Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/0bsUY7IQ9hThnVEqOf2IQgBi-Go.roa
File:                     0bsUY7IQ9hThnVEqOf2IQgBi-Go.roa (raw, json)
Hash identifier:          vqG44aup6Lb10YxjodlGDAk+EBZIAXQqJFuyuMB9rpo=
Subject key identifier:   D1:BB:14:63:B2:10:F6:14:E1:9D:51:2A:39:FD:88:42:00:62:F8:6A
Certificate issuer:       /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial:       018282799707FBE1A76A93DFCCFBC3BCB630
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/0bsUY7IQ9hThnVEqOf2IQgBi-Go.roa
Signing time:             Tue 09 Aug 2022 11:59:42 +0000
ROA not before:           Tue 09 Aug 2022 11:59:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15576
IP address blocks:        185.79.200.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:82:79:97:07:fb:e1:a7:6a:93:df:cc:fb:c3:bc:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
        Validity
            Not Before: Aug  9 11:59:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1bb1463b210f614e19d512a39fd88420062f86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:d0:82:cb:04:a4:7a:18:08:b3:c2:1b:5b:
                    a9:9c:c2:cb:d4:76:d2:38:e5:92:b0:52:42:ba:04:
                    bb:a7:51:27:bf:b0:7b:35:77:e5:d8:30:f3:61:0e:
                    46:30:13:ef:c8:8c:5c:45:ff:84:c0:14:01:86:75:
                    30:7a:c0:93:bd:06:ec:22:2c:07:c1:00:db:47:af:
                    6a:c9:af:4a:0e:7e:81:82:b5:cc:12:06:e1:b1:c0:
                    42:53:4f:03:1e:07:5c:76:ea:97:0a:99:12:85:d9:
                    84:73:6b:4d:20:a2:1d:36:c6:b0:ad:3b:ec:a0:b8:
                    25:c9:93:a9:96:9e:3d:32:53:60:f9:c7:3a:93:cb:
                    6a:11:58:6e:c2:31:26:a9:aa:a7:c0:77:3a:3d:dd:
                    46:54:51:52:25:13:ea:d4:9f:6e:8c:db:05:c3:b2:
                    f1:82:7e:4b:85:aa:12:5b:a8:e4:d6:8e:ca:37:59:
                    d6:e4:14:98:75:f5:f7:b0:3a:4d:f3:c9:9c:a7:30:
                    a0:1f:d7:17:0e:e6:b5:e9:47:67:5f:ff:bc:cf:84:
                    f3:88:f6:b7:2f:44:02:8d:c8:98:e9:7f:ff:67:f7:
                    06:40:cd:fd:95:e8:35:6d:ae:2d:0f:f5:bc:ea:84:
                    52:5b:e0:1c:ec:bf:c4:e6:6a:b4:a8:c6:9f:f1:4f:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BB:14:63:B2:10:F6:14:E1:9D:51:2A:39:FD:88:42:00:62:F8:6A
            X509v3 Authority Key Identifier:
                keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/0bsUY7IQ9hThnVEqOf2IQgBi-Go.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:e7:77:0e:65:86:23:3e:a4:6f:a7:c2:8e:60:68:d5:8a:fc:
         10:92:eb:e1:b2:cb:eb:9f:c3:34:08:55:71:fe:b9:fd:df:10:
         1c:35:81:04:82:97:6e:26:8a:d3:02:65:97:f7:1b:63:08:0c:
         ed:e8:fd:6b:79:2d:11:f8:4b:58:54:88:7d:12:07:cf:44:2c:
         b3:49:d1:fc:87:b2:11:6c:23:58:ad:bc:99:52:e0:e8:ee:d9:
         84:8c:df:57:8d:37:5a:45:ae:32:25:39:28:02:d4:4b:6c:cb:
         b2:8a:09:1b:64:3b:a4:f3:c7:69:0c:68:17:a5:90:c1:9a:84:
         98:ba:33:a6:8a:5f:78:e7:55:a9:2f:35:de:e3:b2:de:0d:62:
         29:dc:1c:d4:8d:c9:39:e2:9d:0f:fb:fc:38:29:ca:f3:c5:90:
         c5:e2:cf:5a:c1:cf:2f:db:84:6e:a4:f2:c6:6a:d4:76:e3:21:
         ef:c4:0b:1a:2c:08:2e:9b:bb:a1:3f:b0:26:46:5e:98:83:d7:
         7b:c1:c8:5a:9b:33:a2:3c:bf:fa:7b:a6:ef:cd:95:af:12:aa:
         08:73:39:0d:9d:14:92:1b:8e:db:45:2f:1b:f2:59:88:0c:70:
         84:03:a1:19:14:37:2d:4e:00:81:29:1b:3a:61:39:a2:24:05:
         2c:21:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:23 2024 by rpki-client on console-ams.rpki-client.org