Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/qM9Y753U8_zAKKF53nVjQ_8MKxo.roa
File:                     qM9Y753U8_zAKKF53nVjQ_8MKxo.roa (raw, json)
Hash identifier:          6lvjBgwC5u3TgsHkiTmfeGCeNTJFX6SwzzqHFg0b6yY=
Subject key identifier:   A8:CF:58:EF:9D:D4:F3:FC:C0:28:A1:79:DE:75:63:43:FF:0C:2B:1A
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       9DF455
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/qM9Y753U8_zAKKF53nVjQ_8MKxo.roa
Signing time:             Mon 23 May 2022 13:13:29 +0000
ROA not before:           Mon 23 May 2022 13:13:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16111
IP address blocks:        193.238.140.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10351701 (0x9df455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: May 23 13:13:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a8cf58ef9dd4f3fcc028a179de756343ff0c2b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:a9:1c:fd:90:1d:ef:17:55:b0:7b:a7:f5:
                    2a:3b:17:8c:c2:06:04:4e:18:f2:a8:9e:12:e2:68:
                    a5:30:87:86:eb:39:4c:ad:d7:12:0e:6e:ce:c9:fa:
                    b6:10:9a:58:de:66:73:95:b0:a5:b3:a7:48:92:ea:
                    c4:a0:14:cb:3d:6b:c5:b9:bb:b2:ba:89:21:60:8d:
                    a0:19:68:a6:0c:93:a4:88:c9:ce:15:ed:72:82:61:
                    63:63:56:e0:1f:11:6c:ed:b3:ac:cf:41:34:be:b5:
                    7f:33:ac:7c:33:ee:dd:19:93:89:1c:b1:c4:af:f5:
                    63:a7:ab:9c:a9:64:09:4d:c1:6b:7f:e3:3b:0a:48:
                    23:30:17:bb:12:69:62:c0:33:80:6d:d0:bb:e4:62:
                    a7:ac:2c:a3:01:61:57:cd:e6:10:5b:89:6c:b6:71:
                    00:9e:70:f7:be:46:45:91:a7:c9:c5:cf:40:3c:83:
                    3c:a1:bf:5b:83:98:21:41:65:71:9d:cc:56:d7:d9:
                    73:9f:5f:69:6e:0d:1b:fc:86:00:84:f1:82:f6:40:
                    63:5b:4d:03:f4:d8:15:aa:64:f4:4c:21:f4:9c:54:
                    85:4a:ad:c3:ed:4e:0b:2d:c2:b3:ce:78:1c:e8:fe:
                    31:a7:99:9a:22:78:25:10:9d:63:d1:08:cf:e4:bf:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CF:58:EF:9D:D4:F3:FC:C0:28:A1:79:DE:75:63:43:FF:0C:2B:1A
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/qM9Y753U8_zAKKF53nVjQ_8MKxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.238.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:9b:c4:06:80:39:a1:55:cb:6d:18:6e:1e:cf:4c:e3:09:
         4b:57:12:76:f5:c9:b2:3b:64:d9:e5:02:40:8d:94:cd:0f:65:
         07:5f:c2:8d:31:7f:70:f2:25:66:12:03:47:ad:7a:5d:86:f2:
         b8:ca:cb:f1:b9:35:0e:1f:d1:49:7f:fc:b2:90:83:e8:c8:44:
         1b:b9:db:a6:a2:b1:53:33:30:da:08:20:ac:87:07:5b:c1:03:
         e5:24:cb:af:42:0f:b0:49:0c:44:96:cf:fd:97:d8:a4:d4:51:
         bd:49:9e:40:74:8c:ff:96:07:50:5d:95:b8:27:19:1f:69:38:
         4e:81:06:c3:24:3b:a8:67:14:25:d3:61:63:88:88:fe:df:44:
         ad:d3:74:79:18:95:f8:e3:d6:88:15:64:6a:84:24:8e:6f:b0:
         0f:2a:bf:9a:69:fa:24:01:7f:4b:70:de:25:a3:29:81:3d:ab:
         82:ad:e6:e4:f9:b2:1a:ee:4c:58:64:5d:45:58:c5:ff:a4:5d:
         8b:e8:9c:47:47:4c:d8:c8:d5:3e:57:08:77:b5:97:ba:b8:3a:
         ff:75:8b:96:5b:f7:43:66:0f:2d:20:86:0e:30:9d:88:91:02:
         f5:b2:f6:66:c4:71:5e:00:95:ad:06:55:6f:96:a8:22:79:2f:
         61:ae:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org