Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/axWaJbQWohWKHMKbn13yehNHaPg.roa
File:                     axWaJbQWohWKHMKbn13yehNHaPg.roa (raw, json)
Hash identifier:          woMaNcYt8pvziu0PdW72aAtcX34qpM3OwaFpLamsFZ4=
Subject key identifier:   6B:15:9A:25:B4:16:A2:15:8A:1C:C2:9B:9F:5D:F2:7A:13:47:68:F8
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       02692E8B
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/axWaJbQWohWKHMKbn13yehNHaPg.roa
Signing time:             Mon 06 Jun 2022 09:41:29 +0000
ROA not before:           Mon 06 Jun 2022 09:41:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        85.237.92.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40447627 (0x2692e8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jun  6 09:41:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b159a25b416a2158a1cc29b9f5df27a134768f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:87:98:27:46:f6:30:67:24:bb:62:87:4e:
                    28:ae:4a:09:4a:2a:46:a0:e7:51:12:44:b3:be:88:
                    b7:f1:53:ef:60:3d:44:69:97:da:ce:81:f3:8d:35:
                    0b:ed:bd:4b:df:f5:dc:0e:f4:b7:8f:93:dd:dd:c9:
                    70:36:21:64:9d:32:e7:bd:d0:b4:d0:3e:e9:08:5d:
                    ed:88:52:16:a9:b8:95:40:7f:c9:05:d1:72:f1:b7:
                    ca:71:99:df:cf:eb:b3:18:8c:05:b0:82:55:4b:1a:
                    2e:6b:33:37:52:2f:c5:4a:50:ab:17:c8:38:7f:0d:
                    68:11:a1:a0:ff:e8:18:6c:55:c3:dc:07:0c:e1:94:
                    a2:58:31:6a:de:59:2d:cc:36:5f:8d:51:c2:d0:80:
                    ec:63:4c:46:d0:20:ca:68:d1:41:23:70:2e:1c:bd:
                    e8:9c:77:68:4d:cc:c9:13:0b:88:43:6f:e0:ed:6f:
                    16:65:22:0f:f7:09:cd:8c:47:92:f8:b3:8f:09:39:
                    41:a2:fc:64:d7:59:89:d9:e1:b0:54:29:71:df:b4:
                    1b:42:54:a2:1c:73:6e:e8:df:3e:3d:18:d5:ed:e3:
                    0f:e6:0e:78:46:c5:f9:8a:73:c5:2e:58:29:1d:89:
                    0e:de:e4:e3:ef:7f:c6:47:ad:2c:05:be:74:c8:e3:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:15:9A:25:B4:16:A2:15:8A:1C:C2:9B:9F:5D:F2:7A:13:47:68:F8
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/axWaJbQWohWKHMKbn13yehNHaPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:12:75:f5:02:8e:99:f6:46:ee:8f:66:df:6b:ed:50:53:0a:
         6e:c3:82:c7:8b:3f:b0:34:30:a6:42:10:5c:ce:88:bb:5f:5b:
         8d:65:ef:78:d9:95:56:6d:bf:64:e9:31:ad:1f:31:b0:9e:59:
         17:2d:ae:e4:8d:9b:72:36:65:80:b4:17:1d:c9:fe:88:8d:61:
         a7:58:15:d6:df:4a:20:4f:34:d2:24:1f:0e:63:e4:d4:c0:33:
         8e:1e:86:82:57:99:f6:a2:a2:30:ab:c0:fb:a4:84:ba:0f:89:
         a8:bd:32:5f:0c:88:04:4c:1c:7c:93:ea:5a:db:f5:25:6f:0e:
         45:49:f9:13:73:ae:e7:18:ca:db:26:5a:54:e5:3f:3b:bf:eb:
         11:bc:22:fc:08:9b:a2:90:81:2e:47:7a:d2:c6:c2:2e:c6:66:
         69:45:bf:be:6d:78:dd:a2:8b:cb:3e:30:9e:48:a0:b4:09:2c:
         75:9b:b7:e3:86:bf:35:54:1e:8a:e3:20:be:21:0b:60:4d:73:
         d3:fb:30:73:70:5a:00:e6:72:b1:0f:3e:70:63:8b:76:4f:30:
         31:a2:35:75:05:df:3f:a3:c9:a2:99:3d:43:61:86:5d:23:fa:
         e7:13:5f:0e:a2:51:10:27:69:ba:98:28:d3:48:86:3c:cb:da:
         c2:fe:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org