Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/dhrI8ETQrPk0wIKKn_hCtRT-ybg.roa
File:                     dhrI8ETQrPk0wIKKn_hCtRT-ybg.roa (raw, json)
Hash identifier:          XT+lAiy05tGSbvYA+n+l7QTA1xBJd351HJhVmWRDfXk=
Subject key identifier:   76:1A:C8:F0:44:D0:AC:F9:34:C0:82:8A:9F:F8:42:B5:14:FE:C9:B8
Certificate issuer:       /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial:       05259786
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/dhrI8ETQrPk0wIKKn_hCtRT-ybg.roa
Signing time:             Sat 01 Jan 2022 12:05:36 +0000
ROA not before:           Sat 01 Jan 2022 12:05:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15576
IP address blocks:        193.43.183.0/24 maxlen: 24
                          2001:67c:66c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86349702 (0x5259786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
        Validity
            Not Before: Jan  1 12:05:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=761ac8f044d0acf934c0828a9ff842b514fec9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:2e:cf:59:5b:b9:ad:e0:36:89:20:96:28:
                    d2:d7:1d:a2:82:62:7e:c5:65:10:bd:f1:15:57:65:
                    ce:47:9f:99:ca:af:1b:24:ea:82:ef:89:8f:da:e1:
                    f9:f7:e8:72:23:ab:db:d0:e5:3a:84:48:5d:a6:43:
                    db:55:12:15:a9:92:c8:20:93:ef:a2:8a:c5:94:b6:
                    4a:7a:97:15:9f:fc:06:4e:67:7c:79:4f:04:cf:45:
                    f6:a7:c1:e5:10:23:7d:fb:f7:65:0e:17:36:f1:1c:
                    18:2d:b5:c7:12:19:29:f8:b3:71:80:94:ad:e5:88:
                    13:99:8f:48:58:26:d3:84:14:d2:83:39:b3:84:2c:
                    32:5c:97:f2:2d:49:d8:81:41:23:4a:ba:2a:b2:59:
                    4b:58:27:e9:03:ee:36:39:ad:33:68:00:fe:70:bc:
                    a9:82:1b:1c:9b:6e:a8:26:97:6a:d8:6e:50:1e:71:
                    86:f0:34:55:cc:97:f2:d4:b1:60:83:40:b8:fb:55:
                    45:71:16:58:92:22:61:68:58:73:01:de:38:ff:5f:
                    53:d3:db:32:4e:37:a8:e4:d0:fc:80:07:0f:06:5e:
                    b5:ad:67:0d:c1:45:c2:15:85:e0:a3:11:98:aa:7e:
                    db:be:5d:b7:5b:c5:81:0f:c7:bf:2f:b8:ba:65:17:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1A:C8:F0:44:D0:AC:F9:34:C0:82:8A:9F:F8:42:B5:14:FE:C9:B8
            X509v3 Authority Key Identifier:
                keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/dhrI8ETQrPk0wIKKn_hCtRT-ybg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.183.0/24
                IPv6:
                  2001:67c:66c::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:e9:0e:57:91:7b:7a:5e:44:3e:78:28:b1:85:b1:61:0d:4d:
         52:ac:b7:f4:83:d5:7a:fe:3f:f3:fd:b9:b7:ad:b3:f0:84:7c:
         f1:26:c9:18:7b:5b:65:82:4f:3c:40:04:99:3e:09:fd:44:af:
         4d:4d:3d:2f:78:14:54:ec:a7:b9:91:fd:93:1f:07:c8:ba:5c:
         89:07:a5:85:5e:96:80:a1:3e:ee:57:ad:f9:db:5e:1f:33:99:
         a1:e6:d5:8c:f3:56:ec:05:e2:9f:5b:68:76:d9:c7:e4:a4:52:
         c5:1f:31:69:85:e6:d7:32:82:52:08:8e:68:cd:c6:c7:d8:0c:
         03:76:21:87:ef:a6:f2:fc:f2:c0:46:ed:a8:dc:ba:e8:9f:80:
         0d:fc:fb:a9:b6:64:7a:ba:b2:42:3d:ee:5a:10:92:ab:25:6e:
         75:b3:66:53:2a:da:bd:d9:34:4f:a0:c6:c0:00:ac:e4:3c:33:
         41:f1:b6:49:6e:e3:f7:74:dd:93:c1:3d:fa:9f:85:2c:5a:8e:
         85:5b:28:7c:5d:c4:a6:2d:97:87:1a:a6:7b:dd:10:f1:7e:ef:
         91:45:08:47:df:3e:2c:59:af:30:3b:bd:2d:20:27:0f:2d:5e:
         cc:e3:e8:94:91:15:03:ba:fe:49:ee:c3:46:49:16:7f:c2:37:
         8f:2f:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:56 2024 by rpki-client on console-ams.rpki-client.org