Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/NpQwfd275bSB87q0ldQeNFu_wK8.roa
File:                     NpQwfd275bSB87q0ldQeNFu_wK8.roa (raw, json)
Hash identifier:          V3OfUREIFCX4uoLQhyUSKKl9ydF9km0LNDQSQkSwrOw=
Subject key identifier:   36:94:30:7D:DD:BB:E5:B4:81:F3:BA:B4:95:D4:1E:34:5B:BF:C0:AF
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       017A5E
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/NpQwfd275bSB87q0ldQeNFu_wK8.roa
Signing time:             Tue 15 Mar 2022 08:08:29 +0000
ROA not before:           Tue 15 Mar 2022 08:08:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16111
IP address blocks:        193.238.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96862 (0x17a5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: Mar 15 08:08:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3694307dddbbe5b481f3bab495d41e345bbfc0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:d5:51:af:62:0e:58:6c:33:c8:7f:83:e3:
                    7a:8f:68:57:6c:da:8a:47:4c:1b:53:83:12:c9:97:
                    5e:4d:21:c8:72:33:13:b9:c4:23:ac:a3:29:c0:8b:
                    fd:27:01:64:90:e8:56:89:5d:c6:7f:94:fc:55:76:
                    76:44:27:79:a0:3f:55:b1:40:80:76:3d:0b:73:40:
                    84:5b:94:7d:42:47:1e:0a:29:29:66:b1:4e:8c:19:
                    d7:c6:59:d3:18:10:51:a2:53:46:7c:4f:34:0f:c5:
                    9c:18:e7:7e:f0:06:68:ea:d6:59:02:06:0d:23:c9:
                    00:5a:dc:b0:b2:27:2c:ce:7c:04:19:bd:57:ff:0e:
                    24:76:e1:6f:c9:46:af:87:fe:40:e1:c4:fc:ca:a3:
                    ef:48:76:8d:c2:e4:13:dd:80:32:29:25:79:4d:aa:
                    da:0e:ff:a3:f5:21:8a:24:2f:3e:2e:79:8d:fb:83:
                    cc:23:e9:2b:82:ad:ee:eb:55:59:7b:8e:59:b6:75:
                    3a:76:8f:4c:84:f0:05:27:05:c7:bb:64:fb:08:85:
                    51:96:d4:09:1f:4d:c9:c8:a2:34:30:9f:17:70:5b:
                    82:26:fe:2e:e5:0a:66:48:b0:97:51:e4:2e:07:29:
                    71:5e:94:3f:59:a3:2d:d7:d3:73:22:8e:e0:6f:5d:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:94:30:7D:DD:BB:E5:B4:81:F3:BA:B4:95:D4:1E:34:5B:BF:C0:AF
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/NpQwfd275bSB87q0ldQeNFu_wK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.238.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:41:8b:66:f7:a1:7c:1e:c9:f8:10:43:a1:d9:c1:38:59:
         44:c0:8c:ac:4d:5b:42:32:0e:0e:21:77:5c:56:34:7b:66:af:
         1c:72:14:cf:3c:62:ac:79:2f:ed:e0:84:2c:65:95:74:a0:11:
         39:1b:b6:b9:f6:81:48:37:a0:ac:5a:c3:67:56:8f:79:74:98:
         42:52:ad:bc:ab:c9:9f:5c:ab:05:c9:5f:a4:ec:a9:40:f9:0e:
         3d:d7:1c:fe:af:2c:0b:e7:e3:44:69:e0:42:8f:3c:dc:9c:4d:
         a8:b4:79:6d:96:93:8c:b4:7c:f4:af:3d:1d:20:94:db:64:62:
         f5:34:b4:c1:3c:15:8c:f8:6e:64:ae:08:6e:91:ef:6f:dd:53:
         9f:b4:37:4f:5d:44:fc:48:32:3b:2c:08:c4:52:7a:ce:fa:5e:
         bc:a9:41:d0:32:03:51:9d:32:35:4a:c4:74:d6:7c:eb:96:67:
         d2:8b:52:6c:8d:75:35:42:30:67:4f:c2:76:d8:54:69:28:d4:
         a7:64:23:d3:ad:b3:06:3a:eb:1f:97:0a:62:ce:41:04:b5:a4:
         54:1f:b5:ba:c0:c9:16:97:2c:2d:b8:3f:07:2d:34:03:a1:ae:
         b7:35:4f:3e:1b:41:ec:6d:73:22:66:4e:7e:c1:a4:8a:79:7f:
         f2:8a:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org