Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203539373838.roa
File:                     3230342e31302e3139332e302f32342d3234203d3e203539373838.roa (raw, json)
Hash identifier:          h58WA83Ntxx+iYT6RN4LEdM3NFoK+1ANuV9kGZbcLZo=
Subject key identifier:   BA:A7:A7:62:B7:3A:05:16:6D:0A:B0:AD:26:DB:76:3B:26:41:13:11
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       3A9B7CF1D248EDC2E62B00CE6D6FAB43D5867FAE
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203539373838.roa
Signing time:             Fri 02 Jun 2023 06:40:43 +0000
ROA not before:           Fri 02 Jun 2023 06:35:43 +0000
ROA not after:            Fri 31 May 2024 06:40:43 +0000
asID:                     59788
IP address blocks:        204.10.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9b:7c:f1:d2:48:ed:c2:e6:2b:00:ce:6d:6f:ab:43:d5:86:7f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun  2 06:35:43 2023 GMT
            Not After : May 31 06:40:43 2024 GMT
        Subject: CN=BAA7A762B73A05166D0AB0AD26DB763B26411311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:a0:10:d6:4a:09:95:1e:31:34:82:34:b9:
                    18:45:9a:9d:8b:97:17:cf:2d:93:3e:89:a3:b6:be:
                    ff:ab:41:1a:7a:47:30:e9:3d:33:13:d6:3a:38:dc:
                    da:77:9f:90:99:2d:d0:50:66:6d:fa:96:7f:49:31:
                    ef:17:3e:e4:41:3b:67:27:6b:a2:42:58:6e:29:5f:
                    8e:22:35:84:80:77:f9:24:a9:c4:7e:da:8d:12:b4:
                    79:25:f2:a6:23:5a:14:51:d2:27:64:c9:f7:0f:56:
                    b6:dc:9e:a1:1f:28:40:91:3c:5f:8f:12:62:83:5c:
                    04:6f:9e:69:8c:35:eb:a9:b4:dd:63:dd:b4:c5:8a:
                    09:40:27:82:b4:5e:1e:1d:ff:f5:60:e8:77:9a:99:
                    ab:83:c6:91:d0:ee:31:87:67:32:d1:68:b3:13:ad:
                    5b:e7:d6:fa:73:7a:9b:02:69:02:0e:6b:2f:10:f5:
                    79:b6:fb:9f:1d:cf:8f:4d:da:3e:fa:70:eb:57:7e:
                    b7:8c:b2:57:81:06:52:cb:e7:2c:2b:ed:ff:ff:f7:
                    66:0f:5f:eb:d8:58:82:e0:29:2f:71:26:a0:c3:20:
                    d4:45:9d:86:5b:86:08:6a:48:35:c7:09:2d:d5:4f:
                    10:b6:ab:21:a0:47:b9:7c:c7:56:89:24:bc:4f:d5:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A7:A7:62:B7:3A:05:16:6D:0A:B0:AD:26:DB:76:3B:26:41:13:11
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203539373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:30:22:be:c4:39:1f:c2:c2:1e:a8:e9:58:9a:b4:2d:e7:
         f2:77:f1:6f:2a:20:b6:2c:f8:d1:b7:de:b2:73:d2:5f:8d:18:
         e4:b7:e4:ed:bf:bd:3c:6a:8c:81:9e:e9:18:9c:da:79:18:58:
         45:be:ee:cd:1a:e5:bb:21:8b:4a:62:a4:a4:05:70:a0:5f:a9:
         a5:0c:d4:15:9f:5e:65:04:eb:e8:db:b8:b5:0a:ce:c6:19:11:
         fb:f2:eb:ff:f8:65:19:54:bd:64:d3:a0:3e:8f:31:4f:6c:c6:
         33:61:20:7e:b7:60:63:8d:14:f0:bc:d0:70:58:a8:1e:30:a1:
         e5:bf:bd:b7:43:57:f7:43:fa:51:52:a3:1b:55:ef:0a:b8:58:
         e4:dd:e8:75:a5:96:2f:aa:2e:ed:82:3e:c0:27:85:7d:80:ea:
         ad:da:5d:0b:52:f1:7d:7b:f2:a6:78:61:fc:87:72:97:7f:dc:
         8f:03:ea:75:e0:d3:4b:de:e0:00:df:0f:27:f7:ae:06:5d:4d:
         15:38:6c:58:1b:ac:3b:ae:52:c4:f9:21:28:35:51:9c:e3:5a:
         d1:78:42:a4:25:72:d6:b7:e9:03:84:ef:5a:ed:66:a7:c4:76:
         bb:b7:80:08:6f:c2:32:e6:68:d9:5f:89:1c:1b:1a:d9:4b:28:
         d1:25:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org