Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/UbjvhxqNIsl9i_XpZupik39k2XA.roa
File:                     UbjvhxqNIsl9i_XpZupik39k2XA.roa (raw, json)
Hash identifier:          RRC/Z3L7NwNs6Qz47FyF6KcTN9lmj5+wG5HjGFSLcNg=
Subject key identifier:   51:B8:EF:87:1A:8D:22:C9:7D:8B:F5:E9:66:EA:62:93:7F:64:D9:70
Certificate issuer:       /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial:       013627
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/UbjvhxqNIsl9i_XpZupik39k2XA.roa
Signing time:             Wed 19 Jan 2022 08:52:44 +0000
ROA not before:           Wed 19 Jan 2022 08:52:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196972
IP address blocks:        193.105.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79399 (0x13627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
        Validity
            Not Before: Jan 19 08:52:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51b8ef871a8d22c97d8bf5e966ea62937f64d970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:23:db:f9:a9:7c:b0:7d:30:9c:56:4f:69:
                    f3:ce:fc:97:9b:a1:20:95:60:b2:16:a0:d9:d4:7e:
                    c2:b7:f2:c5:f0:d7:45:8f:61:3b:6a:98:4e:ae:63:
                    75:a0:b5:52:6f:eb:fb:f7:bb:b1:02:e9:11:b9:09:
                    e4:8d:67:5e:97:85:aa:f0:02:9a:1c:0f:ea:95:38:
                    1d:60:85:39:7c:12:40:4d:26:c2:de:a6:bf:cf:05:
                    6f:51:b7:49:d3:65:42:7f:c3:04:89:e6:78:89:bf:
                    32:99:87:56:09:11:2e:09:70:d1:3e:b4:32:33:64:
                    85:d6:02:c7:67:dd:ef:72:8f:60:a7:90:49:84:fc:
                    23:c7:cf:cc:c2:0e:35:e7:6a:c8:77:63:dc:10:07:
                    58:63:4a:a2:67:b1:ed:8d:78:44:56:f7:c6:1b:f2:
                    89:6d:67:73:f5:ce:28:8c:33:99:d9:41:7e:36:54:
                    ee:c0:2e:b7:91:a5:b1:25:a4:69:d8:d4:ab:6b:a2:
                    db:f2:a8:10:9a:7e:f2:25:26:61:10:db:0e:74:8e:
                    7a:bd:2b:71:22:7f:7a:18:b4:fc:0d:58:06:9b:4e:
                    7f:24:af:73:f9:d4:59:6b:4b:72:11:ac:0d:26:c1:
                    8e:c1:78:78:4f:52:5e:b6:50:d6:c9:85:a5:75:47:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B8:EF:87:1A:8D:22:C9:7D:8B:F5:E9:66:EA:62:93:7F:64:D9:70
            X509v3 Authority Key Identifier:
                keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/UbjvhxqNIsl9i_XpZupik39k2XA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:46:a4:5a:03:52:fa:2b:58:54:cf:90:0a:41:2f:4e:5d:ae:
         4f:69:aa:45:33:9b:58:c9:cf:7c:d3:3f:ac:ee:92:05:e4:d4:
         2e:7c:81:c9:d4:40:24:b8:a6:32:76:a9:2f:0a:9d:5b:a0:01:
         c1:d7:56:eb:1f:58:fd:9f:8a:88:73:e4:53:c9:b6:08:ec:8d:
         8e:93:32:58:c8:7a:1b:5e:57:f3:ee:0c:1f:1e:ce:a1:77:45:
         fc:e5:59:43:0b:17:a3:37:59:8e:ac:0a:70:0d:92:65:cf:60:
         aa:9e:f2:39:63:56:cb:f4:8d:0c:bf:c5:d0:b8:33:84:76:df:
         ca:c4:f1:fe:67:fd:f9:03:0e:c0:b4:86:10:5d:ad:83:0b:18:
         eb:8f:df:75:2c:11:5c:83:24:bc:a5:e6:f9:83:3c:46:fc:b4:
         ae:c2:16:13:75:e9:df:2e:f1:b5:21:00:e8:c6:58:27:12:fe:
         16:da:d6:9c:06:94:7e:ff:13:f4:c1:f4:ac:f2:29:34:3b:d4:
         7c:38:cb:53:47:fc:8d:48:3d:bb:d9:40:b9:d9:9c:e8:19:d8:
         a1:7b:5b:14:46:ca:6e:22:87:98:5b:72:29:e1:1a:23:8c:dd:
         7d:34:77:de:bc:5c:12:59:0c:0f:c5:19:39:75:1d:40:49:53:
         d1:d0:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:32 2024 by rpki-client on console-fra.rpki-client.org