Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WReeCF9g1up2pde8qs-TZS_JesA.roa
File:                     WReeCF9g1up2pde8qs-TZS_JesA.roa (raw, json)
Hash identifier:          AjZQXti2DWfMkzEwmTsySrxTut8YRGqlikJnooK76IU=
Subject key identifier:   59:17:9E:08:5F:60:D6:EA:76:A5:D7:BC:AA:CF:93:65:2F:C9:7A:C0
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       09F2F678
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WReeCF9g1up2pde8qs-TZS_JesA.roa
Signing time:             Thu 30 Jun 2022 11:52:02 +0000
ROA not before:           Thu 30 Jun 2022 11:52:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1015
IP address blocks:        193.57.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166917752 (0x9f2f678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jun 30 11:52:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59179e085f60d6ea76a5d7bcaacf93652fc97ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:81:e9:fd:3b:02:70:29:c4:70:5e:c9:43:
                    7d:47:2d:db:18:f2:9e:d3:9a:7b:60:c7:0f:d7:eb:
                    76:8c:30:05:a7:f1:8c:fe:3b:c4:44:82:aa:05:4a:
                    9d:7d:69:45:c4:45:93:e3:a0:7b:ed:5b:39:8c:43:
                    37:de:b9:0b:80:c1:1f:f5:a8:7c:10:63:73:99:f8:
                    d4:4a:88:14:29:76:65:ea:f8:88:b8:6c:97:b5:47:
                    92:aa:45:81:b6:e1:04:94:b5:36:9b:22:cc:03:16:
                    78:96:2b:9c:3c:6c:1f:de:c6:ef:3c:0f:30:95:6c:
                    d6:9c:97:49:4d:58:42:e5:35:92:45:8b:a6:36:16:
                    e8:d3:5e:eb:cf:3c:56:6e:2b:a6:52:34:f4:08:6f:
                    57:96:cf:38:1a:6f:1e:28:3a:81:d6:19:53:08:cf:
                    07:fb:8b:95:79:f4:61:b6:a5:f0:0d:3a:ba:24:51:
                    9f:ed:8a:7d:22:df:3f:c3:c7:8c:95:28:e6:7f:6e:
                    f9:6f:74:59:28:27:1a:5a:b3:82:f1:52:fe:c1:55:
                    d8:9c:66:69:b0:d0:1a:91:8a:07:25:df:c8:9b:ac:
                    72:a0:a3:9c:e1:6e:b1:fb:56:dc:a7:f9:3b:b8:07:
                    fe:b0:54:72:53:f5:9b:47:eb:65:6a:2c:04:4a:9b:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:17:9E:08:5F:60:D6:EA:76:A5:D7:BC:AA:CF:93:65:2F:C9:7A:C0
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WReeCF9g1up2pde8qs-TZS_JesA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:bc:01:26:52:55:e4:4a:80:8c:c0:eb:6b:85:5d:17:3d:40:
         b0:38:8c:a3:ab:bf:2d:84:74:17:d0:2c:38:06:ee:f7:b9:f4:
         d0:71:7a:2f:e8:ac:68:fd:1b:ae:fa:21:50:0c:ae:0d:5b:df:
         5f:2e:9c:ee:9d:2c:81:f2:0a:21:96:bb:69:a2:1d:d1:da:9f:
         e7:d4:9d:0f:94:73:33:b9:19:99:66:24:df:2d:73:f1:78:22:
         05:c1:39:76:d7:62:0e:26:31:5a:3c:6f:5e:33:96:6b:f0:6f:
         57:25:be:51:5a:17:e0:e2:d4:43:f1:fd:3e:9b:ed:bf:aa:3c:
         97:12:7b:12:c8:8b:b7:52:bd:02:7f:86:52:92:6e:4b:80:aa:
         e8:5e:0e:5d:93:b9:ea:07:72:20:7b:6f:55:0b:ab:e2:a0:77:
         e4:82:75:fb:cf:23:bc:59:c4:d1:39:39:c4:cd:38:23:21:94:
         b3:38:fa:5b:01:b0:53:c1:61:f2:ff:b3:0d:c4:f1:ac:ee:54:
         9e:59:62:50:f2:26:c3:f5:f0:4f:3c:df:ac:49:04:b6:bb:5d:
         43:58:40:56:c4:95:ea:75:9a:d8:a4:fa:1c:7b:ac:32:c6:96:
         87:1f:21:f6:47:30:e1:37:5b:35:13:fd:89:e4:74:46:55:b5:
         3b:fc:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org