Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/ubsWnIIKBTuEzq_RotlJdPtVzOs.roa
File:                     ubsWnIIKBTuEzq_RotlJdPtVzOs.roa (raw, json)
Hash identifier:          Fbk2dvKCewWB77jP0SKlCR5+X5+08j63hHPzT6rG/Xs=
Subject key identifier:   B9:BB:16:9C:82:0A:05:3B:84:CE:AF:D1:A2:D9:49:74:FB:55:CC:EB
Certificate issuer:       /CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
Certificate serial:       0902A75A
Authority key identifier: BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/ubsWnIIKBTuEzq_RotlJdPtVzOs.roa
Signing time:             Sat 01 Jan 2022 02:01:28 +0000
ROA not before:           Sat 01 Jan 2022 02:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24904
IP address blocks:        92.118.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151168858 (0x902a75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
        Validity
            Not Before: Jan  1 02:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9bb169c820a053b84ceafd1a2d94974fb55cceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:43:eb:0c:4c:29:db:04:6e:47:1e:b6:ec:
                    a8:ec:95:18:26:d2:84:a2:86:24:7f:bb:a2:db:22:
                    cd:da:09:4d:55:c3:aa:4e:98:c0:26:3d:a5:c5:52:
                    5e:a6:ae:ee:e5:5e:d8:d9:a8:ee:29:a0:ad:bb:e2:
                    b9:55:e5:8a:f8:e5:33:04:2a:46:e8:11:d8:70:f1:
                    17:f3:c0:1e:af:0a:04:e0:a6:41:a8:39:1f:5f:72:
                    0a:3e:7b:ed:5b:bd:dd:40:8f:49:a6:13:e7:b5:2b:
                    d6:fb:10:cc:3b:4a:18:81:ce:c9:dd:c2:b8:69:32:
                    90:de:c7:0d:54:02:b9:7d:5a:50:ef:ba:6f:3a:b9:
                    2d:07:92:a2:44:1e:98:2d:a5:e7:a7:a8:76:b1:eb:
                    14:be:f3:33:f3:bd:c9:bf:0b:fc:f1:56:b7:d2:cb:
                    eb:a2:9c:e9:f6:7b:d3:e7:10:38:85:d7:35:2d:ac:
                    43:c1:f1:19:62:c6:45:d5:6b:d1:66:4f:97:0f:08:
                    81:c1:84:63:f1:26:87:d2:62:3e:87:cb:ed:f0:55:
                    35:a6:8e:c0:b4:77:26:65:7b:0b:d4:b2:4c:e2:fa:
                    6a:d1:7d:3c:54:38:1a:21:39:63:98:6b:44:aa:70:
                    ec:ae:e8:ca:4d:47:fe:05:a4:f8:eb:51:19:93:f1:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BB:16:9C:82:0A:05:3B:84:CE:AF:D1:A2:D9:49:74:FB:55:CC:EB
            X509v3 Authority Key Identifier:
                keyid:BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/ubsWnIIKBTuEzq_RotlJdPtVzOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:23:9f:e0:7f:d7:a7:8c:18:5e:61:66:ee:03:4c:ca:be:
         55:62:d6:7b:79:9c:a0:6e:f6:0d:80:5c:e7:58:42:ba:65:f7:
         97:3b:94:fa:07:fe:5e:24:cd:94:04:0b:bc:c3:4f:58:34:e1:
         56:92:35:dc:c6:6b:1a:3a:61:4a:ec:a2:36:7d:97:e1:b2:69:
         6f:e8:f4:5b:19:ea:aa:e0:b3:18:e7:f3:f0:88:fb:89:45:67:
         15:4a:67:1c:16:f1:f7:51:7e:5c:75:80:e0:2d:f3:13:e9:5e:
         6c:f0:0a:29:a6:25:e6:72:7e:53:9d:85:81:44:d9:3c:8b:1d:
         99:02:45:ae:01:aa:fa:94:10:d1:fa:83:1c:a7:27:9a:47:61:
         b0:c2:87:7e:d7:91:12:35:54:3b:07:02:70:76:d2:37:a0:0a:
         fa:82:19:85:85:96:db:f0:3e:4e:ae:75:65:97:e7:6c:ea:13:
         34:6b:95:d2:71:8b:9c:f2:dd:fd:0e:c3:a6:81:75:d0:94:11:
         06:6d:46:e8:10:a7:30:1e:bb:88:9c:19:c1:aa:76:a0:ba:9b:
         07:f5:5f:ab:7d:41:4c:9e:af:38:4b:61:d4:51:39:e0:c8:58:
         b1:56:14:18:82:46:dc:e8:db:da:64:d0:bb:03:4d:e4:02:b1:
         f2:e1:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:52 2024 by rpki-client on console-ams.rpki-client.org