Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/RR9a0rE8BeN163OqbqDRw_76Zlk.roa
File:                     RR9a0rE8BeN163OqbqDRw_76Zlk.roa (raw, json)
Hash identifier:          DLhvN784uyYu0FBSsPiOmoXquKjwP0CYi0cdvj+z+Gc=
Subject key identifier:   45:1F:5A:D2:B1:3C:05:E3:75:EB:73:AA:6E:A0:D1:C3:FE:FA:66:59
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       046740BD
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/RR9a0rE8BeN163OqbqDRw_76Zlk.roa
Signing time:             Tue 01 Mar 2022 08:30:11 +0000
ROA not before:           Tue 01 Mar 2022 08:30:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199815
IP address blocks:        193.59.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73875645 (0x46740bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  1 08:30:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=451f5ad2b13c05e375eb73aa6ea0d1c3fefa6659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:47:34:12:45:48:19:dd:e2:ed:b8:ca:65:
                    04:ff:c6:7c:4f:db:42:7c:1d:4d:1b:07:59:63:81:
                    a1:2f:da:5f:04:69:ca:74:60:7a:e0:74:c5:6e:60:
                    3a:a3:ae:db:d1:6c:97:6d:d8:6d:3b:8d:7b:37:7a:
                    72:f2:04:ea:56:8a:24:55:9f:ec:04:54:6a:dd:af:
                    93:e3:92:48:b9:7c:28:d5:48:d3:3a:8d:47:fa:c7:
                    67:ad:b3:62:b7:b2:0b:9a:b0:f0:91:d1:62:bf:aa:
                    08:15:fa:b7:31:e2:d7:e5:7d:3e:cb:7d:ea:9c:ac:
                    75:aa:5e:13:02:1f:70:3b:30:72:3a:f4:bd:1e:45:
                    c8:64:2e:10:4d:3b:d8:09:47:dd:78:9f:ca:05:17:
                    2d:57:8a:c8:0c:6e:8b:47:1a:d4:df:8b:a4:e5:46:
                    88:bc:3b:38:79:3b:f2:83:d8:c5:5a:0f:73:fc:7b:
                    9b:19:f8:2f:c2:d3:14:f6:83:7e:ee:48:26:de:d0:
                    49:cc:c9:a8:ad:c1:fc:52:d5:b4:28:8c:0a:ff:e5:
                    23:a4:96:4d:d9:98:8b:67:4a:eb:bf:a3:b6:d5:80:
                    b0:81:0b:c2:22:00:01:61:ea:af:8a:64:dc:1e:b2:
                    9a:fd:d5:2e:9e:7f:fa:e6:4f:fb:33:c8:38:47:21:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1F:5A:D2:B1:3C:05:E3:75:EB:73:AA:6E:A0:D1:C3:FE:FA:66:59
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/RR9a0rE8BeN163OqbqDRw_76Zlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:f0:d8:c0:2d:ae:25:28:0b:4b:6e:4d:10:4b:07:ca:b8:
         fa:46:13:ad:2f:9b:16:83:f3:cf:7f:ed:b7:9d:81:66:89:b7:
         2b:ca:ee:5c:a3:b9:e4:16:83:85:72:c4:1d:02:43:81:39:a4:
         b5:2a:74:cb:22:fc:31:0d:b9:8a:99:02:39:62:d0:39:1e:8b:
         8d:b9:a9:d6:0d:8d:0c:01:6e:3d:00:99:72:32:35:97:53:09:
         e8:30:ec:ef:2d:be:1d:87:69:a3:10:5f:86:30:36:2b:e1:d5:
         3a:71:69:6d:08:81:13:63:98:d2:8f:b1:ee:cb:78:1c:4d:1c:
         00:4e:e0:e0:76:d1:20:98:57:fc:f0:30:f9:e7:9a:97:bf:fa:
         4e:4e:ef:cf:94:8f:c2:29:d6:6d:a1:35:61:ae:c9:4c:46:9e:
         83:d0:17:03:c7:0d:7a:90:06:04:fa:37:67:64:ca:69:6b:7c:
         35:92:1a:2e:3a:16:41:8f:64:2f:02:bd:a7:88:06:8f:03:9b:
         02:4a:e0:13:90:c4:d9:1c:d0:c0:27:8a:8a:bf:73:8e:48:81:
         e3:d4:b9:ee:90:d0:37:36:42:51:3b:ed:65:5a:e7:8a:c6:93:
         b0:0b:15:c3:f6:53:d4:a3:6b:e1:6d:84:43:ea:33:90:d7:80:
         01:21:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org