Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/13uibvj--94tXb9-X9eWqAGOagY.roa
File:                     13uibvj--94tXb9-X9eWqAGOagY.roa (raw, json)
Hash identifier:          U8Doik9NyH01GEdAZ6pgFhQzdEI8pG+uPEP7sz4oDQ0=
Subject key identifier:   D7:7B:A2:6E:F8:FE:FB:DE:2D:5D:BF:7E:5F:D7:96:A8:01:8E:6A:06
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       2AF4E2AB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/13uibvj--94tXb9-X9eWqAGOagY.roa
Signing time:             Sat 01 Jan 2022 13:57:55 +0000
ROA not before:           Sat 01 Jan 2022 13:57:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50408
IP address blocks:        93.159.60.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720691883 (0x2af4e2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 13:57:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d77ba26ef8fefbde2d5dbf7e5fd796a8018e6a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:a4:a1:71:82:f2:e6:85:1a:b5:c4:e2:ab:
                    5f:37:df:2b:a1:31:4c:16:e0:90:dd:98:d2:9c:3b:
                    ff:52:93:a8:ed:1a:f5:fa:35:b8:dd:99:23:18:ca:
                    79:9a:37:8c:1f:0b:a7:1a:1d:c1:49:c0:d5:59:44:
                    11:a6:fa:09:d7:5a:c3:68:71:3c:e2:ab:00:14:52:
                    7e:bd:bf:5c:4f:fb:75:fe:31:8e:26:49:0b:3d:e9:
                    6b:97:3e:00:18:e0:60:d3:49:c6:36:1f:0c:88:8c:
                    a1:f4:9f:82:ad:f9:0a:d7:e5:71:2f:28:d1:2c:2b:
                    60:94:b7:b5:42:bf:08:21:8a:e8:13:e8:5f:b9:9f:
                    f2:28:54:2c:55:ea:f6:c4:35:e5:63:37:fc:ec:e6:
                    dd:41:9c:b2:79:f4:6f:2b:74:f2:3d:11:23:97:02:
                    46:9a:d1:c1:53:30:c2:60:eb:20:11:a3:7c:95:d3:
                    ca:b6:68:f0:8f:5c:61:6e:30:81:22:b2:89:38:3d:
                    ab:77:31:77:89:cc:37:d1:3a:34:50:be:40:ff:d6:
                    59:02:48:e6:f9:8a:7b:26:ac:a6:4a:74:68:d2:49:
                    22:3f:0f:10:d4:b5:70:d4:39:25:86:e6:c6:e9:11:
                    1e:0c:92:d5:a3:88:ee:09:17:93:90:4f:23:cb:4e:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:A2:6E:F8:FE:FB:DE:2D:5D:BF:7E:5F:D7:96:A8:01:8E:6A:06
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/13uibvj--94tXb9-X9eWqAGOagY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:13:f3:66:be:97:bd:77:c2:c6:5e:61:04:96:ff:88:6c:c8:
         ee:8f:c0:f8:1a:d3:50:2b:c9:a6:ff:a2:7b:28:b7:ec:56:4c:
         6f:86:9f:e7:ee:33:86:5a:3b:b2:bd:45:72:55:92:48:e1:aa:
         55:60:5a:c9:bb:4b:04:04:72:17:15:d0:9e:9d:33:c5:80:86:
         8d:94:fb:57:79:7e:84:91:a9:8b:8d:93:a9:6d:ec:c0:5a:db:
         6a:1d:52:1f:c5:dd:61:ac:50:8a:a5:7e:4e:b0:85:d8:95:35:
         db:f1:5c:4a:2f:89:e5:06:af:3b:2e:d7:74:ba:d8:d2:88:82:
         77:6a:ed:57:82:07:16:4f:86:9e:fc:d9:f3:02:e6:a4:1e:82:
         0f:50:84:cb:38:70:9a:1b:79:92:56:30:cb:fd:f8:a8:32:58:
         70:a2:89:00:c1:fc:aa:af:cb:e5:6e:e9:12:b4:78:55:75:45:
         a0:48:93:08:85:1d:19:ac:ab:76:b4:19:19:e1:14:91:2f:e3:
         bc:b6:2b:1b:10:e4:2f:f9:3a:01:34:24:70:9d:10:23:4b:2f:
         58:3a:c4:22:a2:a2:92:c5:2b:47:1d:3c:98:d2:49:93:9e:5f:
         44:c6:41:82:ff:31:e9:67:04:ef:c1:02:2b:71:ff:39:7d:93:
         1b:23:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org