Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/OG4C4RCnbUeGQ2Ytw3wHFwjoFQg.roa
File:                     OG4C4RCnbUeGQ2Ytw3wHFwjoFQg.roa (raw, json)
Hash identifier:          /aBFflGnVubddyRM47kgqv2/TuMyWw78/OkQSX7Lz8s=
Subject key identifier:   38:6E:02:E1:10:A7:6D:47:86:43:66:2D:C3:7C:07:17:08:E8:15:08
Certificate issuer:       /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial:       1B6610F3
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/OG4C4RCnbUeGQ2Ytw3wHFwjoFQg.roa
Signing time:             Sat 01 Jan 2022 13:56:38 +0000
ROA not before:           Sat 01 Jan 2022 13:56:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60537
IP address blocks:        185.29.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459673843 (0x1b6610f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
        Validity
            Not Before: Jan  1 13:56:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=386e02e110a76d478643662dc37c071708e81508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:cb:6b:f2:55:e4:ad:32:e2:d9:51:42:04:
                    6a:6d:c7:25:84:a1:d8:e9:3a:93:57:71:52:8f:ec:
                    67:c3:c4:88:5a:74:d0:db:e6:e4:c7:05:73:b6:34:
                    e6:1c:e7:ab:93:57:cc:d0:76:75:94:b4:db:93:7d:
                    a6:32:7f:9a:d5:d4:69:3e:39:42:6f:06:05:aa:5c:
                    e1:4c:43:47:8a:67:0c:1d:7e:04:e8:a3:1d:37:e6:
                    fd:e4:3c:d3:dd:52:8b:28:c6:a0:91:88:0a:07:2a:
                    0a:e6:60:87:e6:b8:19:e7:c4:78:08:7d:a7:f1:11:
                    b9:6e:4c:0f:ec:80:a1:0a:0c:96:4b:d1:e0:2c:60:
                    db:ee:f2:12:a0:b7:73:5e:cb:d5:45:63:c6:fe:29:
                    64:bd:b2:78:04:6b:e7:d2:ef:c4:6c:c7:e6:5d:45:
                    6f:2e:44:4e:d4:63:54:fa:df:78:ba:06:de:77:34:
                    7f:1c:06:ba:e6:3b:d8:32:ab:1b:0a:09:93:07:f7:
                    f6:a5:54:a1:c1:78:70:98:fe:f4:ac:8d:50:26:05:
                    4e:32:9c:8d:72:41:dd:41:7f:fa:cd:66:61:bb:4b:
                    a7:06:ee:02:73:00:4e:05:d3:eb:1f:1b:91:e7:5c:
                    73:db:9d:b0:98:58:1e:e5:45:65:ba:44:9f:61:9c:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6E:02:E1:10:A7:6D:47:86:43:66:2D:C3:7C:07:17:08:E8:15:08
            X509v3 Authority Key Identifier:
                keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/OG4C4RCnbUeGQ2Ytw3wHFwjoFQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.29.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:f4:c3:15:f2:9b:ce:bf:94:de:de:f2:ef:bc:64:f4:98:
         52:43:d3:8a:51:a5:25:1c:fe:e3:f4:26:13:d7:63:97:46:8d:
         5d:e4:01:4d:3c:78:58:e1:0e:3c:ac:71:b2:94:69:fa:2f:95:
         43:54:fe:07:13:17:2e:a3:e3:cc:89:b9:df:2c:0c:0b:03:f7:
         61:a7:b4:cf:56:f4:51:31:7a:98:1c:24:f5:b4:d7:c3:4d:68:
         03:d6:f3:06:ee:67:c1:c9:6a:f0:e6:2c:77:fd:47:39:c5:89:
         38:ac:7d:63:4b:6e:09:40:c8:b4:2c:a1:db:92:16:a3:f7:bc:
         a3:57:ed:35:fa:49:9a:88:72:79:44:20:1e:cc:62:3f:63:7b:
         ee:1c:e3:db:b6:2f:53:7a:f4:93:0e:4e:67:fd:59:e9:24:b4:
         16:cc:5e:53:3d:6c:80:7b:22:97:cf:e6:a7:ff:16:76:7a:73:
         1a:29:c3:22:6f:ad:0b:06:84:ed:60:e7:e4:ad:11:4f:c1:48:
         d6:e3:cc:94:a4:a8:06:61:7d:e4:98:98:09:41:d3:f8:fb:2a:
         ba:ad:83:a6:5f:ef:63:f0:71:7c:ee:48:1d:79:73:6e:04:04:
         f6:08:36:d3:e7:83:bf:83:13:e2:c7:5e:2b:39:be:69:f6:9f:
         38:a7:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:15 2024 by rpki-client on console-fra.rpki-client.org