Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/Y0Z9TYvUaH9ld5QzE_601uQZM7o.roa
File:                     Y0Z9TYvUaH9ld5QzE_601uQZM7o.roa (raw, json)
Hash identifier:          kxn1SI+5BVRchuaw86wlZnMHYhha/L8VCOltjtkoLdE=
Subject key identifier:   63:46:7D:4D:8B:D4:68:7F:65:77:94:33:13:FE:B4:D6:E4:19:33:BA
Certificate issuer:       /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial:       0EEC7F0E
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/Y0Z9TYvUaH9ld5QzE_601uQZM7o.roa
Signing time:             Sat 01 Jan 2022 14:59:34 +0000
ROA not before:           Sat 01 Jan 2022 14:59:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30083
IP address blocks:        185.201.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250380046 (0xeec7f0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: Jan  1 14:59:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63467d4d8bd4687f6577943313feb4d6e41933ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:90:9a:1f:14:fe:f8:ee:d1:df:39:7c:c7:
                    04:21:74:da:06:89:db:a9:2b:1a:40:ee:4f:ff:4c:
                    88:db:8f:e2:e0:41:e4:40:f4:33:ce:c6:e6:32:d7:
                    67:5b:2c:37:55:58:cb:ac:b0:3e:13:1a:b5:da:ae:
                    39:2e:09:cf:7a:7a:e3:c7:86:76:2c:bb:b5:e0:06:
                    36:1f:7d:67:e9:5b:eb:95:5b:a8:4b:c1:b7:c6:7e:
                    8a:25:d4:92:bf:27:e0:44:d7:29:9c:a7:4e:b5:a0:
                    cb:49:27:07:37:b7:71:12:dc:65:e9:53:c3:11:36:
                    e8:b7:8d:95:3c:29:23:b1:a4:2b:3d:e2:7f:db:3e:
                    90:c0:89:44:5d:59:a2:15:b6:5d:1e:c2:18:01:2d:
                    f4:e9:60:88:7c:30:29:52:d8:68:79:d9:57:6f:f6:
                    6a:d5:9a:66:13:07:17:97:8b:bf:1a:a9:06:2d:99:
                    98:5f:b0:56:8a:eb:4c:f7:1b:42:9b:ce:0c:b0:9c:
                    c7:49:82:c3:70:30:22:c5:50:75:12:24:84:57:c9:
                    66:d8:2a:cf:8e:42:41:a5:9d:2b:1c:fd:c3:b4:12:
                    67:e5:7f:58:ef:38:07:c7:fe:60:6a:ff:e1:76:3d:
                    e6:dd:f1:e2:3e:a1:c9:76:78:98:46:f2:7d:0a:05:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:7D:4D:8B:D4:68:7F:65:77:94:33:13:FE:B4:D6:E4:19:33:BA
            X509v3 Authority Key Identifier:
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/Y0Z9TYvUaH9ld5QzE_601uQZM7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:dd:1d:70:6f:82:3a:6b:1b:63:27:9e:93:b4:84:b9:94:
         94:5e:b8:94:21:92:f1:65:20:97:a2:a0:5b:83:7b:23:e1:19:
         94:d9:c1:52:d1:eb:f5:63:25:2f:2e:8b:77:10:34:a1:1b:76:
         bc:ed:b2:fa:9a:16:65:82:42:62:fe:30:ae:2f:4c:1b:8f:e1:
         9c:6e:c5:cd:4c:0d:6f:1d:f8:b9:8b:34:8e:7d:69:84:73:a6:
         9a:f6:2f:76:a9:8c:0b:1e:c3:ef:13:9b:d1:61:f1:ec:96:85:
         3b:df:31:eb:fe:38:3c:92:0c:14:22:b4:bd:42:9e:c2:dd:2d:
         18:9d:74:46:fc:f9:8d:a6:14:d6:38:ab:b2:1d:db:9e:5d:25:
         53:5f:4a:ab:16:3e:86:24:fd:00:6b:36:71:e6:fd:48:74:2e:
         73:d0:00:37:c1:91:cb:cb:4b:78:31:f6:f0:ee:a7:b5:87:76:
         18:56:d0:b3:4a:1c:a3:bc:9d:e2:79:c4:31:04:0d:ab:62:a7:
         49:f7:70:d3:18:56:af:b2:d1:ce:07:45:84:fd:6f:ca:d2:72:
         bd:97:a1:18:e4:85:f4:f1:5d:c5:bd:03:a1:a2:4c:2c:b9:bb:
         0f:c5:ae:9f:7f:07:18:69:76:6f:73:34:3d:fb:1c:b8:f2:fb:
         cb:02:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:32 2024 by rpki-client on console-ams.rpki-client.org