Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/jqiTAOxWZaCKMWJ5w2vXjQJH3Jc.roa
File:                     jqiTAOxWZaCKMWJ5w2vXjQJH3Jc.roa (raw, json)
Hash identifier:          E7icmxfETJthVt4DN04sxJ/Rq8kCeZu2fkZXkVD8roE=
Subject key identifier:   8E:A8:93:00:EC:56:65:A0:8A:31:62:79:C3:6B:D7:8D:02:47:DC:97
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       075DD44B
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/jqiTAOxWZaCKMWJ5w2vXjQJH3Jc.roa
Signing time:             Wed 08 Jun 2022 06:46:02 +0000
ROA not before:           Wed 08 Jun 2022 06:46:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63023
IP address blocks:        193.228.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123589707 (0x75dd44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Jun  8 06:46:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ea89300ec5665a08a316279c36bd78d0247dc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:01:3a:f1:25:f0:1f:21:f4:a7:f3:77:1d:7e:
                    9b:16:00:81:28:50:e2:b7:14:e2:d5:3a:48:2b:27:
                    76:1d:01:3d:f2:58:32:7b:e8:b6:4f:3a:23:97:43:
                    38:78:2c:a6:d4:94:10:43:96:1c:5e:25:74:54:21:
                    dc:f1:6c:fa:da:77:33:c7:03:f1:e6:29:68:51:dc:
                    44:35:bf:de:ed:02:bf:ec:22:ae:c0:2d:61:77:8a:
                    e9:c0:17:9d:ff:29:0e:05:c4:2b:ca:b4:0b:92:98:
                    5f:5a:7d:fd:e6:ca:9c:34:7d:2a:12:82:0e:ad:f8:
                    2d:92:18:a6:1e:0e:fe:6e:0f:9f:ab:ea:97:27:5e:
                    60:5b:c0:de:71:5c:0d:6b:4c:f3:2f:77:82:90:e2:
                    1c:22:bf:bd:13:19:46:61:1c:b6:a0:4a:d1:c4:4c:
                    29:6e:72:94:12:f4:4a:74:5f:85:79:a5:29:b3:84:
                    df:c8:42:d5:2a:94:9d:2e:d2:cb:1e:98:4c:80:3f:
                    bd:7d:c5:24:27:dd:f7:a7:62:ad:49:10:24:45:54:
                    5e:95:37:17:b6:8c:8d:4e:d3:82:b8:2d:b6:e4:97:
                    89:2d:c4:67:6e:74:0a:a3:c0:06:2c:87:74:97:47:
                    d5:fb:2e:41:71:92:76:96:81:d7:90:db:13:37:71:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:93:00:EC:56:65:A0:8A:31:62:79:C3:6B:D7:8D:02:47:DC:97
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/jqiTAOxWZaCKMWJ5w2vXjQJH3Jc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:28:f6:35:57:f7:af:7f:1b:cb:c6:d0:7b:e0:bd:61:a6:
         73:70:28:c2:70:c8:20:20:32:2d:c4:29:39:4a:61:5f:09:6d:
         ed:02:6b:49:bf:a8:69:f9:2e:d9:f5:9a:83:b7:ad:46:68:6f:
         ba:9a:84:39:65:1f:31:31:1b:43:15:1b:7e:34:5e:bd:e5:82:
         1d:0c:cb:d4:4b:a3:38:31:35:57:37:c6:ed:f1:3c:d1:58:25:
         e8:93:81:b0:8f:57:11:50:d2:ab:e9:c3:a3:15:05:05:39:85:
         6f:f7:9c:33:bb:57:76:3e:48:bb:96:f2:1e:7d:65:52:7f:7a:
         fe:98:3d:10:2b:26:e1:f1:1e:8d:40:da:b7:37:5e:0a:66:44:
         aa:27:0c:83:99:40:3e:4f:1b:92:01:f6:d9:ef:a8:b1:d3:ae:
         2e:63:e2:f3:ae:26:07:2c:6d:33:49:5c:65:d6:12:6b:b6:46:
         85:f5:93:e1:30:07:f5:6d:be:4a:db:b7:8e:97:f0:ff:fd:7e:
         f2:f9:06:64:de:71:d6:e5:b3:5a:93:61:67:83:ad:28:48:42:
         c1:a5:1a:28:d2:6d:ab:97:e2:25:44:3a:b9:af:72:d9:c5:5f:
         f2:f8:b2:f8:a4:f8:81:1c:76:89:e6:f0:cd:3f:d8:92:13:1a:
         51:3f:33:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:02 2024 by rpki-client on console-fra.rpki-client.org