Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/HzTKoa2RcVsj2mXxkWlV-mTf4Eo.roa
File:                     HzTKoa2RcVsj2mXxkWlV-mTf4Eo.roa (raw, json)
Hash identifier:          b+ijC47wX3RDNI/rsqzgQIgUF6Dmb51KRtDQGYXkOP4=
Subject key identifier:   1F:34:CA:A1:AD:91:71:5B:23:DA:65:F1:91:69:55:FA:64:DF:E0:4A
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       046B885F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/HzTKoa2RcVsj2mXxkWlV-mTf4Eo.roa
Signing time:             Tue 01 Mar 2022 08:30:18 +0000
ROA not before:           Tue 01 Mar 2022 08:30:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207684
IP address blocks:        193.59.16.0/22 maxlen: 22
                          193.59.14.0/23 maxlen: 23
                          193.59.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74156127 (0x46b885f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  1 08:30:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f34caa1ad91715b23da65f1916955fa64dfe04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:9a:dc:c3:74:7f:2e:d4:44:13:ed:b1:60:
                    48:18:c5:d6:8d:20:be:fa:c3:85:37:6b:e7:89:e3:
                    1c:ca:fc:d3:3f:65:57:2a:6e:d7:ee:50:2a:7e:67:
                    ae:80:36:5d:de:e8:26:ae:29:29:b7:77:ac:e3:4a:
                    8a:4d:0a:b0:28:e7:a0:d4:ee:d8:45:d8:78:ae:26:
                    87:2d:1b:9e:d4:77:bf:ff:f7:12:1a:e0:11:9a:e6:
                    e4:25:14:b3:a4:e7:13:e8:44:6a:81:f2:e0:26:87:
                    63:5f:e3:3a:46:28:2e:1f:e9:d0:62:af:1b:94:55:
                    ed:27:b2:7a:69:8d:21:a6:f4:b5:d8:b4:2f:cc:09:
                    89:29:08:7e:bb:9f:9d:0c:3b:11:6a:fa:c4:fc:74:
                    03:f6:61:16:bd:f0:4a:d2:6f:bd:dd:33:c0:80:9d:
                    50:2c:a3:5e:4f:1b:0e:7d:71:e5:4a:a8:46:2e:ba:
                    10:86:6d:ce:0a:08:cf:d4:0f:8d:36:8e:36:fc:15:
                    3f:ac:63:5b:98:c7:4a:54:ab:bf:ef:f7:36:93:e4:
                    74:db:aa:7b:04:73:33:51:34:eb:41:2c:1a:a9:5e:
                    74:c9:2c:93:13:92:98:93:ba:6d:de:67:ec:3d:a2:
                    2c:8d:01:88:6e:2d:52:1f:a8:6e:04:5a:94:be:1c:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:34:CA:A1:AD:91:71:5B:23:DA:65:F1:91:69:55:FA:64:DF:E0:4A
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/HzTKoa2RcVsj2mXxkWlV-mTf4Eo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.14.0-193.59.19.255
                  193.59.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:e8:ef:d2:20:98:24:e2:7d:ab:38:f1:37:58:85:53:2b:
         8c:54:4f:33:e3:d6:76:2d:af:62:2f:1a:4f:ec:38:06:fb:d4:
         c0:db:1c:a2:b4:11:40:4c:b2:e1:bf:35:b0:57:36:b6:49:51:
         57:5f:b5:d1:e2:6a:7e:5c:65:aa:d9:6d:09:a6:af:3c:a0:94:
         eb:44:5c:67:54:72:f2:ff:bd:37:b9:bc:ae:4b:6a:d2:ca:ac:
         67:ed:34:e3:b0:46:2e:39:28:fc:1c:26:66:54:48:3b:85:c2:
         be:41:0b:18:0c:e1:1c:58:74:55:34:fa:55:58:32:7f:ca:55:
         69:3e:7f:94:fa:1a:16:7a:2c:1c:9c:57:00:f9:ac:e7:4f:7a:
         ed:a9:07:64:90:57:ad:cc:bf:91:8c:7d:e6:c5:7b:c7:df:3a:
         22:96:ab:5b:aa:8d:fa:ed:f1:84:69:58:02:97:f6:21:9f:8d:
         d9:13:8f:8a:d9:5c:9f:81:6c:e8:49:66:24:2c:a1:1e:8e:00:
         49:bc:c3:60:59:bc:a8:b1:ff:da:1f:cf:00:7e:46:2e:42:17:
         1f:d4:06:85:d8:39:ae:25:55:71:e9:e3:6a:30:8a:59:fa:bb:
         99:89:cd:fc:36:12:f2:52:d9:1e:3e:18:b1:e8:fd:46:23:15:
         95:6a:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org