Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa
File:                     ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa (raw, json)
Hash identifier:          IdqA08w4c392oup88bupHi8JbgCB0Dbq9+iQXGt6xQA=
Subject key identifier:   8A:4F:FE:B6:F2:EB:4D:02:4D:FF:C2:FA:D2:C6:DB:90:39:8A:93:14
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       0183CAFC05444D394E30ACB6AC15F1C1B9C8
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa
Signing time:             Wed 12 Oct 2022 06:57:37 +0000
ROA not before:           Wed 12 Oct 2022 06:57:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49825
IP address blocks:        84.23.50.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ca:fc:05:44:4d:39:4e:30:ac:b6:ac:15:f1:c1:b9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Oct 12 06:57:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a4ffeb6f2eb4d024dffc2fad2c6db90398a9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:cd:25:da:02:f6:01:56:de:02:1d:95:56:
                    b6:e0:e2:a9:b8:1c:0c:1a:85:0e:e1:6c:72:bb:52:
                    d8:56:41:9b:7b:e6:53:0d:9c:a8:ba:0c:71:aa:08:
                    d5:7c:3c:62:44:fc:21:0a:75:c7:4a:4b:a6:3c:3c:
                    40:f5:29:71:9c:b5:7b:5e:8f:c7:b9:82:13:3e:65:
                    f3:f3:50:3d:53:47:d0:d0:84:25:c3:10:8f:22:47:
                    8b:f0:25:2a:ad:48:63:ba:73:ec:a6:4b:a1:38:7e:
                    f3:93:4c:cc:2f:62:18:d9:bc:9a:bc:9b:c2:62:ac:
                    90:c2:67:48:c4:b8:21:89:66:6b:91:46:b6:90:9d:
                    f4:e9:2a:d7:d7:28:69:be:e0:2f:7f:a8:f7:6b:52:
                    5c:71:ad:5f:35:6b:20:38:ce:87:fc:5b:85:29:eb:
                    74:94:97:64:2b:98:b9:66:12:22:94:6c:3a:18:2c:
                    06:d7:7e:38:cb:fc:a9:e6:51:a3:08:6d:34:9e:c5:
                    d6:d0:63:0c:9a:07:83:56:c5:e1:ae:6d:e6:1e:11:
                    f4:e4:65:c0:dc:a3:e7:f2:b0:16:58:a7:4d:06:07:
                    07:61:d3:7d:41:bf:43:37:87:8f:2c:55:20:6b:90:
                    80:d0:73:2a:0b:1d:b3:47:33:b6:bb:e2:9b:4f:ca:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:FE:B6:F2:EB:4D:02:4D:FF:C2:FA:D2:C6:DB:90:39:8A:93:14
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.23.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:93:ff:b4:3c:53:b1:e7:1a:9b:28:23:00:93:9c:a0:ce:
         97:6d:7a:46:10:c8:df:b2:99:a0:df:d6:5b:18:64:d9:41:2c:
         14:31:cd:46:10:b2:6f:dd:b6:ca:31:5b:a7:7c:a0:6e:a0:0e:
         74:26:20:fb:ec:24:71:08:d6:2a:d3:7e:5f:11:7f:ce:4f:84:
         1a:4b:31:98:15:4b:29:88:0a:3c:75:8e:6d:39:3c:03:74:d7:
         93:d5:fb:2d:ff:1d:e8:c1:91:01:60:0d:19:3e:07:f2:5a:fb:
         06:da:5e:24:fa:81:e9:3a:7e:f0:fd:16:ad:5e:5a:03:a3:1b:
         20:bc:dd:07:40:f2:8f:46:b0:ad:f9:47:19:66:fc:5c:2f:42:
         42:56:66:c5:ac:e4:15:ee:ac:06:73:74:af:bd:1d:c9:b6:e4:
         eb:8f:38:a2:ab:a7:08:9e:9f:67:35:6c:7b:cb:e1:62:a6:cd:
         fd:3e:2c:fc:3a:57:f2:6f:01:6e:bd:11:ad:e9:2e:a5:a5:48:
         68:fd:6b:09:6b:93:85:da:5a:65:c3:49:16:93:a4:3b:6f:ed:
         93:8d:a1:47:2d:6c:26:0d:5c:cb:e6:ff:49:c3:68:e2:71:f3:
         93:5e:df:1c:4a:6c:98:ec:0b:1f:61:53:77:b4:ed:d6:bb:f6:
         53:57:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org