Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/v6RiRPe7nFThtFhV_1S8STsu2Sk.roa
File:                     v6RiRPe7nFThtFhV_1S8STsu2Sk.roa (raw, json)
Hash identifier:          GjrxhlZI37YCy9HcStNZ5IX4U38jjBkK8b9qPhFA6Fg=
Subject key identifier:   BF:A4:62:44:F7:BB:9C:54:E1:B4:58:55:FF:54:BC:49:3B:2E:D9:29
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01826D0337B2D4143CCA5F09854564A2EAB2
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/v6RiRPe7nFThtFhV_1S8STsu2Sk.roa
Signing time:             Fri 05 Aug 2022 07:58:23 +0000
ROA not before:           Fri 05 Aug 2022 07:58:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212422
IP address blocks:        193.59.95.0/24 maxlen: 24
                          193.59.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6d:03:37:b2:d4:14:3c:ca:5f:09:85:45:64:a2:ea:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Aug  5 07:58:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bfa46244f7bb9c54e1b45855ff54bc493b2ed929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:67:3a:0b:9d:d5:d7:fc:b4:49:d7:9b:c1:
                    37:df:36:d2:dc:f6:99:64:c5:0c:ed:2c:c9:ad:21:
                    cf:f1:89:e4:15:99:49:79:32:a4:4a:c0:ca:13:6f:
                    19:9e:b2:f0:c6:7a:93:a9:9e:66:a8:7c:75:d1:17:
                    94:b0:ef:02:10:2d:aa:5f:79:2f:c5:09:66:fb:da:
                    5c:50:34:d2:59:71:e9:3d:c8:78:92:87:87:9b:a1:
                    de:33:58:b5:86:4d:36:15:d5:49:4c:12:3b:89:1e:
                    a4:93:3e:00:99:83:80:cd:4a:7a:25:c2:4e:46:2a:
                    d0:6a:96:74:26:03:65:70:58:26:13:c9:3e:dd:53:
                    79:bb:6b:94:21:f6:b1:ea:4c:3e:d6:b4:62:8d:ca:
                    5a:93:98:7e:c5:ae:68:e9:c9:cf:b5:f9:63:9f:d2:
                    bb:6c:95:1e:d2:7b:03:e8:f5:16:54:96:9b:29:7c:
                    ba:b7:db:9b:f3:54:0e:ec:f1:8f:c4:e4:ea:db:c0:
                    9b:07:7c:24:fd:3b:07:fd:f5:5e:98:5f:97:56:01:
                    79:a8:51:3d:5b:92:78:a1:11:91:66:8b:fb:9f:f7:
                    bd:8f:1d:f5:c2:96:30:84:62:7d:46:4e:34:f8:51:
                    8f:6b:fe:08:17:98:2f:53:fe:fc:7e:cc:68:bc:fc:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A4:62:44:F7:BB:9C:54:E1:B4:58:55:FF:54:BC:49:3B:2E:D9:29
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/v6RiRPe7nFThtFhV_1S8STsu2Sk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:f9:67:29:db:98:2c:7c:a6:d4:75:f4:9a:dc:03:eb:1f:a2:
         c6:a5:08:d2:ee:35:60:f9:03:f0:5a:ff:7a:16:45:82:58:ce:
         61:ae:cf:7c:6b:f4:00:ce:8e:fd:be:b9:f9:c7:2e:e4:59:32:
         05:27:4c:9c:96:13:e3:9d:a3:ad:82:ec:15:7e:86:60:20:0e:
         ce:10:4d:e5:91:24:41:12:20:15:0d:de:a8:ac:6d:fb:ca:63:
         8f:0c:db:d2:e6:c5:f2:6a:a5:b4:2e:67:90:7a:28:ff:f3:7b:
         81:40:a9:6d:df:5e:02:75:8c:e8:d4:d1:d4:a2:0b:d2:e5:5e:
         d2:4a:93:de:34:f5:7d:3f:6e:d0:11:e3:ef:be:96:30:ad:17:
         68:bb:cb:dd:a0:06:81:f3:e9:85:9c:c3:96:d6:b5:15:fb:d1:
         7e:f7:fa:2f:c9:0c:de:f6:c3:d6:6c:d2:55:85:10:51:ac:c9:
         53:2e:c1:73:99:2c:32:26:c9:89:dd:07:45:c8:74:aa:12:a6:
         3c:7b:8d:4d:c6:a2:8a:7c:91:90:53:7d:0e:7b:1e:1f:52:1f:
         9f:d8:cd:9e:e9:65:71:59:37:1c:26:6b:d9:e3:e9:cb:44:3e:
         d9:8e:30:1a:eb:fe:ec:e1:41:b5:be:37:c7:66:58:fe:44:13:
         25:23:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org