Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa
File:                     T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa (raw, json)
Hash identifier:          p4P/DLvoVxHphcaC/4K6Jyv9rDztj8/+xCTMYcnRh1E=
Subject key identifier:   4F:C9:30:88:CC:5D:B0:F8:F9:59:5A:C7:94:B4:EC:DF:2A:D7:50:8B
Certificate issuer:       /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial:       043CB9AA
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa
Signing time:             Sat 01 Jan 2022 06:52:26 +0000
ROA not before:           Sat 01 Jan 2022 06:52:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57630
IP address blocks:        193.201.16.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71088554 (0x43cb9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
        Validity
            Not Before: Jan  1 06:52:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4fc93088cc5db0f8f9595ac794b4ecdf2ad7508b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:77:1f:ca:89:ff:ba:43:bf:79:51:f1:94:
                    f6:22:0a:7d:2c:89:44:4b:ed:ba:61:9f:11:92:aa:
                    c8:18:71:64:10:f4:2b:72:8f:0a:02:05:28:91:dd:
                    05:3c:4b:89:07:6b:fe:e2:49:a9:14:65:02:51:34:
                    11:ce:5d:29:1f:3a:8e:31:c6:01:07:bf:97:de:5b:
                    78:03:97:ff:a0:9e:9c:65:10:44:95:6b:63:3d:38:
                    a9:c7:22:b6:f1:ac:97:61:ae:18:b2:c9:7e:af:12:
                    dd:0a:ae:4e:42:75:e0:62:bb:ea:f5:9d:df:c7:d5:
                    b1:13:e4:3d:2a:ba:6d:52:d7:61:9e:19:aa:84:79:
                    fb:b0:b7:cc:ac:d2:88:69:0e:28:42:7d:3a:fc:3c:
                    fd:db:70:fd:5d:c2:71:8a:ff:3f:88:33:88:9c:c7:
                    d5:67:88:29:c5:be:08:a4:a1:d9:3e:20:78:62:66:
                    8d:d1:79:15:2d:8e:d5:c3:49:9c:c7:56:da:21:1c:
                    79:36:e5:77:df:59:a5:63:bd:4c:4e:35:db:8f:8f:
                    6d:db:d3:fa:99:98:63:22:e7:76:24:39:8b:c6:76:
                    0f:1b:cc:82:f3:1d:ee:45:a6:85:9b:f0:f1:b9:4c:
                    0e:1a:2f:ea:4d:55:e6:b9:00:dc:9c:37:89:46:bb:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C9:30:88:CC:5D:B0:F8:F9:59:5A:C7:94:B4:EC:DF:2A:D7:50:8B
            X509v3 Authority Key Identifier:
                keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:0c:c5:88:f2:8d:75:42:5a:f3:cb:3d:88:9b:ed:6c:a7:79:
         11:89:0a:44:77:96:56:93:ab:69:1e:6d:37:3e:28:7e:31:89:
         34:ad:42:46:f1:b5:d1:d8:aa:b5:3e:06:d4:d9:59:73:ae:16:
         2a:01:e3:f3:56:ae:ff:10:6f:6b:c3:1d:8b:e7:a2:ca:af:2c:
         1d:63:1e:85:7a:ec:49:4d:6d:c1:81:ae:fc:e0:ab:09:34:b8:
         3f:a3:dd:43:d4:9e:72:c3:11:9c:d7:38:b2:d2:7c:49:74:e1:
         a5:9a:6c:fc:cb:0d:cb:1d:7b:4c:76:f0:22:31:24:7d:7d:af:
         44:0e:29:d9:a1:c4:92:92:3c:ef:27:fc:7c:6b:1e:81:69:2d:
         2f:ab:66:ce:79:9d:12:61:3b:ae:92:9f:25:11:86:f8:0a:2f:
         96:a0:7e:de:c0:7e:b5:2f:50:89:f0:ae:b4:9f:da:03:f3:0f:
         dd:ab:64:86:19:19:05:7f:3f:22:4d:38:0f:fb:05:e3:62:53:
         b5:a7:5f:d4:68:e9:ae:c7:5a:a5:eb:cb:ec:05:e0:67:56:ee:
         30:f6:5c:d5:c6:8c:8b:dd:aa:da:16:d4:86:bf:34:1c:f6:61:
         eb:8e:fa:7f:18:1f:24:de:25:f9:1d:9a:c7:06:02:f0:f2:ab:
         c1:98:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:16 2024 by rpki-client on console-fra.rpki-client.org