Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/3CwJ94oZHx83XAmrltpXnJUcUnk.roa
File:                     3CwJ94oZHx83XAmrltpXnJUcUnk.roa (raw, json)
Hash identifier:          CfnyldXpWTUtjy85G8F5FW4ct8kNqtsVqHutjrKm9Lg=
Subject key identifier:   DC:2C:09:F7:8A:19:1F:1F:37:5C:09:AB:96:DA:57:9C:95:1C:52:79
Certificate issuer:       /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial:       018218AE28BB02B3E862E7BABF4AD19EB83A
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/3CwJ94oZHx83XAmrltpXnJUcUnk.roa
Signing time:             Tue 19 Jul 2022 22:57:23 +0000
ROA not before:           Tue 19 Jul 2022 22:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35278
IP address blocks:        193.222.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:18:ae:28:bb:02:b3:e8:62:e7:ba:bf:4a:d1:9e:b8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
        Validity
            Not Before: Jul 19 22:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc2c09f78a191f1f375c09ab96da579c951c5279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:b5:3c:f4:5c:bd:ce:cf:df:43:12:54:5b:
                    a3:91:bd:5f:64:01:ca:34:c0:1c:57:f1:bb:84:5e:
                    68:08:6f:14:f3:7c:17:c6:b4:fe:f6:ed:fe:21:74:
                    31:22:77:f5:9f:03:a2:7b:71:4e:35:b2:db:87:46:
                    20:c5:d4:55:44:96:bf:2d:01:6e:55:9f:a3:33:3f:
                    9d:dc:a5:b7:60:b8:d5:00:31:5d:15:64:52:a8:38:
                    06:cf:73:84:31:20:99:b6:21:6b:f6:11:e3:36:05:
                    9c:c7:2b:50:dd:7e:1b:07:11:bf:5c:06:da:00:64:
                    08:69:fd:0d:9b:51:39:b6:03:61:4a:79:32:0d:45:
                    85:cd:2c:8e:9f:fa:e1:75:48:3e:82:c8:77:91:76:
                    4f:a2:cb:79:fd:ad:6b:14:41:95:7b:a1:f8:a1:f2:
                    cb:f8:ce:d1:2b:e9:b1:d0:27:14:a0:2d:fc:fa:2f:
                    2f:68:51:ca:04:e9:0c:47:aa:30:e8:c6:f0:9b:2d:
                    14:2d:44:ad:a9:9e:55:42:1d:20:a5:85:a5:18:ba:
                    17:bf:da:9f:bf:e1:c3:b5:b3:8c:d6:c4:a9:2c:1b:
                    50:f9:83:a1:5a:15:72:2a:1d:6e:84:51:e9:81:e1:
                    03:6e:13:f5:5f:64:40:ce:25:09:85:5d:bb:ee:b0:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2C:09:F7:8A:19:1F:1F:37:5C:09:AB:96:DA:57:9C:95:1C:52:79
            X509v3 Authority Key Identifier:
                keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/3CwJ94oZHx83XAmrltpXnJUcUnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:04:b6:8d:e5:90:63:bf:1a:0f:42:96:ba:0b:e6:a6:be:62:
         47:a5:6b:56:37:fe:6e:df:e0:d3:ac:b9:c6:68:75:2e:20:f5:
         04:09:af:ee:c9:48:21:04:0a:27:cb:89:af:00:05:92:f8:73:
         8e:2b:08:d6:93:22:bf:3c:f3:d7:c2:64:e1:e9:64:02:2a:81:
         5a:b4:00:92:90:8a:9f:d8:9a:67:6d:7b:07:14:07:42:26:dc:
         20:b7:d0:df:6b:d7:ad:1b:91:d3:d0:35:3a:08:8b:d2:71:74:
         b8:69:9f:8e:95:25:77:80:2b:24:e3:66:b7:2d:ab:bc:ba:cf:
         1a:b8:82:18:8b:91:38:a5:8c:c5:c4:3f:62:02:57:e4:29:e0:
         10:12:15:69:fb:d7:dc:d7:fc:da:7f:32:72:9a:5a:81:f7:7c:
         5b:79:64:f4:53:b1:b0:a2:5e:19:7a:cb:9f:14:17:63:87:6a:
         5c:19:4b:37:cb:02:23:d1:2f:d5:31:a6:7e:55:0e:68:19:62:
         51:70:67:cb:70:81:22:f6:58:8f:a2:9c:2f:44:b0:8a:d6:c6:
         11:1d:89:77:7f:e1:bf:ab:2b:15:fc:e8:f9:47:85:ea:c4:ed:
         86:3c:76:a5:a2:26:3d:fd:9a:a1:c4:84:45:dc:29:bc:2d:81:
         37:65:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:35 2024 by rpki-client on console-ams.rpki-client.org