Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa
File:                     7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa (raw, json)
Hash identifier:          Qi1YXrhfstJ2ElIyRJmcyb471lPkK0YaxSV2eLq/7Ew=
Subject key identifier:   EC:92:7E:61:CE:27:2C:7A:7F:46:02:52:E7:81:FC:F3:0B:57:5B:1A
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       35BC9A22
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa
Signing time:             Sat 01 Jan 2022 12:06:29 +0000
ROA not before:           Sat 01 Jan 2022 12:06:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2089
IP address blocks:        193.48.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901552674 (0x35bc9a22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan  1 12:06:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec927e61ce272c7a7f460252e781fcf30b575b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:94:ba:85:cf:d4:a0:77:88:1d:0a:0a:7f:cf:
                    57:38:20:b2:f0:1a:52:0b:5b:55:b8:53:9c:d2:c5:
                    81:5a:31:82:f0:b5:4e:40:7c:bb:22:00:c1:7d:05:
                    f2:66:a2:1a:b2:11:cd:a0:bd:c8:67:07:fe:d5:fe:
                    8c:ec:fc:3c:11:49:72:db:d1:e6:2c:85:70:fc:a9:
                    0f:77:10:a4:e1:20:82:bd:da:f5:de:e8:78:5b:0c:
                    06:55:c4:70:6f:45:d1:67:5a:b3:39:58:e1:3e:f6:
                    8c:26:9b:86:23:42:16:ae:7c:48:55:fc:99:71:d9:
                    e0:8d:50:aa:40:cc:38:fb:50:f5:64:b0:68:ba:26:
                    6d:d2:5e:56:37:89:2e:0c:5d:c8:01:a0:af:a8:28:
                    46:d0:7b:d1:fb:92:c7:a3:c1:42:d3:e6:24:8c:d7:
                    b7:29:f1:a3:18:33:52:dc:b6:18:6f:52:86:e3:e5:
                    08:a8:fe:cb:1b:90:eb:3c:11:71:4e:2f:f1:b3:9b:
                    c9:8b:a1:8b:04:12:99:b4:d0:32:9b:9e:91:c0:a7:
                    19:68:66:6e:0d:8f:49:c2:f8:47:4e:8c:ff:cc:b6:
                    96:aa:87:b2:66:b5:7e:88:f0:31:33:48:21:2b:c1:
                    b7:af:a9:eb:34:fc:20:5d:9f:31:cb:48:cf:d0:27:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:7E:61:CE:27:2C:7A:7F:46:02:52:E7:81:FC:F3:0B:57:5B:1A
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.48.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:7b:ae:17:1f:e4:56:d0:0e:04:7b:12:d8:c7:f9:c0:16:
         a7:46:ce:80:4b:5e:5a:98:61:18:9d:6e:9a:af:11:7e:23:ba:
         65:08:5a:7c:f9:f8:72:87:2b:e8:38:40:f0:9f:c8:28:0a:b4:
         73:ea:bc:85:ef:ac:5b:7e:46:b4:9c:33:65:90:fd:8b:a1:54:
         9a:2e:a2:e0:77:c8:f7:27:c6:18:8d:0d:91:76:18:05:a8:0c:
         30:35:b1:1f:fc:c7:7f:6f:6a:9f:06:c5:0d:9b:4e:a7:c5:db:
         f7:f6:49:1e:bd:c7:40:c8:4f:44:e7:71:3f:c9:5e:f6:17:b0:
         eb:a9:55:8f:f7:5e:bc:69:b1:0c:79:7b:8b:39:e1:39:d7:aa:
         d1:27:b3:10:22:95:c9:6f:99:d7:96:d3:28:bb:7e:81:b9:54:
         c9:8f:78:10:33:63:76:0e:92:28:35:26:82:8b:55:2e:41:ac:
         32:ca:40:c2:26:5b:b0:8a:c3:35:17:d4:af:65:1a:ae:98:1c:
         2f:6e:09:62:7f:a0:57:86:37:2a:17:d1:c8:bf:fd:a9:8b:7c:
         45:10:4e:6d:38:c6:26:31:da:4c:2d:fe:7a:e0:d4:43:5e:78:
         4f:2e:a7:e6:a7:e1:99:89:d5:3c:71:f2:c5:d8:a0:2c:36:a0:
         59:21:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:27 2024 by rpki-client on console-fra.rpki-client.org