Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/oLtI9QVcoqhZ-HpMzgzXIDuXQC8.roa
File:                     oLtI9QVcoqhZ-HpMzgzXIDuXQC8.roa (raw, json)
Hash identifier:          xOr6SiGtn0Je51T1CNZNga36rgLLrSOek3wK8TPGDYo=
Subject key identifier:   A0:BB:48:F5:05:5C:A2:A8:59:F8:7A:4C:CE:0C:D7:20:3B:97:40:2F
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       7C21
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/oLtI9QVcoqhZ-HpMzgzXIDuXQC8.roa
Signing time:             Thu 10 Feb 2022 08:02:12 +0000
ROA not before:           Thu 10 Feb 2022 08:02:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62313
IP address blocks:        193.22.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31777 (0x7c21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Feb 10 08:02:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0bb48f5055ca2a859f87a4cce0cd7203b97402f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:da:9a:de:6e:bb:9f:d3:9a:49:44:e8:c7:
                    c9:76:15:a0:83:50:e2:a3:d4:31:db:34:7c:16:b0:
                    65:0f:30:88:3d:e3:5e:ea:54:99:90:c5:07:82:4b:
                    88:e3:d0:1c:7a:8c:f3:86:e9:31:7b:72:f4:67:c7:
                    10:46:20:b2:46:12:92:70:b1:be:01:97:ae:a9:2b:
                    98:8a:aa:68:5d:75:e0:f2:9b:20:55:3b:d3:5a:93:
                    88:5f:2c:69:88:52:62:ce:8d:2b:d3:0b:e3:38:b9:
                    f5:db:06:c0:dd:df:02:ad:f7:b1:79:d2:af:af:37:
                    96:92:d9:b9:ca:42:22:02:5b:0e:57:7b:40:d2:b7:
                    e6:30:75:82:84:6a:9f:be:54:3a:80:87:1a:6d:cb:
                    1d:e6:d0:b1:0e:de:71:87:66:07:71:56:5a:7b:3a:
                    4a:11:dd:ec:dc:a8:3b:2c:c5:d7:a7:fb:ce:ac:b5:
                    0b:ec:47:b0:da:9f:51:8c:6a:95:25:f9:97:99:cd:
                    7e:c5:71:ad:48:35:05:6a:64:5c:bb:08:5d:25:1c:
                    6c:2c:dd:94:11:5e:c0:d3:d4:e6:2b:c4:48:84:85:
                    c3:5c:53:9c:4e:21:43:87:35:89:ac:6e:1c:94:f0:
                    cb:4e:82:2c:a7:02:76:37:9c:32:5c:31:fc:9f:3a:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BB:48:F5:05:5C:A2:A8:59:F8:7A:4C:CE:0C:D7:20:3B:97:40:2F
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/oLtI9QVcoqhZ-HpMzgzXIDuXQC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:3c:f5:be:5e:ae:cd:a8:9a:88:24:16:27:55:d1:13:43:
         93:96:f3:6b:5e:5e:c8:59:34:b2:be:bc:74:a3:39:0b:89:87:
         d2:b4:82:7f:4a:5a:4f:f5:76:00:10:68:70:29:5c:98:bb:81:
         8c:ba:59:a5:20:bb:2b:2a:19:9e:1b:a7:76:2b:2e:3d:b5:0e:
         a4:27:dd:eb:44:d4:5c:b7:da:58:47:b7:25:d7:bd:71:da:f2:
         e6:26:bf:94:65:8a:fb:d2:c1:b7:23:1a:76:86:62:e2:12:2f:
         e1:b8:47:65:51:8a:c0:8c:2c:c5:0f:11:b1:d2:5c:d5:c2:ff:
         c1:a2:37:ce:d8:85:d6:eb:ab:7f:e7:b0:f0:f6:b3:0f:25:cd:
         f1:f6:e8:f9:0a:3f:b0:2c:ef:24:96:c9:7c:ff:2f:da:e0:bd:
         37:d5:c2:e9:fa:8c:b4:d4:18:c2:17:7e:af:0a:da:16:75:8b:
         d9:4a:24:6d:93:7f:d8:51:2f:7b:76:68:8b:12:4f:43:40:58:
         78:5d:f2:78:bd:fe:a1:43:ef:7e:89:e3:88:f8:71:9d:d5:4f:
         85:b0:7a:5b:3c:7d:f9:8c:6e:48:b9:05:45:19:54:65:52:36:
         71:13:5c:36:a8:28:dd:d1:07:4d:97:2e:86:15:4a:28:79:2c:
         06:03:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:52 2024 by rpki-client on console-fra.rpki-client.org