Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/W9BBl_MBtORpOl7vIIpUrcjT27E.roa
File:                     W9BBl_MBtORpOl7vIIpUrcjT27E.roa (raw, json)
Hash identifier:          ofKNyLnUmxA8ZS1I5xq4zGQpWc/DWvcP1biXcnKOXzY=
Subject key identifier:   5B:D0:41:97:F3:01:B4:E4:69:3A:5E:EF:20:8A:54:AD:C8:D3:DB:B1
Certificate issuer:       /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial:       028DEF
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/W9BBl_MBtORpOl7vIIpUrcjT27E.roa
Signing time:             Fri 13 May 2022 06:47:02 +0000
ROA not before:           Fri 13 May 2022 06:47:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48343
IP address blocks:        193.33.192.0/24 maxlen: 24
                          193.33.192.0/23 maxlen: 23
                          193.33.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167407 (0x28def)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
        Validity
            Not Before: May 13 06:47:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bd04197f301b4e4693a5eef208a54adc8d3dbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:13:85:48:09:b6:f1:96:81:77:2e:1f:05:
                    3d:61:6d:81:91:78:aa:a9:df:a7:b7:e4:c9:de:73:
                    87:b1:63:e6:33:71:d8:ad:f0:5a:63:b4:5a:ac:3a:
                    d4:9c:f6:98:2b:e8:5e:b2:6e:c1:89:35:73:48:e7:
                    e9:84:c8:65:66:94:82:39:04:18:95:c7:ba:7c:37:
                    6e:a9:ec:54:54:27:9b:e3:9c:bb:80:2b:cf:8d:ca:
                    cc:76:b7:2c:6e:61:87:39:af:6e:2c:67:8d:ae:77:
                    26:26:2f:4f:b0:2d:bc:e8:a7:48:90:da:fc:19:db:
                    a5:6e:7c:f3:41:88:a5:6e:f7:3e:53:e4:2f:ea:c2:
                    b2:1c:43:2a:b1:26:57:1e:64:7b:3f:7d:95:f8:3c:
                    c8:de:74:56:df:5c:41:fe:48:41:7c:26:65:07:d3:
                    1c:9b:c3:a1:f6:7c:bf:12:3b:7c:f7:a9:c2:46:1e:
                    a0:d6:51:b5:41:68:a7:19:fe:88:4f:1a:c0:75:49:
                    4c:f5:e1:c7:35:43:9f:f1:9c:17:e6:d7:e8:f7:76:
                    c2:12:46:e0:55:48:7a:c8:df:23:64:1f:d5:fe:4f:
                    c6:4c:6d:6a:6b:e9:e1:93:b4:c0:53:8c:cc:19:4b:
                    ec:18:34:66:9b:93:d7:3b:2b:89:8a:63:0d:bd:93:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D0:41:97:F3:01:B4:E4:69:3A:5E:EF:20:8A:54:AD:C8:D3:DB:B1
            X509v3 Authority Key Identifier:
                keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/W9BBl_MBtORpOl7vIIpUrcjT27E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:a7:7e:b9:5c:71:f6:5e:04:f1:43:ea:0a:0f:57:d3:0c:b3:
         99:49:f4:6c:64:e2:c9:84:c0:3f:43:ef:1a:a1:b9:89:bc:4b:
         ea:51:07:d6:77:bd:30:e8:b2:06:27:12:26:21:eb:25:f5:b5:
         ee:79:24:c5:ba:3a:ed:64:0f:1c:1f:71:1d:8d:bb:57:90:a4:
         fc:5c:26:39:4d:59:b3:31:3d:3b:77:c5:9f:bb:d1:4c:d6:ba:
         13:2b:01:c3:d2:9d:96:64:05:c4:4a:45:31:f3:df:e2:79:8d:
         b3:04:16:8a:ad:32:62:a5:90:ae:2e:ee:4f:8e:d9:63:be:09:
         74:fb:1a:3f:4b:54:c7:52:39:59:4f:ce:97:5d:f2:0a:de:55:
         cd:66:3a:b3:06:42:d8:29:39:8c:8e:cf:a9:25:21:8b:f7:a2:
         be:f5:7d:7d:81:3d:27:96:5b:c4:f4:18:08:9f:b3:d9:be:ef:
         49:11:29:1e:71:ad:66:e0:25:50:c4:de:7e:69:80:17:51:fd:
         5c:83:c9:39:ff:fd:ab:f6:97:cc:a3:06:f5:23:e9:b4:ce:21:
         e6:23:b5:d5:97:57:ef:97:a9:7a:f1:77:dc:ad:53:9f:e0:ea:
         1a:c8:1b:19:bc:3d:d9:6f:1d:0d:70:7d:f7:39:9d:48:ad:aa:
         3d:25:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:02 2024 by rpki-client on console-ams.rpki-client.org