    94:69:c7:3f:eb:a4:c2:a6:68:09:1b:7d:17:df:60:
                    2d:39:99:48:db:6c:6a:4f:7e:7c:b1:a1:f1:96:7f:
                    44:21:60:74:e7:69:e7:6a:2a:3c:01:5e:a8:a0:2f:
                    8a:46:86:53:c4:f9:67:a9:43:11:47:e7:b4:cd:e7:
                    67:86:35:84:bf:56:cc:7b:b0:10:1c:85:68:10:1d:
                    d5:5b:7e:24:67:06:ec:75:a6:b7:e5:2c:53:84:75:
                    73:34:04:a8:fb:0a:13:bc:ca:42:39:5f:19:a3:ff:
                    2b:d4:c5:bc:82:5a:ae:42:4c:a8:f4:f6:f9:4f:50:
                    b7:5c:04:35:e9:e7:d8:1f:48:d0:74:47:c5:ab:03:
                    6a:6f:cd:36:68:f2:a2:fb:ca:ff:47:7c:b7:4a:35:
                    b4:c3:d7:c0:bb:36:72:6b:b3:3b:b2:8f:11:49:5c:
                    e1:80:b3:96:27:c5:36:33:c5:23:88:33:c1:08:27:
                    95:11:9a:9a:ce:f1:0c:ec:38:3a:7f:06:7b:c7:d6:
                    d1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:51:8D:08:97:32:A2:81:F0:D0:2C:3E:36:F2:E2:D1:3D:AF:A6
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6bxRjQiXMqKB8NAsPjby4tE9r6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:49:16:b8:96:4f:72:f4:9a:03:b4:f6:96:1d:0f:ac:68:
         3d:8d:9a:83:d5:eb:49:89:4d:7f:b1:39:f9:0f:cb:f8:de:cb:
         d3:e7:2c:c9:0f:27:4b:e0:47:60:1d:87:66:36:ee:01:4b:d6:
         eb:30:47:08:92:e8:31:40:2b:04:20:7f:85:27:6c:97:3c:28:
         2b:86:7c:49:46:20:51:8e:f7:6b:82:86:3e:97:3c:cd:90:52:
         1b:3c:8f:61:6b:25:d6:34:b4:63:0d:42:d1:fe:67:ef:45:52:
         fc:50:67:07:19:98:32:cf:8d:23:ef:56:a0:a2:4a:ed:58:43:
         8b:39:a3:aa:8f:de:5d:8e:28:7d:84:f6:d7:16:f7:18:2c:17:
         26:83:62:08:f4:99:58:63:bf:3d:81:b1:96:d6:30:3a:a7:43:
         0a:93:b0:38:00:aa:8a:9f:94:08:6f:78:7f:b5:1b:5c:60:13:
         a8:e1:83:ea:ac:b8:03:a3:9b:96:61:be:4a:b9:78:35:7f:65:
         1f:69:47:c8:ce:1b:f1:c6:97:88:c2:66:3b:1c:5e:4e:7d:b5:
         db:73:3a:01:9d:8a:67:0a:99:06:78:6f:23:89:f3:bb:2e:09:
         38:48:b1:21:5a:c5:fb:52:e1:bd:0d:3b:13:9f:6a:9d:f5:9c:
         40:5f:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org