Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/9IPfJRCtU0LRXppzqL_zJ0uFh3g.roa
File:                     9IPfJRCtU0LRXppzqL_zJ0uFh3g.roa (raw, json)
Hash identifier:          zw/BDqA4ua6eJoLEO12MXdaMFgU/UwizWD0mgbLhE9Y=
Subject key identifier:   F4:83:DF:25:10:AD:53:42:D1:5E:9A:73:A8:BF:F3:27:4B:85:87:78
Certificate issuer:       /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial:       0227CD3A
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/9IPfJRCtU0LRXppzqL_zJ0uFh3g.roa
Signing time:             Sat 01 Jan 2022 06:59:58 +0000
ROA not before:           Sat 01 Jan 2022 06:59:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211304
IP address blocks:        193.84.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36162874 (0x227cd3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
        Validity
            Not Before: Jan  1 06:59:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f483df2510ad5342d15e9a73a8bff3274b858778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:12:58:04:de:d9:87:1b:6d:30:8c:0c:d8:
                    5b:ad:72:2a:8e:1c:49:fe:fc:d8:23:42:59:14:c6:
                    bc:e9:38:b3:0e:ef:58:27:0d:3f:67:5f:74:b4:ca:
                    88:b1:7d:64:2b:c1:82:48:9d:42:39:3a:cb:ef:7a:
                    c2:6d:c4:dc:3f:53:5f:d9:8c:3a:b8:9f:c4:da:35:
                    81:13:d9:8b:a0:0f:96:38:70:a6:a9:80:97:53:15:
                    98:7d:ae:31:8f:f3:6b:e4:3f:d6:bd:76:94:b3:f9:
                    20:bf:13:3d:8d:ba:c5:7e:f0:fb:6b:85:ca:9f:c1:
                    a3:ad:96:e7:2e:b1:74:0e:dc:7f:31:76:cc:bb:a5:
                    3c:4f:8b:a3:c1:1b:76:fb:20:6d:d1:27:d5:7b:70:
                    fb:b4:ba:5c:2f:a4:ca:e9:63:a1:e7:15:39:9d:01:
                    5a:58:da:8f:18:27:f3:ff:1e:84:e1:ab:fb:4d:e1:
                    aa:2f:82:e3:15:48:26:99:b4:07:7e:c6:26:90:fa:
                    c3:13:72:8c:10:0f:08:e9:42:2a:5e:49:03:c8:85:
                    eb:57:ad:71:72:91:0b:08:5a:db:9b:ef:3a:39:fc:
                    1f:c0:6f:df:5e:f4:8e:02:12:b2:58:ae:be:02:17:
                    04:98:eb:53:84:67:17:d7:1e:5e:18:b5:61:c0:04:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:DF:25:10:AD:53:42:D1:5E:9A:73:A8:BF:F3:27:4B:85:87:78
            X509v3 Authority Key Identifier:
                keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/9IPfJRCtU0LRXppzqL_zJ0uFh3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:06:b3:b2:a3:ae:82:d6:e5:69:29:83:19:8c:7c:7e:52:da:
         12:42:96:ca:c8:62:00:da:02:db:55:12:bb:e6:e4:9a:f0:ae:
         14:3f:bc:d7:0e:56:9c:8a:0e:f8:6b:f3:7a:f7:93:27:3b:44:
         55:56:a6:b3:be:41:2f:1e:74:7b:4f:58:c9:17:c4:78:58:9a:
         20:32:62:23:42:d0:79:14:34:f1:66:17:4c:04:b4:3c:1d:a5:
         04:85:2c:08:40:d9:58:94:f1:74:e8:c6:b9:82:6d:42:03:be:
         c0:e8:99:74:f1:8c:0a:98:b4:b5:79:35:50:66:1c:b1:03:73:
         39:ee:4f:07:ac:b1:1c:c0:0b:a0:8a:24:34:be:ad:e7:1f:5e:
         5e:50:38:7c:d4:d8:80:c1:be:29:62:3e:b0:2a:fb:ab:52:d2:
         27:95:40:de:38:61:b6:62:a9:b6:c2:e0:32:6c:d4:4c:fc:22:
         ae:75:ce:fa:79:7f:0b:e4:08:36:28:14:ff:4c:ba:77:90:91:
         32:10:33:6b:3c:fa:4a:c2:16:cd:af:a1:31:93:08:88:4d:38:
         3a:50:fb:b8:a0:10:8b:cc:a5:22:e9:53:68:0e:c4:64:aa:f2:
         b0:b1:27:da:c3:ac:3f:91:12:8a:c7:f0:21:90:3d:00:46:e1:
         7a:c2:36:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org