Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/mEhpWAnPtuuLFmLgRJxV5Ky3lWY.roa
File:                     mEhpWAnPtuuLFmLgRJxV5Ky3lWY.roa (raw, json)
Hash identifier:          qR8qsxpmeC+mbx48O/mzKlF1FihOEjrS/EPKyNCNuJk=
Subject key identifier:   98:48:69:58:09:CF:B6:EB:8B:16:62:E0:44:9C:55:E4:AC:B7:95:66
Certificate issuer:       /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial:       0552315C
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/mEhpWAnPtuuLFmLgRJxV5Ky3lWY.roa
Signing time:             Sun 10 Apr 2022 17:29:33 +0000
ROA not before:           Sun 10 Apr 2022 17:29:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212947
IP address blocks:        93.157.187.0/24 maxlen: 24
                          206.204.104.0/24 maxlen: 24
                          206.204.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89272668 (0x552315c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
        Validity
            Not Before: Apr 10 17:29:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9848695809cfb6eb8b1662e0449c55e4acb79566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:19:0d:24:6b:64:97:a3:fe:20:7e:07:51:
                    73:d9:b7:b9:70:b9:ab:24:92:7a:d9:97:8f:47:fd:
                    ff:d5:d0:b2:bd:0c:37:63:cd:a6:2b:2d:f1:e7:04:
                    77:50:3a:3f:67:26:17:fb:1c:35:31:2d:34:3f:80:
                    71:87:a7:ef:71:9f:1e:62:b2:1e:69:33:4c:bd:df:
                    fc:6c:4e:8e:dd:64:12:ad:e7:ff:c9:7c:cc:e2:70:
                    56:d8:b1:c0:86:22:db:01:16:c4:93:bc:b3:0b:95:
                    c4:43:2c:4d:75:8f:e6:7d:f1:04:f3:02:07:2e:0a:
                    b2:85:2f:fc:d2:70:62:a5:6e:56:80:37:cf:06:7b:
                    58:cb:81:95:00:69:67:ae:1a:47:8f:02:5d:1f:11:
                    69:ae:19:dc:04:57:12:79:e9:6c:e3:8b:f2:04:f2:
                    05:3e:34:3a:ec:c1:ef:12:80:c7:80:8c:da:a3:f5:
                    af:c3:a7:ba:99:db:b8:31:8b:98:70:45:bd:e3:96:
                    7b:8f:4d:18:a0:5d:26:c8:59:ae:92:56:43:df:04:
                    3d:b5:06:a2:c9:fa:8d:02:eb:70:2b:35:34:d1:39:
                    9a:43:13:bb:fc:c0:57:a6:5f:fc:6a:6d:e3:f2:d2:
                    95:c9:45:3d:3b:ff:62:0c:0b:96:30:31:fe:5a:01:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:48:69:58:09:CF:B6:EB:8B:16:62:E0:44:9C:55:E4:AC:B7:95:66
            X509v3 Authority Key Identifier:
                keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/mEhpWAnPtuuLFmLgRJxV5Ky3lWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.187.0/24
                  206.204.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:41:95:d2:eb:cf:06:5a:5a:21:ba:4c:a0:03:31:42:8a:
         3b:e1:10:59:1a:74:6c:d7:8c:5f:6f:2a:e7:8e:33:ca:e7:8a:
         a3:65:5b:32:6e:3a:a1:ed:86:3c:6c:0a:13:f9:7d:7e:e5:27:
         a4:da:f1:14:96:19:80:52:a0:44:c7:73:d2:cf:53:25:b6:ac:
         aa:d3:5a:bc:d3:07:24:cc:c2:31:06:fa:96:ee:6d:58:72:3b:
         45:00:e0:78:6a:97:11:ec:b1:f2:a8:22:a8:60:e9:60:93:34:
         f8:e7:21:29:bb:22:87:67:88:bf:41:3f:c8:f5:50:33:c7:4b:
         d2:a7:3b:43:ad:fb:a1:44:6d:0a:62:14:09:70:3f:1b:e2:ea:
         fb:56:29:8f:4b:08:79:a6:cf:14:ed:70:49:71:ee:e9:0c:36:
         3c:08:32:25:a6:02:10:e8:80:2b:b7:16:c7:e2:54:1f:2e:8e:
         bc:4b:d9:ab:11:57:a5:46:31:b0:1e:31:2b:5f:b4:26:a3:78:
         84:90:69:44:bb:18:06:68:87:ab:31:9e:bf:3d:84:38:ea:21:
         d8:21:cd:b7:4f:fc:86:a0:bf:79:5a:07:2a:0f:dd:5a:5c:0e:
         4f:17:89:bf:00:2c:cd:19:24:d7:7b:0f:58:c0:7e:6f:90:cf:
         08:15:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:58 2024 by rpki-client on console-fra.rpki-client.org