Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/pqZWJaUHL30NNjUZ19Ujj5CqOPM.roa
File:                     pqZWJaUHL30NNjUZ19Ujj5CqOPM.roa (raw, json)
Hash identifier:          nrEeHiXnH/t4podCT5ehULbiJvacWpda7VrnCquJHKg=
Subject key identifier:   A6:A6:56:25:A5:07:2F:7D:0D:36:35:19:D7:D5:23:8F:90:AA:38:F3
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       015801E5
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/pqZWJaUHL30NNjUZ19Ujj5CqOPM.roa
Signing time:             Sat 01 Jan 2022 03:58:44 +0000
ROA not before:           Sat 01 Jan 2022 03:58:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25066
IP address blocks:        193.201.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22544869 (0x15801e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Jan  1 03:58:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6a65625a5072f7d0d363519d7d5238f90aa38f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:3e:28:e7:6b:76:09:ab:57:1c:fe:c0:54:
                    20:fa:c5:ca:63:be:c6:6c:87:6c:12:f8:10:44:2e:
                    b9:19:2c:33:a8:81:21:3e:4b:31:26:82:ad:fb:c6:
                    1c:c4:77:05:43:2a:fd:e6:ab:8a:2f:04:88:03:9b:
                    8e:34:99:8e:08:8c:45:92:7d:ab:0e:c5:02:de:0b:
                    29:92:96:07:a7:6a:25:91:77:78:b8:88:b2:b0:7e:
                    3b:6d:8c:83:46:9d:d0:26:8b:45:56:d1:49:2b:9c:
                    d8:2b:21:6b:da:40:b9:15:38:a7:a9:a5:f6:f9:a2:
                    44:32:8d:cf:d7:26:f5:d6:9e:50:63:39:13:6a:ae:
                    09:5d:c3:d7:fa:65:f9:2e:34:8a:84:7e:be:c9:c4:
                    e8:86:19:66:6e:5e:83:63:2f:4c:1f:0f:bb:9a:c5:
                    82:64:41:f3:a5:2e:ad:da:15:f0:1b:7a:08:93:93:
                    99:cf:61:35:14:7b:7c:ef:58:56:9f:de:a8:cd:4e:
                    3f:66:8c:59:b3:c0:28:a6:17:b2:14:e5:6c:01:bb:
                    d3:be:a8:f0:bb:21:ca:90:65:36:fc:67:ed:d0:6c:
                    e2:a1:25:9f:d5:a0:d3:6f:17:e2:d4:fb:41:9c:9a:
                    6b:0d:a6:a4:cd:2d:22:26:91:74:79:02:12:2b:74:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A6:56:25:A5:07:2F:7D:0D:36:35:19:D7:D5:23:8F:90:AA:38:F3
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/pqZWJaUHL30NNjUZ19Ujj5CqOPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:03:56:02:34:6f:3c:c8:89:2c:89:17:e7:80:6e:b7:18:
         05:67:f6:f8:27:00:33:c7:32:0e:e4:12:23:d1:7a:1f:45:11:
         86:b6:41:7b:1e:0a:ed:cb:60:3e:6f:b5:42:ba:e8:e0:8b:83:
         f9:c8:0b:a6:19:ba:a0:e4:c4:de:b1:38:8f:0b:25:65:1e:48:
         45:cc:af:6b:cf:58:67:45:3c:09:a2:35:38:9e:1f:cd:9f:ef:
         db:af:9b:02:af:7f:9a:5e:e5:8e:fd:70:84:20:be:87:75:e8:
         7f:8f:c1:94:7b:03:b8:9d:47:48:2d:b7:82:d0:b9:23:7c:00:
         16:dd:4a:2b:96:fe:94:18:a6:ed:6e:af:83:e3:93:a4:51:e7:
         50:57:1a:e0:62:0c:b4:69:1d:b0:62:31:49:5a:a4:6b:8d:a9:
         62:5d:57:c2:81:e3:44:3e:b7:36:95:53:aa:f2:d9:8b:a9:59:
         5a:74:8a:26:12:e8:59:8c:7e:e1:c7:a0:fe:12:60:95:03:85:
         de:f2:20:03:67:47:fb:79:56:63:fb:14:53:ca:13:8d:68:ac:
         f2:7f:70:0f:39:91:9e:60:75:c2:93:8e:ba:cd:44:41:a2:9b:
         84:4c:d9:e6:9f:fa:8a:79:eb:6e:e2:cd:1a:fa:27:eb:b9:e4:
         ae:ac:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:34 2024 by rpki-client on console-ams.rpki-client.org