Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/jrSBObxXXWX3ExuL6Yj_8fpu4-c.roa
File:                     jrSBObxXXWX3ExuL6Yj_8fpu4-c.roa (raw, json)
Hash identifier:          H2J9M7tFF+QZG8pQESncfAcUttfpIB0wNrNqVbasPPw=
Subject key identifier:   8E:B4:81:39:BC:57:5D:65:F7:13:1B:8B:E9:88:FF:F1:FA:6E:E3:E7
Certificate issuer:       /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial:       0583CD18
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/jrSBObxXXWX3ExuL6Yj_8fpu4-c.roa
Signing time:             Sat 01 Jan 2022 06:52:22 +0000
ROA not before:           Sat 01 Jan 2022 06:52:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        193.37.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92523800 (0x583cd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
        Validity
            Not Before: Jan  1 06:52:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8eb48139bc575d65f7131b8be988fff1fa6ee3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:47:a8:f4:e0:18:31:64:71:1e:ae:9f:14:
                    84:68:cb:0c:af:fa:b7:10:6f:9c:1d:e0:12:1e:e3:
                    75:52:37:8f:db:7a:0d:59:a2:1d:a3:14:c5:a7:8e:
                    34:d2:95:fd:54:cf:17:35:27:de:16:38:a0:7e:cc:
                    cd:20:ba:b0:f6:2e:ff:d3:1e:12:0f:71:1b:5c:3e:
                    02:b5:ca:35:73:5b:ff:9f:9b:43:14:6a:cd:40:38:
                    29:3c:40:b0:9a:45:3f:43:40:4b:f6:7a:fc:e0:de:
                    74:1e:6c:35:32:4a:1b:73:73:51:9f:bd:07:2a:a0:
                    bd:41:a2:3b:2b:cf:03:36:d9:5a:b7:de:bc:12:ca:
                    3b:a2:6f:56:b1:b8:9f:01:86:4b:63:dc:f1:7e:6c:
                    c2:7c:67:04:07:1a:88:7a:44:ea:80:e5:37:e4:fc:
                    06:b3:65:e8:ec:9f:30:b2:7f:7b:f9:75:d4:ff:b5:
                    27:75:43:cb:27:34:c2:d6:ab:36:14:8e:71:ad:0c:
                    e2:6f:e2:bb:f5:cd:96:9c:0f:df:a4:c1:bb:d8:5f:
                    ed:6f:cd:34:54:4f:61:b8:17:f8:6e:72:d7:db:5b:
                    4b:19:d5:cc:01:2a:58:9d:3d:b2:18:e5:4d:ed:68:
                    cc:ca:eb:22:ce:d2:ce:81:3a:e9:02:db:69:d5:b1:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:81:39:BC:57:5D:65:F7:13:1B:8B:E9:88:FF:F1:FA:6E:E3:E7
            X509v3 Authority Key Identifier:
                keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/jrSBObxXXWX3ExuL6Yj_8fpu4-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:50:cb:62:fc:b9:ba:c8:82:d2:98:16:d0:b3:5a:1a:b4:a9:
         fd:af:f2:cb:20:33:88:cd:df:2a:54:5a:31:04:bd:59:78:98:
         22:1f:30:80:7f:f0:7b:cb:94:2e:86:38:9e:64:b5:16:b1:5c:
         93:68:5a:17:44:11:c4:16:cf:9f:f2:df:c5:6d:23:c8:6d:24:
         49:ee:58:f4:10:e3:6e:33:ac:ab:c0:e3:5f:e4:00:10:c1:4c:
         3f:b2:e9:68:b8:09:aa:2c:87:49:70:f8:72:95:22:84:45:53:
         4a:ec:b6:96:0f:89:a9:36:bb:16:7e:33:8b:c3:64:20:e7:72:
         54:2f:88:73:53:e1:57:ee:00:f0:3d:23:13:bc:3b:f9:b2:f9:
         56:5d:f3:d9:da:80:96:da:74:51:54:39:88:2b:04:a1:aa:e1:
         8c:7a:9b:dc:a2:48:64:10:47:d0:83:ce:b4:3c:40:2f:d9:61:
         46:2a:c0:85:3b:38:60:ee:e3:61:d3:59:06:7d:1f:78:b8:bc:
         c3:a4:e9:2c:7f:fe:7d:a4:97:5a:61:02:2a:70:6e:28:c2:af:
         e0:9f:21:81:19:9a:c0:d3:42:f2:00:83:5e:07:43:9f:75:a1:
         01:ab:47:a3:00:96:38:59:2a:2d:7d:77:b8:53:8c:fe:5d:ee:
         f6:c1:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:36 2024 by rpki-client on console-ams.rpki-client.org