Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/oJW6tDC5a6q_CoiSw3pg1Rm6sLY.roa
File:                     oJW6tDC5a6q_CoiSw3pg1Rm6sLY.roa (raw, json)
Hash identifier:          YRp/2EMkb4MD1tWcQgycTyiyqQat+XRDdi7ahM+nMg0=
Subject key identifier:   A0:95:BA:B4:30:B9:6B:AA:BF:0A:88:92:C3:7A:60:D5:19:BA:B0:B6
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       04692B78
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/oJW6tDC5a6q_CoiSw3pg1Rm6sLY.roa
Signing time:             Tue 01 Mar 2022 08:30:15 +0000
ROA not before:           Tue 01 Mar 2022 08:30:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204569
IP address blocks:        193.59.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74001272 (0x4692b78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  1 08:30:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a095bab430b96baabf0a8892c37a60d519bab0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:93:16:b8:f6:58:ff:87:35:10:88:22:e2:
                    48:28:af:1e:ff:ff:58:a1:dd:fd:5b:aa:6d:92:fc:
                    bd:05:71:08:fc:b6:01:27:20:54:f6:a5:18:2e:2f:
                    83:4d:53:83:9a:2d:d0:21:ce:25:22:03:7e:20:aa:
                    6b:06:51:32:c4:d4:d4:fa:03:e8:cc:8c:0e:4e:68:
                    d6:0e:c2:64:c5:94:90:8c:2d:8c:11:ad:91:19:e0:
                    ed:f2:60:ff:b0:9f:e5:38:f3:43:75:3c:0e:53:f2:
                    8f:65:17:c0:73:ae:c4:c5:d3:86:c4:df:c2:ed:9a:
                    51:27:1e:2d:f6:91:e7:23:e7:f9:ad:38:1d:37:68:
                    25:f0:99:ee:96:48:fd:96:d4:04:82:6c:de:8c:37:
                    00:9e:6d:1d:75:f1:0f:5c:80:ef:ae:65:69:b8:34:
                    10:c8:1b:1b:39:b4:4a:73:76:b1:90:0d:ce:24:9b:
                    e1:ca:c6:83:ed:59:b1:9b:01:ce:c4:8e:b2:70:44:
                    5a:f5:4a:fb:53:c0:21:dd:8a:ed:3e:0f:f5:a3:4f:
                    aa:89:1f:ba:f2:a7:e8:d4:0b:49:24:b7:a4:6b:87:
                    87:d2:9e:f2:17:cf:52:25:f9:3c:ef:a4:61:a6:40:
                    82:1b:b2:db:ba:3a:b2:98:77:11:4c:3f:b3:98:8b:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:95:BA:B4:30:B9:6B:AA:BF:0A:88:92:C3:7A:60:D5:19:BA:B0:B6
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/oJW6tDC5a6q_CoiSw3pg1Rm6sLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:4b:66:72:04:10:ef:d1:b9:9d:ff:4f:93:91:40:9a:1b:
         98:e1:b1:69:24:51:31:1e:84:29:38:93:04:9a:c2:4f:8e:5b:
         2a:4d:f3:8a:fb:65:66:9c:00:7e:67:8b:75:6b:fd:2e:31:85:
         67:26:e1:24:d9:0e:7e:90:df:5b:65:55:e4:63:40:e0:18:a9:
         ba:38:55:dd:5e:e7:b4:16:05:58:b6:d2:94:57:ab:72:be:0a:
         47:02:08:fe:e3:f6:c4:84:b0:83:0a:f8:03:7f:02:28:2b:8a:
         af:fa:88:b2:36:1c:f3:a9:89:2b:ce:8c:64:b4:db:50:4e:37:
         9a:88:5d:6e:9c:78:d0:a6:12:d6:c5:0f:2f:5b:18:36:fe:28:
         b8:89:d2:74:11:68:17:a6:a1:2d:f1:7a:bd:80:64:f4:ef:75:
         b9:92:c0:d8:87:54:3c:23:5c:eb:a8:97:fe:f4:12:a1:58:89:
         dd:e4:2e:c4:5c:52:ad:6e:60:83:d1:72:48:8d:c7:d8:81:60:
         79:df:e5:ab:8d:6d:5a:d4:7f:7c:01:08:18:81:43:f1:49:2b:
         6b:27:60:ab:86:fe:b9:8d:96:8d:b6:ca:7e:28:f7:0d:e7:13:
         32:75:c6:64:f0:d4:a2:f0:f5:54:f1:3f:98:3c:2f:0e:11:df:
         0d:99:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org