Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/jBc2m05Mvt-ORHbcBvrHfLwOYR8.roa
File:                     jBc2m05Mvt-ORHbcBvrHfLwOYR8.roa (raw, json)
Hash identifier:          Ji4Gbxcx3mA0PMafbOGbXTtVRxQ7rz96pJ6Cd3JPcEo=
Subject key identifier:   8C:17:36:9B:4E:4C:BE:DF:8E:44:76:DC:06:FA:C7:7C:BC:0E:61:1F
Certificate issuer:       /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial:       093DA871
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/jBc2m05Mvt-ORHbcBvrHfLwOYR8.roa
Signing time:             Sat 01 Jan 2022 13:05:04 +0000
ROA not before:           Sat 01 Jan 2022 13:05:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208890
IP address blocks:        193.228.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155035761 (0x93da871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
        Validity
            Not Before: Jan  1 13:05:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c17369b4e4cbedf8e4476dc06fac77cbc0e611f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:79:2b:7e:12:b1:67:29:93:94:6b:f7:a1:
                    e2:a3:77:3c:ab:44:27:99:ac:fd:65:d2:1f:41:24:
                    71:22:c2:21:c5:9d:29:62:12:e2:e4:35:4c:fc:80:
                    a5:fb:3d:48:57:17:4d:3a:26:67:ae:35:f5:6a:7d:
                    ba:75:a2:7c:a1:da:15:b6:09:08:aa:4a:62:68:df:
                    b3:42:ae:a6:0d:23:bc:29:49:d5:fa:c8:76:1f:14:
                    dc:ff:51:da:29:06:63:90:c1:3b:c4:50:d5:e7:f6:
                    cc:09:a0:fa:58:05:d3:db:44:95:7f:ea:1f:fe:ee:
                    d7:cc:0d:a4:f9:d3:d9:83:55:38:05:c8:bf:c8:95:
                    23:bd:6d:cb:7d:04:4c:2b:47:3d:74:1d:a5:91:4c:
                    2a:10:e0:91:0c:7c:19:09:8e:1e:5e:37:5e:c9:98:
                    23:47:bc:8a:b1:4d:d8:12:11:ac:2a:1c:18:6a:bf:
                    0d:b1:3f:5f:b9:59:f8:f0:5c:54:20:53:b0:53:67:
                    b5:e4:8b:c2:36:a6:f0:6e:b7:97:28:c7:54:89:72:
                    ad:39:43:d8:f7:33:fe:8e:21:13:94:2c:56:f2:b5:
                    73:92:34:5f:57:f9:ad:59:3f:c8:92:58:43:3e:62:
                    fd:74:81:e9:a3:db:f7:1f:44:28:e6:dd:0f:2f:f6:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:36:9B:4E:4C:BE:DF:8E:44:76:DC:06:FA:C7:7C:BC:0E:61:1F
            X509v3 Authority Key Identifier:
                keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/jBc2m05Mvt-ORHbcBvrHfLwOYR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:d7:ad:8a:b9:0e:aa:72:85:33:29:2b:25:c2:dd:ac:b3:0b:
         92:95:d9:05:0b:38:83:94:13:13:60:93:50:36:c6:11:a5:cd:
         36:68:9f:b5:1c:10:36:8b:5b:a3:1a:38:92:63:ee:f1:0d:bd:
         f0:1a:8b:d0:d5:99:e1:5d:4d:bb:72:b0:9b:de:29:53:05:f9:
         44:a2:ce:db:f7:45:8d:8a:c9:ce:8d:e4:8d:5a:38:b1:78:5c:
         48:9a:20:83:55:7c:c6:c1:af:35:8d:fe:d4:1f:3d:02:a8:39:
         8b:0a:62:88:eb:d4:2b:41:31:19:38:e9:b8:04:b6:47:31:7b:
         de:a5:21:3e:36:77:4e:f2:17:65:15:76:31:69:65:01:f4:d2:
         11:97:35:98:0e:a7:ff:55:20:d7:31:8e:6b:55:f9:2e:04:87:
         28:ef:51:08:9a:1b:1a:81:73:40:cf:8a:50:f2:97:ea:b4:6a:
         0b:09:b6:09:23:be:e9:0b:ff:1a:1b:a3:4a:2f:0b:55:f2:c1:
         61:16:b5:4a:89:f3:d4:ba:d4:88:fb:a8:0b:3a:54:65:90:a8:
         b8:7c:b0:16:55:14:a6:76:26:28:03:c9:4e:ca:37:73:91:ac:
         69:73:67:2c:e5:d5:d2:63:00:74:2c:f1:02:70:6f:48:51:8e:
         87:40:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:22 2024 by rpki-client on console-fra.rpki-client.org