Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/SXrjeX7NKcR0NVvrP0Nz74h78wM.roa
File:                     SXrjeX7NKcR0NVvrP0Nz74h78wM.roa (raw, json)
Hash identifier:          jtpIezueDKNJgAWgvmRR4WM7h51TI9dCCfuxISAz7qU=
Subject key identifier:   49:7A:E3:79:7E:CD:29:C4:74:35:5B:EB:3F:43:73:EF:88:7B:F3:03
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       0468BBF3
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/SXrjeX7NKcR0NVvrP0Nz74h78wM.roa
Signing time:             Tue 01 Mar 2022 08:30:14 +0000
ROA not before:           Tue 01 Mar 2022 08:30:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202081
IP address blocks:        193.59.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73972723 (0x468bbf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  1 08:30:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=497ae3797ecd29c474355beb3f4373ef887bf303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:a1:94:47:e9:37:9e:cd:de:bd:d2:9c:1a:
                    0c:95:d9:21:08:80:7b:c9:a8:31:e4:c0:11:13:07:
                    9f:7b:c0:87:e2:ac:e5:b8:a7:e9:f3:48:26:e7:48:
                    49:ff:49:0c:59:53:f1:de:89:a9:31:80:97:5c:4a:
                    d1:f3:a5:eb:75:f7:0a:a0:44:05:dc:f1:c1:36:07:
                    96:dc:ce:2e:52:c6:8b:56:da:bb:ac:c3:6d:24:3c:
                    72:ba:43:a6:2f:64:9b:94:5c:b0:00:35:47:87:84:
                    ac:90:de:1a:0e:8f:3b:d8:a8:d0:96:42:88:ff:ce:
                    a5:80:22:d3:c5:b5:7f:ee:0a:16:db:f2:92:b3:68:
                    c7:d6:88:00:0d:6a:b3:3f:d9:05:b9:4b:f9:2f:73:
                    22:d0:78:89:cc:21:1c:89:4a:a5:6b:f5:b1:f3:ac:
                    5e:d7:8e:4d:21:36:28:01:45:c7:56:43:f7:65:33:
                    58:13:97:33:d1:ef:61:23:37:7c:e3:ac:d7:df:2a:
                    a2:a5:3c:a6:97:4c:b6:6f:1d:62:b7:86:2c:e2:19:
                    f1:e5:f6:3d:b3:8a:03:c4:3e:29:62:1a:83:f4:73:
                    69:d5:2d:12:6f:de:14:7d:a6:7e:e1:54:ff:fd:23:
                    70:b3:b1:d8:c0:f7:75:cf:bc:31:b5:1c:ac:8d:a9:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7A:E3:79:7E:CD:29:C4:74:35:5B:EB:3F:43:73:EF:88:7B:F3:03
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/SXrjeX7NKcR0NVvrP0Nz74h78wM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:d2:31:37:51:71:c5:25:94:85:9a:a9:a5:3d:f6:2a:b6:
         f1:75:02:db:6a:3b:2c:78:a0:03:cf:a5:a0:68:41:e9:5c:74:
         5f:61:a2:c9:1e:9d:fd:b5:63:25:79:9a:ba:db:42:ac:5a:1a:
         f4:21:2e:30:fe:0a:a2:b1:30:7e:68:b8:10:0d:d7:01:a3:13:
         c7:c5:67:82:4c:38:9a:1d:ca:27:8c:ac:91:2e:ac:5a:08:f3:
         85:cb:5f:73:71:f2:df:80:93:09:60:66:67:8e:2d:33:dc:c9:
         38:fe:c3:04:7f:02:fd:65:28:2b:e1:b9:8b:46:8c:9c:16:1f:
         47:19:ac:b1:2b:d0:f7:5d:28:f1:05:bc:84:97:02:68:56:25:
         87:b4:a8:db:ae:91:ff:35:35:1b:b7:fd:5e:f3:4c:fd:ea:ac:
         c7:53:44:e7:54:ce:91:bf:f9:f5:94:25:5a:de:57:01:1a:f6:
         9f:45:24:a6:08:fc:af:c6:69:1f:68:a5:de:95:63:13:94:39:
         84:1d:2d:3d:0c:34:0d:7c:69:f8:81:a9:3b:84:d9:ea:b1:d3:
         f5:27:1d:26:be:1c:dd:8e:a7:54:45:76:41:20:7a:8a:34:5b:
         bf:23:2b:bf:46:05:33:05:ba:65:53:46:a6:28:87:70:c4:00:
         e1:45:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org