Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/bVsP24ygbg3hHmmG7eFMbiwim9s.roa
File:                     bVsP24ygbg3hHmmG7eFMbiwim9s.roa (raw, json)
Hash identifier:          ooG8yZasZvJmqAmzn0UWmU9NXTy9J6jdGGZ7AsNEhz4=
Subject key identifier:   6D:5B:0F:DB:8C:A0:6E:0D:E1:1E:69:86:ED:E1:4C:6E:2C:22:9B:DB
Certificate issuer:       /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial:       0D98EEE5
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/bVsP24ygbg3hHmmG7eFMbiwim9s.roa
Signing time:             Sat 01 Jan 2022 16:06:27 +0000
ROA not before:           Sat 01 Jan 2022 16:06:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15879
IP address blocks:        193.105.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228126437 (0xd98eee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
        Validity
            Not Before: Jan  1 16:06:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d5b0fdb8ca06e0de11e6986ede14c6e2c229bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:8a:7f:ed:77:3f:bd:4c:41:3f:e9:48:f6:
                    35:bb:4b:b3:e7:56:b3:fa:a7:c6:bd:79:8e:9d:c1:
                    81:aa:d2:c1:61:12:e8:56:24:f4:a7:02:9c:87:7b:
                    7c:16:7c:8b:10:95:24:af:25:80:2d:a6:0d:3f:e6:
                    60:12:c1:61:ac:03:5d:31:bc:f9:1d:12:85:1d:e2:
                    c1:6e:68:66:c1:ea:a7:24:64:ab:03:5d:11:1d:6c:
                    97:e5:fb:76:e1:bd:4c:45:b1:ec:a7:b8:4a:b1:e9:
                    9e:b9:8a:d7:09:b5:83:2b:5d:67:b0:9a:28:b3:6a:
                    b3:e5:4b:c9:9c:b6:3e:a3:1a:f4:d9:c8:12:8e:b3:
                    e5:46:8f:df:89:b4:f4:a3:c0:e6:70:64:66:e7:c8:
                    9a:5f:e2:62:13:df:07:68:53:19:d6:8a:71:de:f1:
                    b5:62:37:9c:f9:81:fb:a7:55:b7:57:a9:45:41:0d:
                    5e:99:ba:25:66:2e:c9:81:02:2f:6d:ba:65:5f:f4:
                    d6:a1:25:13:ae:fa:af:64:d9:95:e1:13:cc:7d:da:
                    c0:76:c7:bf:61:34:ad:d5:30:7a:ed:d1:ef:31:57:
                    34:d6:30:de:59:dc:1a:3c:10:75:24:d1:5c:3a:e9:
                    e1:51:2b:04:96:f6:2d:b8:22:a4:1c:97:ce:4f:c0:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5B:0F:DB:8C:A0:6E:0D:E1:1E:69:86:ED:E1:4C:6E:2C:22:9B:DB
            X509v3 Authority Key Identifier:
                keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/bVsP24ygbg3hHmmG7eFMbiwim9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:96:98:d2:b1:6f:5c:e4:53:81:96:c9:96:d2:64:bc:41:c6:
         19:45:49:78:75:7a:d4:47:b9:5c:b6:3c:f5:f8:ea:77:2b:5c:
         d6:3c:28:3f:a8:3d:ec:2c:87:fb:5f:fd:78:2f:c3:fc:17:bc:
         88:6a:ea:2e:b8:4a:d7:2a:68:54:ab:bf:e0:cc:f7:bc:ba:63:
         76:0f:a2:a1:c2:86:9a:05:9c:01:70:ae:e5:37:60:a6:de:4a:
         0f:04:3a:80:f3:41:9b:03:42:b4:9f:ff:1d:d4:f3:8b:34:c0:
         42:cd:3a:c2:f4:a4:4e:70:97:97:66:af:3a:40:b6:c2:74:1e:
         0e:e2:af:a9:c0:26:39:40:00:d1:84:13:a8:37:a3:25:7c:8e:
         14:ff:be:49:a7:7f:1c:29:f3:f8:05:e3:30:af:a0:ef:13:50:
         9d:e1:90:65:c7:ec:23:31:be:14:8e:61:d0:4c:91:08:41:ff:
         c5:f1:cb:48:9f:6d:f3:38:27:67:f3:cb:89:4f:c6:6b:32:50:
         54:c4:6d:6b:a1:51:7f:a0:37:84:6e:b9:0d:e2:b8:e4:17:28:
         8a:f5:31:22:a2:11:ec:ea:0f:29:ec:f2:f4:18:5a:4f:4f:e6:
         00:8e:e3:ce:58:36:1b:e9:ab:ad:f7:63:cd:b5:f6:94:84:4b:
         c7:ed:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:38 2024 by rpki-client on console-fra.rpki-client.org