Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/K6rsS06QpuMb_Q2KowhTbBOIOsc.roa
File:                     K6rsS06QpuMb_Q2KowhTbBOIOsc.roa (raw, json)
Hash identifier:          LJroLOezj0TYtTPTrzv8nBhCVs9u0FTdJqU1QCizn1A=
Subject key identifier:   2B:AA:EC:4B:4E:90:A6:E3:1B:FD:0D:8A:A3:08:53:6C:13:88:3A:C7
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38C02273
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/K6rsS06QpuMb_Q2KowhTbBOIOsc.roa
Signing time:             Tue 17 May 2022 05:30:30 +0000
ROA not before:           Tue 17 May 2022 05:30:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202357
IP address blocks:        78.83.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952115827 (0x38c02273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2baaec4b4e90a6e31bfd0d8aa308536c13883ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:58:99:56:25:aa:11:b1:48:0b:f6:ec:d5:
                    0b:45:47:05:6e:d5:f8:3a:fe:af:3e:1b:a0:a8:ac:
                    7b:7a:81:36:42:79:f8:0e:2b:b9:2c:68:83:df:e7:
                    7f:9a:aa:f5:a0:2a:b6:51:d8:32:ed:f9:a9:36:4f:
                    1c:c7:c3:2f:39:0d:65:e5:05:2d:3b:a4:dd:36:8b:
                    37:70:a8:53:38:f0:65:7a:0e:93:0e:ed:c9:ae:f4:
                    55:75:a7:3e:50:9b:0c:ef:8a:4a:1c:b8:29:69:94:
                    fc:e5:15:bc:7a:d2:92:c8:a5:49:02:ca:15:97:5b:
                    cc:a5:a6:dc:6a:21:74:30:6a:73:18:bb:7f:4c:1f:
                    13:50:a6:23:65:57:e2:36:9d:b3:43:c8:5b:2b:c2:
                    c6:d0:8a:26:7a:f0:d1:ea:6c:33:20:c7:b0:6f:e5:
                    9d:92:07:85:4d:0b:ec:00:bd:30:18:9e:9e:b6:7f:
                    7d:e0:4c:e4:c6:e5:82:31:43:10:9f:52:2a:0f:27:
                    be:39:48:5b:57:5d:ca:06:e1:12:d5:4d:eb:4d:81:
                    6c:66:8b:0f:f6:49:06:de:cf:35:5e:fe:64:e5:91:
                    52:ef:4c:73:47:a1:f9:b4:f2:d2:27:93:aa:92:96:
                    b4:1d:14:32:48:d4:1f:b5:e4:ce:ca:a4:de:78:3e:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AA:EC:4B:4E:90:A6:E3:1B:FD:0D:8A:A3:08:53:6C:13:88:3A:C7
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/K6rsS06QpuMb_Q2KowhTbBOIOsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:03:b9:ee:64:b5:ff:7c:8a:e8:19:45:11:0c:48:88:26:b1:
         b7:a3:e0:c7:b4:6e:b7:76:ab:62:9d:bc:f6:19:8f:d5:ab:02:
         a6:cb:4c:43:a2:c0:ae:ff:2a:43:94:1e:8d:59:f9:e3:74:5a:
         69:00:a1:48:1e:6a:28:a3:fc:1c:80:3e:44:52:81:cb:f6:65:
         d9:37:dc:e2:0c:23:91:33:2e:da:ef:71:f0:da:53:86:17:72:
         6d:06:e4:ba:da:dc:73:4a:f4:b8:77:6a:01:52:fa:98:70:12:
         f4:b3:2b:2c:c5:0d:29:56:a7:e5:46:fe:eb:6c:84:7b:b5:1f:
         a6:84:be:c4:46:91:91:91:92:c0:06:40:e8:d6:db:d9:8d:f8:
         ac:72:f1:ed:58:2a:4d:29:88:f3:4f:ea:3d:bb:59:42:cd:6d:
         77:2f:c6:89:d3:05:21:6e:14:da:a8:ee:00:d7:20:25:2d:bc:
         5f:78:5f:87:19:a7:3e:d9:7c:de:5b:94:08:af:4a:cd:c4:bd:
         b5:6e:59:d1:a4:35:a8:c6:0f:91:83:6b:dc:89:ee:2c:60:68:
         09:88:b8:21:b0:fa:c6:64:3f:8a:3b:30:5a:56:e2:02:1f:0f:
         c4:77:4e:9a:fe:86:ac:9c:fd:ee:df:d9:18:da:50:e1:8b:35:
         e4:73:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-ams.rpki-client.org