Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/gWvuzi7oJCCZR5zN9f_K6D2Lbic.roa
File:                     gWvuzi7oJCCZR5zN9f_K6D2Lbic.roa (raw, json)
Hash identifier:          P0N0PZRMgQrwK0dBVsWdB/Dt7OHURMtqAqd3seEIXDY=
Subject key identifier:   81:6B:EE:CE:2E:E8:24:20:99:47:9C:CD:F5:FF:CA:E8:3D:8B:6E:27
Certificate issuer:       /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial:       0BA2D627
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/gWvuzi7oJCCZR5zN9f_K6D2Lbic.roa
Signing time:             Sat 01 Jan 2022 12:02:17 +0000
ROA not before:           Sat 01 Jan 2022 12:02:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206509
IP address blocks:        194.207.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195221031 (0xba2d627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
        Validity
            Not Before: Jan  1 12:02:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=816beece2ee8242099479ccdf5ffcae83d8b6e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:36:2c:0c:98:ea:74:ed:e6:56:91:b3:b0:
                    3c:80:25:8f:d5:4f:b6:a4:51:1d:66:d7:c4:23:ac:
                    8b:94:37:cb:cb:d9:70:14:36:60:da:cc:9c:af:59:
                    d9:51:ad:a2:8a:81:6e:81:84:e1:f4:9f:43:7b:57:
                    28:27:b8:bb:83:78:85:24:20:2f:f4:0d:c7:30:bb:
                    86:f9:df:e1:95:72:6d:25:ac:e1:aa:7c:22:8b:ad:
                    6a:9f:13:01:3a:fc:35:1e:68:8b:86:3b:27:3a:84:
                    29:47:5a:1d:9c:df:e5:d2:4c:f5:a6:f2:27:e3:7a:
                    b5:55:41:63:5b:9b:6c:48:dc:28:fc:a9:2b:44:26:
                    94:8f:39:45:74:2f:e7:25:af:4b:f6:dd:ba:fe:c3:
                    7b:2e:d4:aa:e3:e5:08:24:d7:0e:0c:d6:bc:5c:99:
                    a8:08:47:a9:50:3a:80:09:13:8c:d4:9d:cd:43:3d:
                    03:f8:60:38:2e:8c:14:96:e6:46:b9:92:56:09:1d:
                    45:c8:f2:e7:da:4b:bf:63:d9:60:18:a3:e2:f0:95:
                    a2:ab:de:19:7f:45:90:85:14:cb:5b:8d:13:a7:b7:
                    4b:7f:59:d6:e7:e0:3a:50:cb:d1:ae:f4:e7:7d:73:
                    46:08:34:3f:23:68:ed:63:56:76:21:26:f3:5c:7b:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6B:EE:CE:2E:E8:24:20:99:47:9C:CD:F5:FF:CA:E8:3D:8B:6E:27
            X509v3 Authority Key Identifier:
                keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/gWvuzi7oJCCZR5zN9f_K6D2Lbic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.207.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:7f:2d:d6:f7:99:29:43:51:74:69:76:0b:33:ff:bc:ae:
         a0:13:ba:c6:3b:e6:37:1b:b1:3f:b3:7d:f9:a3:16:9f:51:f7:
         04:be:be:56:da:b8:2c:01:02:7c:4f:dc:d4:1f:da:b9:a6:ea:
         1a:d2:24:60:28:cf:3b:17:40:66:1d:5f:53:ac:64:97:1f:c5:
         ee:b8:4a:3d:4a:78:0f:a5:2e:69:11:78:b4:f2:e7:46:2f:28:
         82:e6:5d:88:22:db:19:ef:d1:a6:82:d3:7c:7e:68:4d:57:c3:
         08:c7:c5:fb:40:32:c9:a0:d5:a0:c7:74:d9:6a:b2:81:91:a0:
         3a:e9:b6:3f:aa:17:13:9a:71:e5:ae:6e:c8:82:71:32:bc:9b:
         f9:3f:c4:72:64:e2:32:a4:52:1b:45:79:2d:09:1b:c1:91:36:
         b9:b7:c0:7d:0f:44:a2:40:43:2e:ff:8a:5c:2d:41:01:f4:74:
         4e:45:d9:62:46:17:d4:cd:66:e9:42:95:4d:a5:46:36:90:0b:
         65:fe:f3:43:07:4f:ec:47:6e:c1:ec:41:e7:a7:59:92:bf:15:
         71:cf:17:73:71:fc:66:d3:f8:ca:cc:02:86:62:cb:f0:68:ab:
         13:7f:32:6a:77:8c:76:98:88:11:8f:e3:2c:61:d9:a1:60:5e:
         e6:e6:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org