Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/zw5TmtI4H9ACn0D7Sui1hMl2Gn0.roa
File:                     zw5TmtI4H9ACn0D7Sui1hMl2Gn0.roa (raw, json)
Hash identifier:          Lh/G5OmbbWggNQtajnLZ0Q2EMgt+EA38HF3MsuZ78+o=
Subject key identifier:   CF:0E:53:9A:D2:38:1F:D0:02:9F:40:FB:4A:E8:B5:84:C9:76:1A:7D
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       76D633
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/zw5TmtI4H9ACn0D7Sui1hMl2Gn0.roa
Signing time:             Mon 16 May 2022 20:40:29 +0000
ROA not before:           Mon 16 May 2022 20:40:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.26.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7788083 (0x76d633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: May 16 20:40:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf0e539ad2381fd0029f40fb4ae8b584c9761a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:18:8d:d8:6b:80:97:b8:07:8b:fe:73:67:
                    bb:8e:80:5d:ec:08:ab:53:a6:e6:13:4c:d0:de:da:
                    4c:db:ad:7d:7b:52:ab:76:4c:76:f1:5d:d5:8d:8f:
                    6e:7d:0b:15:65:20:c8:d9:8a:57:45:42:e5:5e:42:
                    b7:24:49:1e:39:e5:d8:36:3e:3f:ad:23:bd:be:24:
                    3e:ff:64:31:f4:c2:d3:b0:5c:b3:69:d4:d8:9c:e1:
                    0a:68:68:a1:c7:4c:90:56:61:bb:14:d5:cc:70:cf:
                    e2:9a:2a:19:52:8d:93:96:2d:1b:a7:54:37:6f:3c:
                    a6:f3:19:ab:5a:d7:44:a7:0c:93:29:87:bd:49:30:
                    52:48:59:0e:d0:84:c6:13:57:34:20:ef:45:b5:18:
                    40:57:0c:ba:25:60:80:69:d5:f2:5f:85:ce:b8:8c:
                    7b:47:b3:2f:51:f5:cb:99:e5:62:73:50:b3:56:00:
                    ef:3c:f7:89:f3:6b:5d:d0:dc:3f:ce:c2:92:4a:90:
                    a7:b9:e2:b1:f8:5f:f2:8f:42:1d:73:61:7c:10:56:
                    77:61:f6:00:79:79:68:59:b6:d2:66:d7:ae:b9:71:
                    bf:5e:92:66:53:1d:d0:3e:5a:a6:71:60:dd:d8:be:
                    c8:41:be:aa:d1:6a:95:00:c8:59:e3:1f:7c:2a:fa:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0E:53:9A:D2:38:1F:D0:02:9F:40:FB:4A:E8:B5:84:C9:76:1A:7D
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/zw5TmtI4H9ACn0D7Sui1hMl2Gn0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:bc:4a:0c:ba:26:bb:09:57:2b:5f:60:a7:1c:e5:07:e2:
         f4:11:a1:36:5d:0d:aa:22:b1:ff:22:ca:37:af:3d:2b:ee:1d:
         6c:c1:86:c3:f9:f6:e4:d9:63:7b:a6:6e:18:26:24:98:32:af:
         30:5f:5f:9f:98:61:68:e9:ef:ea:dc:a6:ae:09:c7:6b:6e:07:
         dc:31:19:17:a7:b5:07:0d:79:da:04:3f:7a:4e:60:71:aa:39:
         e9:d7:dc:18:e7:cd:c8:46:07:ad:5e:24:c9:78:9c:6d:bc:79:
         3f:4e:eb:6a:27:80:da:35:b9:52:1d:ff:30:f8:ad:d7:19:92:
         fe:89:99:18:d4:3c:4d:b0:b3:f8:20:f1:b8:25:07:ff:6c:91:
         0f:ba:1f:1e:eb:df:78:88:98:d4:50:d4:bd:6c:38:9b:4a:bc:
         f1:32:a6:76:16:d9:b2:13:d3:a5:c4:6f:2e:9c:71:6f:5b:83:
         36:82:1a:73:5b:fc:a7:20:f3:ad:ba:00:e5:7c:f6:06:27:f3:
         7b:91:a4:21:db:ea:45:ec:8f:98:29:34:6f:e5:c1:15:ba:2b:
         5a:e1:86:49:26:d6:35:70:ee:88:63:ae:54:f7:e4:70:30:5d:
         80:dd:55:37:51:34:c5:c6:ca:24:da:f6:f8:2e:c3:5e:f2:2e:
         b6:15:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:12 2024 by rpki-client on console-ams.rpki-client.org