Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/pJBGAlo6pYck-U-HviXPkcGJSAs.roa
File:                     pJBGAlo6pYck-U-HviXPkcGJSAs.roa (raw, json)
Hash identifier:          t0RQLos8PD+ukOfV4voF3jf3Cwr+t8KhXXQctVhHIPI=
Subject key identifier:   A4:90:46:02:5A:3A:A5:87:24:F9:4F:87:BE:25:CF:91:C1:89:48:0B
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01838FEF010CE944174667E69DEFA5173516
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/pJBGAlo6pYck-U-HviXPkcGJSAs.roa
Signing time:             Fri 30 Sep 2022 19:45:48 +0000
ROA not before:           Fri 30 Sep 2022 19:45:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205570
IP address blocks:        193.93.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:8f:ef:01:0c:e9:44:17:46:67:e6:9d:ef:a5:17:35:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Sep 30 19:45:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a49046025a3aa58724f94f87be25cf91c189480b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:a0:70:05:b6:9a:60:4d:ae:e7:2f:44:0a:
                    a8:ee:04:d0:4f:1f:50:34:42:f3:62:3a:88:0f:24:
                    a3:be:88:f1:d1:ac:43:41:84:f2:f4:b3:64:2b:cc:
                    f6:18:ec:57:07:c7:41:7b:3d:45:39:1b:81:b1:da:
                    64:a9:fd:13:40:80:f6:c3:71:cd:89:43:1a:23:ba:
                    75:88:13:5b:3d:ab:f6:3e:b9:44:09:5b:b7:16:a3:
                    c4:e0:4b:b2:5f:8b:86:a0:a4:2e:02:97:4a:3d:33:
                    56:73:81:05:18:cc:ba:80:db:1b:d3:74:73:0b:44:
                    7b:2e:71:87:4d:ba:7b:fa:e0:14:46:54:f8:b2:c4:
                    46:76:4b:60:33:11:f8:d4:0b:fd:67:65:cc:21:8c:
                    86:9b:ac:fa:7d:a1:a8:73:5b:38:6a:97:36:30:28:
                    6d:ca:d5:73:7f:9e:26:c4:51:63:fa:65:d5:12:66:
                    59:81:e3:c4:cc:3f:1c:36:55:8e:d3:be:82:bd:d4:
                    ed:7c:7a:f9:96:3e:9d:4e:cb:6c:7c:6b:0a:35:90:
                    1b:da:d9:38:ee:10:d9:36:dc:d0:b6:f4:7c:30:2f:
                    78:31:3d:f4:5b:8f:0b:45:a5:85:d8:db:65:5f:6a:
                    14:dc:0c:fc:50:60:04:eb:e5:cd:66:9c:45:ec:87:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:46:02:5A:3A:A5:87:24:F9:4F:87:BE:25:CF:91:C1:89:48:0B
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/pJBGAlo6pYck-U-HviXPkcGJSAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:32:e5:0b:f0:af:7e:5e:00:3f:e5:f4:da:36:6b:87:bb:16:
         fd:91:0b:c8:a2:29:31:6c:72:59:7d:47:27:31:be:2f:b4:d4:
         21:84:3c:4a:68:23:63:43:12:2b:e9:a4:52:6d:94:a4:e9:b1:
         c1:19:de:d9:6e:b4:dd:dc:0c:f3:3f:2b:e0:84:4f:61:31:ac:
         a6:a6:90:ba:80:fe:1d:5b:26:be:8c:f2:a5:76:69:90:48:a3:
         2f:c4:49:b9:9c:21:c0:3c:87:b0:b3:f8:c2:d9:59:d6:c5:99:
         54:65:fa:87:90:d8:ab:a5:28:29:3a:3d:da:e0:ca:f4:b8:ce:
         16:8a:f7:38:d3:eb:e0:e3:91:83:97:f7:06:b2:e0:10:75:ac:
         35:6c:f0:d3:6a:6f:0b:5a:76:43:77:5e:3c:65:36:52:27:55:
         75:d7:b2:4f:f4:de:c8:fd:e1:9a:06:17:67:3e:25:2b:c9:26:
         79:25:79:84:70:ef:6b:b6:b7:00:db:5d:cd:a6:4f:0f:c6:ed:
         8e:ca:5b:33:24:9c:16:cb:1f:3d:ce:04:b4:65:e8:2b:08:8b:
         fc:47:80:05:7d:eb:6a:8a:2c:30:f7:16:6c:73:29:2a:ff:2b:
         cb:eb:ee:93:9e:a1:2d:db:4d:e4:d1:ef:dc:5c:6a:38:33:d6:
         c3:83:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org