Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa
File:                     d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa (raw, json)
Hash identifier:          X4dVcRjmA+lZQYud+Gtis8rZjkyJn5GFh+hwXsjairk=
Subject key identifier:   77:D4:B1:97:3A:AE:F2:C4:E3:C3:F1:E8:D9:48:F6:3A:F3:7E:F6:06
Certificate issuer:       /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial:       06D07194
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa
Signing time:             Sat 01 Jan 2022 04:53:38 +0000
ROA not before:           Sat 01 Jan 2022 04:53:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.218.204.0/24 maxlen: 24
                          193.218.222.0/24 maxlen: 24
                          193.219.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114323860 (0x6d07194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
        Validity
            Not Before: Jan  1 04:53:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77d4b1973aaef2c4e3c3f1e8d948f63af37ef606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:8f:54:1d:76:cd:29:c7:af:f6:94:87:46:
                    0c:4d:2a:ac:b3:9f:b6:d9:bc:2f:df:35:8f:97:ff:
                    8e:3b:cf:d5:cf:41:d9:79:a8:03:d0:8a:3b:e2:39:
                    1a:ff:c3:af:75:3a:9d:33:45:91:33:02:9d:da:45:
                    44:ff:29:88:bc:e3:0a:70:e7:32:af:89:f7:2c:7a:
                    ca:5f:81:ec:98:27:78:cc:3c:88:5c:0a:9c:52:66:
                    f8:d6:f1:e1:71:85:6c:c3:8a:7e:f6:d8:e2:d3:de:
                    95:a0:bc:46:2f:84:fa:2d:b8:38:bd:ff:1b:11:68:
                    e6:32:97:b4:53:57:3a:08:c6:f2:e5:8e:8e:74:3f:
                    51:15:c9:6f:11:46:68:7e:b9:af:86:41:ff:20:2b:
                    fa:a3:1c:d3:b7:58:fe:3c:41:64:80:fe:04:9e:dd:
                    b3:87:71:2b:8d:d6:11:5f:d1:a4:c2:2a:87:a2:da:
                    45:ee:f7:a4:4f:b8:58:07:e0:a0:2b:28:ab:72:3e:
                    a1:64:d3:3c:42:71:7c:52:29:1a:15:8b:d6:1f:0d:
                    36:0f:ac:27:01:8d:df:2f:cd:a8:39:78:c6:5a:97:
                    81:0e:2b:c4:af:52:0b:9e:3f:7e:a8:5f:6c:6d:1f:
                    30:1b:1d:94:37:86:96:7f:1d:64:55:29:08:95:56:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D4:B1:97:3A:AE:F2:C4:E3:C3:F1:E8:D9:48:F6:3A:F3:7E:F6:06
            X509v3 Authority Key Identifier:
                keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.204.0/24
                  193.218.222.0/24
                  193.219.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:45:45:e0:c2:09:a0:d0:1d:50:97:03:87:f4:ba:ce:00:
         8f:c9:60:40:67:94:d6:0e:cd:2e:f1:de:80:3b:26:35:34:be:
         81:18:1a:82:18:3e:52:43:2a:f5:44:eb:11:75:58:26:52:30:
         ca:a8:fd:5c:ef:80:fc:1b:35:54:26:bc:78:9f:d9:5e:57:52:
         41:2a:9b:46:4b:44:98:36:87:80:32:ba:1d:e9:21:87:df:8a:
         c4:35:20:65:b8:22:84:99:58:9a:04:5d:d0:45:25:60:b1:23:
         03:3d:b7:cb:c1:20:02:74:c1:0e:34:51:17:ee:06:10:c2:10:
         05:af:a7:eb:e4:62:7e:ef:da:06:c8:59:bb:86:49:39:2a:04:
         29:66:fc:eb:b3:e6:0d:8c:f7:d0:fd:16:a2:47:c7:37:9c:23:
         a2:33:49:1b:a4:23:40:ac:c1:84:70:f2:d3:44:a3:93:b2:95:
         bd:7c:48:3a:90:b7:e1:24:a3:15:d3:cc:f9:a4:e3:65:87:46:
         e5:3f:a2:ba:c9:28:17:34:c1:4b:79:fe:82:c9:3d:e3:c0:13:
         0d:ad:2f:68:7c:86:a3:0c:d1:e2:01:88:d2:ab:4b:43:b2:52:
         60:92:e4:82:1d:d1:e1:59:ff:43:19:fe:7c:8d:4b:ea:18:3b:
         6d:3f:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:32 2024 by rpki-client on console-fra.rpki-client.org