Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/x-HYXzX8AHsgQdHaZ8oykCYweIA.roa
File:                     x-HYXzX8AHsgQdHaZ8oykCYweIA.roa (raw, json)
Hash identifier:          SeQuHyjsYhuVGpVCZ6sM3f+76Ab7pzypVzQaHgx9bzs=
Subject key identifier:   C7:E1:D8:5F:35:FC:00:7B:20:41:D1:DA:67:CA:32:90:26:30:78:80
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       0182AAFE21F7441586CEDAF091630C47F1AF
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/x-HYXzX8AHsgQdHaZ8oykCYweIA.roa
Signing time:             Wed 17 Aug 2022 08:49:17 +0000
ROA not before:           Wed 17 Aug 2022 08:49:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        192.145.52.0/22 maxlen: 22
                          193.219.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:aa:fe:21:f7:44:15:86:ce:da:f0:91:63:0c:47:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Aug 17 08:49:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7e1d85f35fc007b2041d1da67ca329026307880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:63:67:aa:d4:25:b3:73:4a:6b:7f:25:07:
                    31:21:da:7d:11:71:b3:67:9e:39:d3:c3:9f:6d:60:
                    a0:fa:e7:d3:27:6b:7d:2f:35:c0:51:cc:64:df:39:
                    01:3f:91:01:a5:2b:e3:88:08:98:3a:0e:38:bd:e3:
                    59:b7:c8:8e:ba:cb:0e:bf:0f:c6:c6:9a:4f:6a:04:
                    66:93:99:43:89:49:ed:17:97:06:2d:ef:4b:03:a2:
                    9e:ad:f1:54:c3:c4:81:19:23:1d:c9:16:10:68:93:
                    86:62:4d:0c:cf:8f:60:64:c2:8a:01:0a:15:30:d3:
                    91:f2:f8:a0:c1:06:6b:05:db:7e:03:cb:78:e2:31:
                    12:7c:f6:35:70:cf:47:e1:f5:89:fc:7c:19:f1:c1:
                    11:8c:a2:cf:49:64:4f:6a:c2:33:71:65:93:87:94:
                    d9:90:18:4f:34:38:75:62:90:b1:a2:5c:e0:0b:e0:
                    4b:cd:81:e9:0e:5f:01:ad:1b:32:57:70:c2:67:b2:
                    60:3d:aa:5d:45:7c:5a:71:8a:51:75:3f:dd:a6:8d:
                    f7:a0:53:25:93:26:06:71:64:85:f1:fb:55:47:9a:
                    b6:8d:5a:be:c2:55:c0:43:0f:66:2d:16:f3:34:09:
                    66:75:0e:b1:1c:90:3c:39:96:ff:28:3c:29:dd:bf:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:D8:5F:35:FC:00:7B:20:41:D1:DA:67:CA:32:90:26:30:78:80
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/x-HYXzX8AHsgQdHaZ8oykCYweIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.52.0/22
                  193.219.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:78:f7:60:9b:2e:ff:68:3b:2c:f3:20:45:c6:b4:ec:7f:90:
         aa:0b:8e:35:79:b4:50:5c:c6:4f:da:67:e3:41:50:ad:b3:ad:
         30:60:d0:57:3a:1b:6b:9f:89:0f:46:63:ea:4e:4a:82:15:29:
         24:0a:c4:4e:d4:15:38:b9:3c:c8:0c:f9:7a:e3:05:bd:a2:89:
         78:69:1a:ce:9b:88:0a:5a:96:9b:9a:b3:14:9e:25:60:a8:05:
         1f:ee:a1:09:bf:90:be:95:c3:96:a9:03:1f:cb:2f:81:73:e9:
         55:72:69:67:a3:d7:04:43:d2:86:8c:02:f1:69:91:43:9c:23:
         2e:a8:d6:39:2c:7d:b3:13:a3:c8:9f:72:25:34:88:d5:6d:88:
         28:56:cf:09:99:7b:dd:3e:f2:08:cf:ef:7e:18:bd:5f:13:3c:
         e1:16:05:8d:c5:06:46:b1:d4:b1:1d:62:bc:45:55:fe:55:0c:
         f6:ef:12:ea:4e:09:36:a1:81:7a:f6:a4:5d:95:81:ea:6a:b5:
         7d:0c:ea:52:80:1c:8b:91:90:59:f1:22:a9:33:2f:94:6f:c9:
         97:10:f9:76:68:3b:2a:5e:68:0e:5e:05:8c:14:6e:cc:d4:f8:
         8a:f7:ee:cc:61:8b:67:49:1b:9a:21:0b:cb:8f:b8:d4:ea:5d:
         ca:9d:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org