Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa
File:                     9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa (raw, json)
Hash identifier:          YzD0m1PDNmG0px92pPhpD77wKaLWrTBOjbJrB9qqmTM=
Subject key identifier:   F5:01:50:3A:75:C1:89:74:EB:F6:F9:90:C8:0A:3B:0A:47:FD:31:50
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38B8CDCD
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa
Signing time:             Tue 17 May 2022 05:30:26 +0000
ROA not before:           Tue 17 May 2022 05:30:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198938
IP address blocks:        213.222.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951635405 (0x38b8cdcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f501503a75c18974ebf6f990c80a3b0a47fd3150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:e5:a6:9e:0f:10:78:fc:57:ac:a7:5e:06:
                    46:d4:eb:d3:df:37:a1:30:d1:d2:f7:0b:ac:40:45:
                    e0:21:7d:7b:a3:02:b1:11:a8:1f:74:f0:bc:aa:3d:
                    95:c2:f9:62:7f:2d:5f:af:9a:58:cd:b0:dd:bd:eb:
                    68:31:ef:56:30:41:b3:13:dc:62:65:36:bf:fa:4f:
                    2a:17:93:94:6c:0d:83:3b:fe:f2:88:c1:2b:a3:38:
                    9a:86:26:8f:51:4c:c1:26:c0:71:14:0b:b5:cd:e6:
                    cf:32:fa:11:0e:12:a9:a7:02:20:f7:ac:43:57:98:
                    f2:f2:72:5c:09:5c:fb:c9:84:dd:e8:37:72:48:c8:
                    39:7e:08:3b:21:7a:6a:87:d3:8a:68:64:1f:bd:ee:
                    de:5f:4b:44:c9:4a:e8:ab:29:d9:0c:8b:a1:b0:0c:
                    c1:ef:42:d6:b8:fc:3b:de:e1:38:e4:25:3d:f1:e6:
                    8d:f5:45:a6:b3:1a:56:6e:86:e4:16:30:2a:16:1a:
                    2b:4b:82:b6:f8:e6:06:7d:b5:c1:9f:3e:3d:b6:9c:
                    88:33:d9:74:68:67:76:40:8f:7d:44:63:82:88:f0:
                    cf:95:22:0b:e5:5f:9c:70:c1:2a:de:08:a5:b0:7d:
                    d8:71:78:ed:90:27:f3:0b:4d:2d:b9:47:ee:f8:e8:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:01:50:3A:75:C1:89:74:EB:F6:F9:90:C8:0A:3B:0A:47:FD:31:50
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.222.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:a7:cd:a7:a1:42:6d:34:7c:f5:b8:ea:44:b0:d6:63:00:
         f7:da:15:38:24:b7:55:19:3a:cc:62:a0:06:d9:c2:92:35:86:
         4c:39:ac:ba:75:4c:5c:22:74:73:92:14:ef:72:34:73:91:1e:
         74:2b:47:b0:86:d3:a2:fa:0f:65:ca:14:73:1e:26:4d:fd:2c:
         a7:63:6f:25:f9:cf:9c:77:66:b1:e1:77:e9:4d:58:f1:89:d5:
         1f:64:2b:4e:fd:a7:43:14:9e:71:6a:1a:b3:a8:ad:ba:a1:16:
         78:5d:63:09:7f:47:ea:db:e3:f6:26:36:d8:26:ed:17:dc:3e:
         cb:dc:be:da:e5:31:3a:f8:37:d7:2d:fa:85:ab:46:8a:12:f6:
         79:a3:ab:49:27:ee:00:0e:28:2f:03:d6:87:2a:08:dd:b2:f2:
         7c:c0:48:61:0a:e5:38:50:b3:8d:aa:fd:00:46:8b:a2:ea:ae:
         3a:18:cd:5d:25:b9:04:17:c6:82:aa:8c:0a:40:36:70:fe:f3:
         ea:48:b1:95:49:70:5f:2a:ae:b5:81:b2:97:aa:00:36:fe:c7:
         85:c9:2a:46:e2:89:64:21:36:8d:b9:cf:a5:3b:2d:01:9f:a0:
         40:ad:fe:cc:c6:c9:f3:ac:62:4c:c2:b0:29:e7:1d:dd:24:8e:
         62:e2:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:51 2024 by rpki-client on console-ams.rpki-client.org