Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/EUw44x7sa1wxokzz5SNXhuJSu_c.roa
File:                     EUw44x7sa1wxokzz5SNXhuJSu_c.roa (raw, json)
Hash identifier:          Iii1BsWIvsLlWEBISMZbIrB06J+l+4niaEnpgUP+Ass=
Subject key identifier:   11:4C:38:E3:1E:EC:6B:5C:31:A2:4C:F3:E5:23:57:86:E2:52:BB:F7
Certificate issuer:       /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial:       018572031F1F7CBC67ED31821A71D312ED9A
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/EUw44x7sa1wxokzz5SNXhuJSu_c.roa
Signing time:             Mon 02 Jan 2023 10:24:45 +0000
ROA not before:           Mon 02 Jan 2023 10:24:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15623
IP address blocks:        185.241.85.0/24 maxlen: 24
                          185.241.84.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:03:1f:1f:7c:bc:67:ed:31:82:1a:71:d3:12:ed:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
        Validity
            Not Before: Jan  2 10:24:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114c38e31eec6b5c31a24cf3e5235786e252bbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:f9:f3:e6:58:d8:d9:f8:49:63:ba:10:3f:
                    7b:e7:34:99:26:1c:4b:a4:e1:36:df:85:5f:fb:54:
                    2a:28:8b:f0:99:52:8a:db:05:98:da:27:9a:95:42:
                    60:35:d7:1d:89:95:d5:43:d7:37:9a:4f:6e:8a:93:
                    94:c7:f7:40:1f:33:60:ec:85:07:a2:74:20:bf:9f:
                    47:99:00:fe:15:5b:72:e3:de:5c:85:ad:82:a6:e4:
                    0f:f5:76:4f:15:77:cd:ff:2e:71:c3:3a:94:f4:bc:
                    ef:1b:c5:45:bd:3d:11:f3:dd:7e:c2:d1:85:cf:50:
                    40:e3:56:44:7c:0f:58:5f:d1:76:d7:bc:b3:ca:23:
                    d1:4e:31:08:c5:5c:6b:0a:c0:70:30:ae:b1:ce:58:
                    76:e7:e7:db:0a:c1:e9:d2:0f:f8:33:e7:81:2d:f8:
                    f6:8b:90:46:a0:1d:fa:0d:d0:a2:ff:f7:7f:c5:a7:
                    e8:a9:0c:6e:12:2e:b6:61:d2:d2:dc:f9:f8:a9:0f:
                    0e:05:11:1d:e2:af:08:58:07:0b:4b:31:3b:07:86:
                    a6:34:05:c5:96:cd:16:e2:3b:78:52:28:bf:7b:e6:
                    ad:7a:c5:5a:cf:c0:6c:bf:88:81:44:7b:8a:a8:3f:
                    06:8b:4f:3b:fd:0f:60:6f:df:be:d7:28:a7:8d:a3:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:38:E3:1E:EC:6B:5C:31:A2:4C:F3:E5:23:57:86:E2:52:BB:F7
            X509v3 Authority Key Identifier:
                keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/EUw44x7sa1wxokzz5SNXhuJSu_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:c2:90:08:89:8e:66:cb:5f:a8:94:e1:67:81:6f:41:57:
         d8:5d:ad:dd:c3:16:6e:7f:b3:53:a6:1c:3f:81:2c:aa:dc:ad:
         3c:28:a4:16:10:f4:90:2c:f7:ff:09:81:92:cf:0d:80:41:6d:
         77:88:b4:3d:be:5d:22:20:ec:1c:a5:9e:f8:ac:ed:64:d4:81:
         96:ec:10:32:c2:cf:bf:9b:7a:8c:7c:17:56:0b:63:4f:72:48:
         8f:3b:d5:40:ca:24:5a:10:eb:09:7b:60:f2:d5:d8:06:1e:12:
         bc:53:6b:20:48:d6:01:c0:37:1a:fb:cd:b8:0d:38:8c:88:56:
         e6:dc:af:00:16:79:79:7b:a2:d2:12:e8:43:01:27:66:76:29:
         6d:13:fd:b9:c4:ed:e6:e9:bc:b8:c3:ff:6a:fc:91:2d:6e:16:
         b6:3c:db:1f:fe:08:24:9a:f7:f6:8c:2c:d0:a4:6c:30:03:7c:
         30:1b:b7:78:3a:d8:90:cb:f6:e5:07:e9:88:a9:6e:9f:ef:23:
         c4:35:5c:b5:c1:a2:2d:60:ec:24:0f:7f:b3:62:99:5c:b0:cf:
         27:6d:f9:d3:e4:de:3f:6a:e9:b1:1b:aa:77:72:0d:a1:81:5c:
         b2:f3:d2:49:6e:96:22:20:0e:b8:06:70:cf:6c:39:bf:1a:a4:
         a2:ec:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:29:19 2025 by rpki-client