Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/R4JtzhQkQrlv39vMYNUakt-mkyc.roa
File:                     R4JtzhQkQrlv39vMYNUakt-mkyc.roa (raw, json)
Hash identifier:          Mmvf7mFknOz4ZOWnRhFZe0+rdWCQy50+egSQpRDmBos=
Subject key identifier:   47:82:6D:CE:14:24:42:B9:6F:DF:DB:CC:60:D5:1A:92:DF:A6:93:27
Certificate issuer:       /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial:       088A8529
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/R4JtzhQkQrlv39vMYNUakt-mkyc.roa
Signing time:             Fri 03 Jun 2022 12:52:20 +0000
ROA not before:           Fri 03 Jun 2022 12:52:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6762
IP address blocks:        193.57.94.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143295785 (0x88a8529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
        Validity
            Not Before: Jun  3 12:52:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47826dce142442b96fdfdbcc60d51a92dfa69327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:78:b0:33:98:50:f8:54:96:0c:03:ca:2c:
                    ea:37:56:33:b9:4f:51:59:a2:7b:28:6d:cb:e8:3d:
                    3a:dc:ef:d6:d6:91:94:70:c8:71:1b:aa:39:7c:c7:
                    e4:2e:9f:95:78:5c:8d:41:7b:e5:a3:5c:7d:25:b6:
                    af:16:60:d1:34:e4:54:f4:04:fb:aa:43:b7:ca:92:
                    9f:f3:3d:85:47:09:cd:f0:1f:1b:84:df:6f:5f:a7:
                    05:87:30:a5:be:57:93:8d:c3:96:78:29:25:59:47:
                    79:aa:d6:62:81:6f:0f:4c:c3:20:b4:98:22:7e:34:
                    c4:53:cf:50:e7:14:07:60:3e:ad:4b:61:ff:06:75:
                    15:1f:3e:46:e9:80:d8:c4:17:18:5d:65:b0:01:4e:
                    79:67:f9:b4:98:fb:ad:26:c5:0f:7c:ef:0d:d2:aa:
                    6c:9a:2f:38:e6:19:12:41:17:cf:e7:05:29:2b:38:
                    4a:9a:31:44:b8:34:50:30:7d:8d:30:84:04:7a:58:
                    45:54:44:e9:18:1d:b5:97:ce:52:d1:34:f1:7c:eb:
                    34:41:08:b1:9c:1f:ee:3c:2f:7c:a6:09:42:a1:2e:
                    81:e1:a0:52:77:71:9a:05:51:cf:fc:57:ef:b3:d5:
                    f9:f2:5b:39:5c:59:3d:2b:b4:62:fb:36:ec:f4:88:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:6D:CE:14:24:42:B9:6F:DF:DB:CC:60:D5:1A:92:DF:A6:93:27
            X509v3 Authority Key Identifier:
                keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/R4JtzhQkQrlv39vMYNUakt-mkyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:9d:f1:7c:47:0e:13:a0:8f:dd:e4:da:78:0d:82:d9:78:
         56:08:b6:fd:28:5b:da:b8:fe:3a:d1:37:09:4a:24:e2:11:02:
         91:3f:b6:43:32:da:39:85:9a:ff:23:cc:02:de:da:05:65:12:
         86:1b:58:df:e0:25:c9:0f:32:eb:20:28:f9:7c:e7:51:37:17:
         05:d1:2b:78:b3:31:ba:16:d1:83:d3:d7:61:23:5a:2a:0d:a4:
         4a:40:52:9b:bb:04:20:67:d5:48:48:ea:7e:bf:9b:c9:31:f3:
         7a:89:85:40:a6:7e:de:99:44:7b:f5:a0:4d:af:ed:68:34:97:
         ad:5e:7d:97:6d:d0:dd:80:d7:9f:fe:52:81:9a:ad:cc:07:f6:
         a6:1d:3f:26:c2:47:51:0e:91:01:56:76:3e:ee:73:64:ce:7a:
         60:cf:e2:80:32:08:68:cc:44:20:d7:08:ec:26:79:c3:d3:d5:
         76:70:51:59:c8:0b:9d:8e:9f:b2:ce:14:f1:27:f6:68:9e:41:
         b9:cf:2b:b2:59:8d:ec:53:8d:4c:7c:b2:05:bc:32:f6:de:3a:
         1e:a1:f5:75:14:fe:53:8a:bb:0c:94:b9:0c:b5:91:39:d5:5e:
         69:fa:df:22:34:b3:9c:09:e5:a9:5b:da:9b:71:4d:dc:1e:11:
         b9:76:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org