Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8tzGvBGghcQ6CAT3y_b2ZGVo5oE.roa
File:                     8tzGvBGghcQ6CAT3y_b2ZGVo5oE.roa (raw, json)
Hash identifier:          nJtIAAudZ5/FKG/N9VbOLKY/iM2/PoSpFx5fjwE5caU=
Subject key identifier:   F2:DC:C6:BC:11:A0:85:C4:3A:08:04:F7:CB:F6:F6:64:65:68:E6:81
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       0184EBAA233A565DAE451ED9658782AC0D07
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8tzGvBGghcQ6CAT3y_b2ZGVo5oE.roa
Signing time:             Wed 07 Dec 2022 08:18:26 +0000
ROA not before:           Wed 07 Dec 2022 08:18:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210343
IP address blocks:        193.230.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:eb:aa:23:3a:56:5d:ae:45:1e:d9:65:87:82:ac:0d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Dec  7 08:18:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2dcc6bc11a085c43a0804f7cbf6f6646568e681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:6b:bd:d2:08:10:09:e1:59:94:83:0c:16:
                    e6:18:5e:3d:ca:79:87:ea:4f:64:89:0f:0e:8e:f6:
                    ec:b9:99:95:51:52:1d:c5:f1:b8:17:5e:86:10:01:
                    ca:2f:f7:f6:05:fb:8a:2a:21:5f:48:2f:d7:0b:92:
                    e7:35:67:f8:7a:bb:87:7e:1a:33:a6:19:4d:74:25:
                    80:94:d6:75:38:ae:ba:71:f4:8a:75:5f:f1:c1:b3:
                    59:c0:78:a2:0e:15:0a:19:b3:ed:e0:dc:78:fe:d6:
                    c4:24:03:58:63:97:9b:17:d4:0d:87:43:0a:49:f8:
                    2c:4f:3d:06:4f:75:99:33:6b:0f:c1:d8:3b:5d:51:
                    1f:a8:11:83:cd:47:8e:3b:fc:d7:80:4c:25:1e:20:
                    7e:78:7f:aa:3b:cb:42:ce:06:bf:5c:96:07:0a:75:
                    bc:db:7f:b9:3b:70:64:5c:af:f7:15:2d:68:4e:32:
                    0a:51:a2:60:43:04:17:fa:68:82:96:69:c3:3d:b8:
                    1f:b4:d5:08:65:02:78:50:26:92:6a:1b:92:4e:fc:
                    36:eb:a2:a8:cb:31:b9:f0:0c:51:3c:75:ac:37:f9:
                    63:12:dd:7e:6e:fa:a2:7b:30:45:f1:fa:38:1b:65:
                    c2:7b:0d:8d:f0:7e:96:f1:84:8d:98:fa:1a:11:35:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DC:C6:BC:11:A0:85:C4:3A:08:04:F7:CB:F6:F6:64:65:68:E6:81
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8tzGvBGghcQ6CAT3y_b2ZGVo5oE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.230.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:e9:af:9f:d1:c7:e7:64:86:c1:22:70:3d:de:ac:67:c1:
         ae:df:7e:f6:3b:b8:90:00:13:05:49:57:4c:09:d0:1b:9e:c3:
         42:2b:d9:ef:8f:f7:65:1a:48:e0:b5:bf:f1:9b:08:96:a6:58:
         f3:ab:36:bd:ab:96:23:62:1d:f2:87:b0:5a:a5:f7:69:08:67:
         87:1d:72:0d:b2:be:53:9e:ea:0a:fa:f2:b1:8c:61:a0:f7:3f:
         fd:53:a1:80:78:a1:b8:e0:31:ae:42:17:56:a6:2f:05:ef:e3:
         34:b1:b9:90:ed:32:b0:0b:0b:c2:96:26:a9:75:77:0c:86:20:
         f9:fc:d5:d8:95:18:e1:f9:95:c8:12:48:78:ed:55:69:bf:9f:
         e8:34:9d:50:5c:12:86:c4:99:c4:07:f1:1a:48:07:95:d8:fc:
         82:f2:5b:a3:6b:58:42:07:6a:10:78:e0:af:c1:97:14:2b:c2:
         a5:d9:89:55:a3:88:d4:55:33:80:26:38:2b:55:3a:39:ba:1d:
         0b:71:14:6c:92:73:23:97:07:18:f5:86:35:9e:7f:19:c7:07:
         bb:b4:bc:f3:d4:07:71:82:c8:0c:af:71:f1:f4:a6:0f:b7:35:
         99:8a:9b:44:57:14:20:bf:c4:3c:79:6d:8d:f7:01:60:b7:61:
         bc:a9:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org