Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/G1rjga2LAojc4EOcK0pWcH4uHH4.roa
File:                     G1rjga2LAojc4EOcK0pWcH4uHH4.roa (raw, json)
Hash identifier:          ST6J/M8Ju00ao8a3aTX5X0zYOaTk3CDfHT927Icx718=
Subject key identifier:   1B:5A:E3:81:AD:8B:02:88:DC:E0:43:9C:2B:4A:56:70:7E:2E:1C:7E
Certificate issuer:       /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial:       0A4AE02C
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/G1rjga2LAojc4EOcK0pWcH4uHH4.roa
Signing time:             Sat 01 Jan 2022 01:59:45 +0000
ROA not before:           Sat 01 Jan 2022 01:59:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24961
IP address blocks:        194.9.182.0/23 maxlen: 23
                          193.193.190.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172679212 (0xa4ae02c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
        Validity
            Not Before: Jan  1 01:59:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b5ae381ad8b0288dce0439c2b4a56707e2e1c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:52:4e:ca:09:13:58:3d:d4:c4:88:17:8f:8c:
                    c2:b8:65:12:fe:54:76:ca:89:48:a4:8e:6b:26:77:
                    3e:57:73:30:7f:ac:68:dc:54:f3:4b:fb:2e:c1:7c:
                    45:4c:43:62:1f:49:79:94:ec:34:50:89:ad:04:58:
                    c7:61:25:b6:11:b9:3d:97:54:49:4d:89:54:15:13:
                    ff:0a:27:c7:de:1b:06:81:34:2b:ab:a0:b7:1a:b0:
                    85:c9:28:96:ed:5b:90:52:d0:58:75:2a:95:de:e6:
                    a9:78:b3:c7:af:8a:cc:53:6c:94:98:99:53:9c:d5:
                    06:39:15:3b:a2:49:07:99:cd:f9:66:26:1d:35:d6:
                    d3:c7:89:cc:c4:81:f5:31:61:3c:cf:6b:af:83:63:
                    d5:60:e9:34:c4:34:35:f3:c1:f2:d2:b6:27:0d:42:
                    87:3e:53:a8:97:0b:87:2c:a4:1e:bb:e2:96:2d:26:
                    04:a5:b3:b0:9a:17:ee:46:1c:f2:38:0a:18:06:64:
                    27:06:bb:0a:90:6b:a4:6f:aa:60:10:c2:62:34:98:
                    76:de:e8:8c:61:7c:a7:5b:45:f0:66:6f:31:94:b5:
                    a3:19:40:af:8d:c7:19:63:21:26:c7:53:de:37:e9:
                    92:bc:1b:5f:1f:16:85:27:8a:c7:8c:75:e2:20:b3:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5A:E3:81:AD:8B:02:88:DC:E0:43:9C:2B:4A:56:70:7E:2E:1C:7E
            X509v3 Authority Key Identifier:
                keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/G1rjga2LAojc4EOcK0pWcH4uHH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.193.190.0/23
                  194.9.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:41:c7:ce:18:0f:b8:bd:c9:15:b7:b3:6e:1e:ae:96:4a:c8:
         96:27:ad:9e:7f:35:bd:94:03:65:5d:e1:e0:63:8c:56:12:e7:
         34:a3:28:29:70:71:63:56:6d:90:8b:fd:ae:7f:3e:e4:5e:51:
         6e:d6:55:f4:13:23:da:8e:67:df:9f:3b:cb:be:27:09:af:e9:
         56:03:c3:da:89:0d:88:e3:25:a5:57:a8:1a:47:61:c1:ec:5b:
         15:c7:0a:9d:28:eb:45:5c:7c:d1:81:fc:00:b4:86:51:6a:8e:
         70:9e:51:8f:b7:5d:54:f7:22:72:85:a5:a8:89:c1:8b:88:7e:
         41:2a:6d:44:65:37:d0:51:5a:a7:cd:98:85:d6:ee:33:65:e1:
         99:dd:bf:b8:67:74:bf:78:ef:20:3f:00:2b:1c:48:ae:cd:a2:
         9d:6f:51:e4:29:89:83:9c:70:ae:26:f0:00:7a:4a:aa:30:00:
         0b:b1:9a:f6:02:28:76:fe:55:b4:e6:7e:a9:39:f9:ab:17:0d:
         1e:4d:1b:58:8d:8f:87:88:a5:ff:35:79:4c:15:3a:ee:55:08:
         09:7c:98:40:0b:8f:41:47:7f:99:dd:f1:8d:48:88:9c:1f:1f:
         0b:0b:76:9a:31:90:3f:fc:18:19:ee:d4:4f:b5:d9:c2:8f:db:
         fa:21:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:39 2024 by rpki-client on console-ams.rpki-client.org