Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ZDp83LzVx6Mq3mtMn-fHq6ihBFs.roa
File:                     ZDp83LzVx6Mq3mtMn-fHq6ihBFs.roa (raw, json)
Hash identifier:          07Tx+bywuDYhcjJEi3y0pWj8SPQs4uNIvOEezg4JXV8=
Subject key identifier:   64:3A:7C:DC:BC:D5:C7:A3:2A:DE:6B:4C:9F:E7:C7:AB:A8:A1:04:5B
Certificate issuer:       /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial:       08E9205D
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ZDp83LzVx6Mq3mtMn-fHq6ihBFs.roa
Signing time:             Fri 11 Feb 2022 11:10:45 +0000
ROA not before:           Fri 11 Feb 2022 11:10:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200590
IP address blocks:        193.106.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149495901 (0x8e9205d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
        Validity
            Not Before: Feb 11 11:10:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=643a7cdcbcd5c7a32ade6b4c9fe7c7aba8a1045b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:b2:f7:c2:00:a6:21:a6:29:ac:4f:ed:7e:
                    50:a3:5f:f8:a6:ee:e3:f5:b5:d1:0e:c9:8d:9c:7f:
                    fa:bd:da:b5:02:23:85:de:b8:4c:be:8d:5c:64:3e:
                    4e:ae:8b:e6:eb:a9:31:4e:0d:b1:31:3a:11:32:b4:
                    b2:ed:97:22:f9:7a:eb:99:dc:3b:c4:de:d2:d5:94:
                    4e:50:24:1f:57:b0:81:2f:9e:e6:1f:49:d3:be:09:
                    31:3e:85:53:27:fd:e8:2b:39:2b:2a:47:9a:9c:c5:
                    b5:ba:42:db:c4:bb:1d:9a:2a:54:f1:89:b5:bb:a5:
                    b0:57:d0:60:84:0d:38:bc:af:0a:48:67:5f:52:62:
                    12:6c:ad:02:63:55:32:e2:a0:31:23:f9:40:00:d5:
                    7e:ac:97:c6:ae:56:b1:2c:71:9b:92:57:4f:e6:0f:
                    dc:c8:4e:43:7c:e7:83:a2:3c:ea:b5:18:64:4b:e0:
                    5a:6a:d3:2b:27:53:bc:2e:67:ad:f8:86:0f:a6:87:
                    bb:03:e7:3b:87:ca:27:76:b2:27:d8:72:af:53:fd:
                    be:14:de:a1:87:1d:a2:d8:08:03:22:1a:2a:6e:67:
                    1a:ef:1e:36:c9:c6:36:29:c2:73:c6:da:28:3b:01:
                    d5:52:a3:29:f5:3e:ae:89:bd:b0:d5:d4:45:7e:3a:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3A:7C:DC:BC:D5:C7:A3:2A:DE:6B:4C:9F:E7:C7:AB:A8:A1:04:5B
            X509v3 Authority Key Identifier:
                keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ZDp83LzVx6Mq3mtMn-fHq6ihBFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:2b:bb:cd:f7:5a:5d:af:c7:60:07:54:cf:ae:cc:04:8f:
         96:b4:c6:84:8f:35:29:7b:d1:22:b8:64:f4:6e:da:b9:09:17:
         ad:f2:50:5f:f9:a0:77:6f:e3:c3:9d:78:bf:d6:a4:47:e7:80:
         dd:1a:37:0e:85:fc:71:2f:81:29:fd:29:10:4e:87:11:f1:97:
         f5:57:26:00:3c:b2:eb:f7:9e:64:0b:83:54:e0:dd:b3:75:9d:
         0b:8d:b8:f2:ea:78:d5:85:7f:3b:75:74:b7:be:d9:ab:f1:d7:
         fd:33:dc:44:9b:d5:25:2e:59:53:2d:60:8d:fb:f2:59:0c:57:
         f6:8c:18:44:33:69:10:58:94:b1:38:dc:06:64:5a:52:22:16:
         a9:dd:ff:e1:52:04:e1:df:ce:50:42:99:7c:ad:e8:b9:1a:40:
         ba:11:6a:b5:ec:92:cd:19:09:fe:98:ed:b5:a5:1a:40:12:1c:
         e8:db:42:cc:e5:72:3f:4a:81:c9:94:85:02:db:22:17:14:59:
         df:1d:22:7e:55:90:a7:5a:97:9d:31:bd:cc:0c:a2:b9:64:68:
         a7:77:c7:58:7b:db:67:b3:c3:f3:19:c9:ae:f9:76:06:4b:e5:
         55:1e:71:49:36:e9:9f:39:5b:dc:06:1a:e9:d0:71:77:94:66:
         b7:9b:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:06 2024 by rpki-client on console-ams.rpki-client.org