Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa
File:                     bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa (raw, json)
Hash identifier:          MlN/gB2cuFhrPI8UoDRFI43SOOD1RGMIRqVHLNH5CKI=
Subject key identifier:   6C:01:24:EE:01:3D:79:84:4B:81:A1:91:D4:82:22:87:2F:9A:ED:7A
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1EC06D20
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa
Signing time:             Mon 30 May 2022 14:08:14 +0000
ROA not before:           Mon 30 May 2022 14:08:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20454
IP address blocks:        193.58.120.0/22 maxlen: 24
                          82.115.208.0/22 maxlen: 24
                          193.42.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515927328 (0x1ec06d20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 30 14:08:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c0124ee013d79844b81a191d48222872f9aed7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:3b:9d:17:35:bb:3f:80:a3:c0:ed:12:85:
                    e7:c4:a1:d9:62:26:6a:22:6d:5f:50:0e:de:3e:4d:
                    94:4b:b1:a4:01:9c:84:af:7a:46:7c:c0:09:78:aa:
                    1d:7a:ab:e6:c3:86:0f:a5:35:1b:9a:c0:0a:c8:ae:
                    4a:57:98:4a:7b:69:32:ae:84:7c:3a:9a:86:63:ba:
                    b5:0d:cd:20:12:73:33:79:13:e7:e6:58:5f:11:a0:
                    b0:53:2e:5d:46:f0:3d:29:4d:09:2d:98:72:b3:c9:
                    a0:0e:ce:97:dc:12:ae:37:11:4f:cb:c5:20:c1:6f:
                    53:3e:1b:ed:d6:1d:31:3d:af:eb:aa:7f:52:9c:94:
                    6b:86:30:aa:66:0e:1b:16:58:74:2b:3b:fb:41:c1:
                    fe:c1:11:9a:c5:5e:79:74:2a:96:e3:a4:7d:d4:36:
                    98:0d:14:bf:6d:f8:13:02:7d:13:75:0e:05:66:8d:
                    fb:c8:ce:75:b0:bb:2b:93:dc:40:e5:94:79:d4:1c:
                    49:e4:4c:61:92:36:ac:c9:3c:6c:64:df:9b:65:af:
                    9e:a4:04:22:2a:f7:bf:a6:c9:3d:66:c4:77:ab:0e:
                    8b:c4:d4:f3:7f:5f:31:84:9f:9d:a7:b4:b6:35:e0:
                    19:bf:bd:9b:52:b9:2d:c4:fa:b7:c6:16:c9:bb:de:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:01:24:EE:01:3D:79:84:4B:81:A1:91:D4:82:22:87:2F:9A:ED:7A
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.208.0/22
                  193.42.32.0/22
                  193.58.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:3a:3c:1b:cb:f8:e6:80:88:f0:3a:e0:0e:48:1d:cc:e7:3b:
         37:ca:51:3a:72:30:c0:25:eb:35:18:2b:f5:89:20:86:f2:dd:
         f0:cb:b3:48:77:c2:8d:b9:b4:53:55:b4:1e:b0:3e:14:9f:8b:
         ab:0e:8f:f0:30:72:cf:c5:4a:2f:03:01:11:76:91:fc:61:aa:
         e3:06:d6:58:1c:dd:8a:a8:69:cf:b8:09:45:0a:2f:a1:c4:6e:
         2e:f0:95:d1:59:f0:3b:fa:0d:43:ed:5f:2a:9c:9a:99:1f:32:
         9b:49:93:73:c6:6b:15:8f:60:8d:1f:d1:4e:42:b0:c0:73:96:
         9c:22:bf:f9:59:6c:2c:1a:60:12:3a:cf:46:f5:a5:d8:32:70:
         89:b0:cd:2e:a4:21:c8:4a:c2:d9:d7:da:85:8e:29:93:d8:17:
         fa:05:0f:27:4c:5a:fc:f1:90:1a:0c:fc:d1:5c:dc:99:c1:62:
         b8:44:fd:ee:1b:38:0d:8c:78:b7:33:e0:51:a1:d5:8b:b4:3b:
         03:95:9e:7b:14:81:6c:9e:5b:e2:87:e5:62:7a:3b:a4:39:f0:
         ac:8a:9f:87:1d:0e:48:34:84:39:41:91:1d:cc:6e:88:9f:fe:
         21:a3:6d:b5:2c:d0:23:46:6e:69:a3:3b:b1:a6:8d:be:65:8d:
         44:af:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org