Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/9JEx7d9SbuS_SJ4Gji7BeoB0lrU.roa
File:                     9JEx7d9SbuS_SJ4Gji7BeoB0lrU.roa (raw, json)
Hash identifier:          lvOaSTljh8ma8QGafY//0/NBRmDw+D7baBZeurktn0k=
Subject key identifier:   F4:91:31:ED:DF:52:6E:E4:BF:48:9E:06:8E:2E:C1:7A:80:74:96:B5
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       081F82A0
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/9JEx7d9SbuS_SJ4Gji7BeoB0lrU.roa
Signing time:             Mon 09 May 2022 10:00:19 +0000
ROA not before:           Mon 09 May 2022 10:00:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212426
IP address blocks:        193.219.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136282784 (0x81f82a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: May  9 10:00:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f49131eddf526ee4bf489e068e2ec17a807496b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:52:bb:25:5b:74:bf:62:31:dd:2d:22:92:
                    38:9a:81:b1:05:56:93:72:19:f6:22:f4:72:0e:94:
                    c3:51:e9:97:ee:8a:4e:2d:6b:af:7c:73:b1:4f:0c:
                    28:d5:54:32:4d:dc:ed:dd:13:bb:30:6b:be:74:9f:
                    7f:23:15:73:2b:a5:96:22:4e:08:c9:b7:69:44:f9:
                    1d:21:59:69:0e:5e:08:cd:28:0c:42:4a:30:58:1b:
                    10:be:f9:b5:25:37:f6:f2:19:49:ac:09:5b:70:8f:
                    39:72:a6:c3:90:a2:12:1a:c0:a0:38:4e:d3:17:a1:
                    8a:67:c7:fb:92:79:84:49:7c:99:b8:b2:51:a4:48:
                    f6:4b:d3:1a:a5:d7:3d:14:8d:7c:f9:1a:c4:72:75:
                    62:fb:ee:a8:63:10:2b:96:87:29:f2:89:ca:98:0b:
                    7d:9c:fe:d7:2b:f6:24:d0:2c:f9:c2:28:bc:ea:d5:
                    da:63:3d:d2:74:33:68:34:47:1f:20:af:8e:66:95:
                    8f:1d:56:1e:44:8a:91:04:48:da:e0:d4:95:4f:01:
                    f6:29:10:7b:e2:6c:7c:7c:98:a4:1b:9f:01:48:a0:
                    77:4c:98:42:14:91:dc:a0:ae:c8:48:0f:ed:80:e1:
                    6b:21:8d:e0:fd:cd:b7:68:78:b3:86:71:98:8a:75:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:91:31:ED:DF:52:6E:E4:BF:48:9E:06:8E:2E:C1:7A:80:74:96:B5
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/9JEx7d9SbuS_SJ4Gji7BeoB0lrU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:2f:97:77:ed:64:0f:07:1e:7d:db:b3:e5:be:f0:b3:52:a8:
         8e:22:62:f7:98:f5:00:eb:35:dd:42:cd:6a:2f:5b:df:04:b4:
         13:01:9f:e3:20:ce:8c:63:59:f2:35:b7:e0:7a:40:36:e2:91:
         bf:b1:02:b0:e8:2f:d7:26:e4:d3:be:9b:24:e3:f7:24:58:e7:
         3e:45:cf:8d:31:43:70:3b:3a:d5:5c:60:8b:c3:21:ca:e4:29:
         01:5c:d9:c9:91:a2:fc:28:3d:a9:b9:6d:a3:f8:b7:28:b4:87:
         78:96:7b:62:12:06:3e:be:07:87:ed:e1:b8:12:7b:fb:13:84:
         25:47:f5:f7:3c:a5:7f:dc:d7:ff:15:45:c3:f2:2e:f0:15:24:
         be:53:c9:72:c4:b2:f2:02:36:6e:94:6c:7a:ba:f7:fc:0b:a5:
         f5:17:1d:2a:bc:ac:22:37:e3:58:57:be:30:58:f9:ac:ca:85:
         88:c0:65:8b:7d:9d:07:e4:b8:73:55:5e:3d:15:d0:e3:5c:30:
         24:b1:2d:69:8f:b9:a1:a1:7d:1d:7f:07:72:eb:b5:db:1e:1a:
         e2:8d:13:58:cb:8e:72:22:d2:94:44:9d:c3:cf:5a:7e:7f:7c:
         86:d6:63:76:d6:b3:2f:60:10:49:77:8a:72:c8:54:9f:6a:2b:
         4c:c8:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org