Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zHP9k9SbIJ8MQD-JV6vL0jdCWSQ.roa
File:                     zHP9k9SbIJ8MQD-JV6vL0jdCWSQ.roa (raw, json)
Hash identifier:          EqWUWecFMCbK2vJEtkMmlKKJAGvym91feBTBqXecrks=
Subject key identifier:   CC:73:FD:93:D4:9B:20:9F:0C:40:3F:89:57:AB:CB:D2:37:42:59:24
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       046C9FC1
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zHP9k9SbIJ8MQD-JV6vL0jdCWSQ.roa
Signing time:             Tue 01 Mar 2022 08:30:19 +0000
ROA not before:           Tue 01 Mar 2022 08:30:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211155
IP address blocks:        193.59.180.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74227649 (0x46c9fc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  1 08:30:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc73fd93d49b209f0c403f8957abcbd237425924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:d0:7d:2c:17:ef:60:31:8a:24:3b:01:a6:
                    e5:97:15:cd:a4:3e:9c:20:16:ac:8c:59:71:4a:3e:
                    6b:02:59:55:18:ed:ab:d1:9b:62:b8:2e:93:c4:62:
                    4a:34:8c:c0:5b:5c:9d:95:e1:14:25:5c:59:00:0b:
                    e8:5a:4a:75:56:76:42:d6:a5:35:59:82:16:35:e5:
                    bd:53:fc:68:15:1c:55:2f:57:23:d5:91:61:fa:f3:
                    f1:15:8d:74:26:e1:86:2a:4a:f9:ba:74:1d:8d:c0:
                    4d:5d:13:e4:ee:b3:95:6b:4c:ba:bc:19:06:76:1c:
                    c5:d2:99:ce:33:e2:ab:5f:65:7f:b6:b9:3a:da:42:
                    27:7d:74:5d:f3:10:ef:d5:e8:df:62:e8:41:4a:1e:
                    b3:56:4b:11:20:aa:b3:9a:3b:29:96:b7:c9:c3:0a:
                    de:4d:25:bf:68:4e:82:d5:a5:1f:75:b2:1c:ac:c6:
                    fd:4d:4b:63:25:d3:0f:c1:96:89:10:cf:ca:72:9c:
                    cb:d3:7e:d6:f4:e7:85:8a:be:02:cd:14:89:60:01:
                    4b:d2:79:f8:68:f2:80:6c:37:23:1a:86:69:09:72:
                    63:77:19:aa:81:69:68:ac:c9:fb:22:55:a4:62:eb:
                    4d:f5:f5:2f:a1:d5:66:ed:ca:3d:ef:ea:9e:0a:c2:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:FD:93:D4:9B:20:9F:0C:40:3F:89:57:AB:CB:D2:37:42:59:24
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zHP9k9SbIJ8MQD-JV6vL0jdCWSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:d2:ee:89:1b:48:f7:62:54:fb:b9:bd:38:04:10:ad:8b:ee:
         52:2d:e1:bc:d2:bf:47:c1:d1:db:83:c3:c8:17:60:20:fb:7a:
         03:a7:6d:78:1b:0b:ed:3f:aa:51:c7:72:e1:46:58:fd:b4:63:
         14:67:6f:2f:47:c8:9a:ae:26:e1:5d:fc:51:22:5d:91:5e:3b:
         77:b1:91:12:45:68:23:68:d7:65:9c:cb:ea:89:ff:9c:07:c8:
         89:4d:3c:86:2c:f7:ce:fe:ea:04:9e:1e:72:ef:e4:81:bd:cc:
         06:63:87:57:04:e9:c2:ad:3a:e9:8d:6e:17:ae:8d:08:39:3d:
         2a:16:a4:43:dd:25:ca:05:89:ea:46:db:9e:4d:12:36:1d:9d:
         db:f7:71:27:9d:ea:87:8f:75:9f:5f:be:b3:c4:2d:3f:99:1a:
         bb:14:03:a6:ce:d1:08:a0:05:b9:ff:b8:e3:2a:d2:9d:75:2a:
         c6:d5:32:0e:4e:75:c9:36:c2:1b:ee:ea:52:3c:e4:15:76:12:
         b7:30:e6:1a:c5:64:a0:84:14:87:68:23:66:23:b5:dd:37:cb:
         09:7f:51:13:25:02:43:8d:e5:5d:d9:c8:ef:cc:b6:79:fe:72:
         d9:98:6e:67:17:70:a5:f6:84:89:b5:00:80:0f:89:66:7b:22:
         e0:11:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org