Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/J5pN7vYjZfOc-YMPEfTnde7yL_s.roa
File:                     J5pN7vYjZfOc-YMPEfTnde7yL_s.roa (raw, json)
Hash identifier:          0EmwHu+PmoJOCfL12dx7EtjSLBS6NxCufysHFcmShWA=
Subject key identifier:   27:9A:4D:EE:F6:23:65:F3:9C:F9:83:0F:11:F4:E7:75:EE:F2:2F:FB
Certificate issuer:       /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial:       09946517
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/J5pN7vYjZfOc-YMPEfTnde7yL_s.roa
Signing time:             Sat 01 Jan 2022 00:52:39 +0000
ROA not before:           Sat 01 Jan 2022 00:52:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39719
IP address blocks:        193.36.110.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160720151 (0x9946517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
        Validity
            Not Before: Jan  1 00:52:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=279a4deef62365f39cf9830f11f4e775eef22ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:f4:21:18:2e:d2:a0:8e:ab:4a:90:08:b5:
                    05:46:18:40:c1:ed:2d:a5:2b:bb:a0:0b:22:33:78:
                    a5:73:55:22:27:38:ca:7c:1c:be:c6:a2:d7:0e:08:
                    f6:bd:c4:7f:2c:f6:40:8d:4f:19:61:c8:9d:8a:91:
                    15:c0:05:1e:f3:c2:80:9c:d5:5c:08:93:38:df:bb:
                    13:e0:8a:50:ef:fd:b7:17:cb:9d:b1:3c:d4:99:49:
                    3e:c3:97:b7:9f:e4:38:4e:a1:d6:66:8d:b8:40:76:
                    01:ff:0e:92:4d:bf:ce:a8:df:52:be:f8:58:cc:a4:
                    22:da:31:98:5b:71:59:98:21:4a:3c:f6:93:48:9c:
                    05:62:9a:fb:51:18:88:83:56:16:93:9f:93:24:24:
                    bc:dd:00:6d:b2:00:83:92:10:34:1b:01:dd:4e:96:
                    b8:82:69:f0:18:10:39:41:d8:a0:b6:d4:f9:11:cd:
                    8f:7d:bc:25:a3:40:cd:92:70:31:67:97:d1:9d:60:
                    22:15:26:b4:30:5f:d5:1d:30:04:d4:1d:cd:bb:29:
                    84:d3:b4:84:ce:19:ce:02:7f:f3:ab:ee:f5:b8:20:
                    70:7c:0a:39:c1:c2:33:a1:29:39:95:15:ec:05:ee:
                    df:d3:5e:d4:a2:47:35:71:18:84:2a:db:41:95:18:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:4D:EE:F6:23:65:F3:9C:F9:83:0F:11:F4:E7:75:EE:F2:2F:FB
            X509v3 Authority Key Identifier:
                keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/J5pN7vYjZfOc-YMPEfTnde7yL_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:50:07:7a:66:e0:25:0b:13:18:e1:40:ae:3d:03:7c:0e:cb:
         2c:67:f9:c9:ee:cd:0c:78:83:96:69:24:21:a5:9b:8a:f6:ae:
         99:8b:04:16:44:97:e7:a8:b8:60:f7:37:5e:40:1a:be:0a:10:
         72:c6:3d:a3:0a:38:a2:1a:ce:f5:66:76:a3:d9:22:b6:43:e6:
         98:cc:2a:13:5b:51:48:91:05:be:a6:aa:f6:8f:7e:82:3b:a6:
         2f:7a:64:fb:21:33:fe:ac:0f:8b:a0:e0:9e:93:55:28:24:a3:
         dd:63:29:db:e3:b2:b2:ad:de:2c:be:3c:1c:ec:56:b6:ce:f6:
         99:54:5b:b8:ef:79:1d:cc:fe:00:55:01:17:1d:97:1f:c5:6e:
         88:d8:6b:ea:92:4c:65:f4:4b:94:14:8a:cb:7b:ee:ee:74:a6:
         42:f3:9b:f1:d6:ce:cb:dd:c1:9f:a2:40:5c:30:94:78:db:54:
         54:de:ee:79:c1:c3:d9:08:b0:2e:5c:b8:c1:79:1f:08:5f:63:
         ba:b0:d2:26:2d:f4:8a:76:62:81:8f:d6:ee:31:54:46:a0:5a:
         bc:6f:62:17:9c:32:ec:17:34:fb:a6:16:e3:80:0a:de:64:a6:
         61:23:6f:ff:af:92:fc:ae:7a:05:c6:ae:b6:ff:ae:c8:2b:32:
         b4:47:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:57 2024 by rpki-client on console-ams.rpki-client.org