Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4XOCv8fvbMP_DUordl6dw3rjB9I.roa
File:                     4XOCv8fvbMP_DUordl6dw3rjB9I.roa (raw, json)
Hash identifier:          gz4rXDxriuQ2rbojm7gTVo26ZSSDBllxxfPzrveXDho=
Subject key identifier:   E1:73:82:BF:C7:EF:6C:C3:FF:0D:4A:2B:76:5E:9D:C3:7A:E3:07:D2
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       046B3FE7
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4XOCv8fvbMP_DUordl6dw3rjB9I.roa
Signing time:             Tue 01 Mar 2022 08:30:16 +0000
ROA not before:           Tue 01 Mar 2022 08:30:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206802
IP address blocks:        193.59.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74137575 (0x46b3fe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  1 08:30:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e17382bfc7ef6cc3ff0d4a2b765e9dc37ae307d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:ab:bd:cc:c4:06:99:c4:4d:83:66:26:af:
                    03:20:62:d2:a1:0d:e5:a9:14:6b:ad:74:a1:00:82:
                    8e:5d:ae:a5:72:22:13:d2:0e:48:e8:9f:31:f9:86:
                    4d:4b:3d:5f:9a:83:42:da:99:5c:20:80:5d:14:44:
                    79:f5:d5:50:de:a4:06:2f:d0:87:fb:27:76:72:93:
                    24:c3:8d:8c:02:61:eb:43:23:89:3b:76:60:60:0c:
                    35:d2:c6:95:21:31:79:89:47:56:ba:db:a7:a1:3f:
                    65:68:ff:eb:73:a9:49:3f:5c:73:a5:f2:73:a4:de:
                    f6:05:e4:a9:42:a9:d4:c8:d6:a3:30:ca:04:66:af:
                    79:4b:dd:aa:ca:61:52:6c:79:f1:12:e4:f7:22:7c:
                    96:87:60:b8:48:61:ed:73:31:e7:c0:1c:a6:33:11:
                    55:4c:81:9d:d1:0d:d2:09:48:5b:e8:49:7f:bb:1c:
                    52:86:c3:e1:c8:f5:8c:59:3d:b4:a6:ba:0a:0e:e6:
                    e3:c5:91:39:77:0e:c4:eb:6a:91:e8:27:c2:c7:32:
                    70:62:a3:e6:c1:dc:fe:0b:f1:0d:46:6c:6d:3a:4a:
                    1c:43:83:e4:e6:f5:82:53:ea:fe:83:b1:8a:4d:60:
                    f9:68:1e:bf:a4:0b:3d:83:3d:24:da:12:1f:d0:a5:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:82:BF:C7:EF:6C:C3:FF:0D:4A:2B:76:5E:9D:C3:7A:E3:07:D2
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4XOCv8fvbMP_DUordl6dw3rjB9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:24:aa:ee:60:7b:f9:91:2d:c1:35:18:f9:ae:5e:54:c8:
         15:46:e7:26:46:3a:b8:3b:66:b0:d0:ae:f1:77:0c:ac:92:29:
         61:dd:2a:56:d7:f4:d7:4f:8b:f2:9a:71:77:79:9a:7f:a6:93:
         a2:bf:5b:8e:08:84:22:00:c0:ef:02:76:66:81:58:fb:7c:cd:
         91:c7:41:00:8f:c9:db:42:e7:a7:9e:b1:15:4e:f6:d3:77:be:
         66:28:a8:39:1c:5a:93:4b:34:9c:82:a3:8b:ad:ab:3f:c6:ae:
         24:ac:d9:5f:22:45:57:0c:3d:d8:f5:5b:0d:12:7e:c6:2b:74:
         dc:bc:e9:ff:c4:c9:36:ad:8c:dc:18:88:86:c6:c4:ea:8a:4a:
         fc:c3:61:06:9d:85:93:54:74:c5:48:f8:0b:24:69:d0:b9:68:
         28:56:29:36:9a:a3:fa:5e:1e:bf:cd:b3:6f:f1:2e:a9:b7:10:
         7a:fb:1e:27:cb:80:67:35:6b:48:78:91:c1:00:50:c4:d9:04:
         e0:48:4c:ab:97:2d:49:5a:5a:c8:9a:c6:32:38:87:ad:7f:a0:
         06:b1:f4:a5:11:08:16:e5:f9:5f:c4:a6:82:9d:21:6d:61:b0:
         70:34:b2:64:e6:e6:fc:a1:3c:2b:bb:86:ec:ff:1c:53:74:6d:
         51:0e:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org