Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/S5JpuWtZlOjeFKpAkY-zI8EiInE.roa
File:                     S5JpuWtZlOjeFKpAkY-zI8EiInE.roa (raw, json)
Hash identifier:          R4xcO2pYSoi2Mh9YCXTPj+10GYk2ekLgO4zTEyCe6iY=
Subject key identifier:   4B:92:69:B9:6B:59:94:E8:DE:14:AA:40:91:8F:B3:23:C1:22:22:71
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       0182D05436B2BC8904A8215E5AC9142B5CDB
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/S5JpuWtZlOjeFKpAkY-zI8EiInE.roa
Signing time:             Wed 24 Aug 2022 14:49:16 +0000
ROA not before:           Wed 24 Aug 2022 14:49:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        193.24.42.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d0:54:36:b2:bc:89:04:a8:21:5e:5a:c9:14:2b:5c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: Aug 24 14:49:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4b9269b96b5994e8de14aa40918fb323c1222271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:58:d1:49:24:4c:64:68:af:64:3e:a8:2d:
                    b1:fe:2b:e3:f4:f2:15:bf:73:52:74:f6:fd:d0:a5:
                    19:7f:77:6c:5d:6c:34:ab:bf:3c:48:ab:ac:92:dd:
                    6d:af:d1:53:4d:33:d4:89:ba:03:76:23:15:2d:76:
                    14:1a:43:bf:34:1b:60:3d:df:1a:85:e7:aa:e2:75:
                    38:7e:52:8e:dc:d7:8e:78:dc:3c:a6:92:23:ac:29:
                    ef:7a:a0:fb:54:a6:f0:de:35:1d:69:a9:09:0f:17:
                    b2:5b:02:40:76:61:e3:23:35:fb:04:b7:95:3d:20:
                    0f:d9:45:ea:70:16:b1:d3:15:0c:85:fa:90:5f:f8:
                    97:ea:b1:aa:c9:43:63:1f:99:0e:00:4e:ce:41:67:
                    1a:cc:ea:17:0a:f6:80:fd:7e:6a:dc:ee:7e:a9:ed:
                    cf:79:dc:d4:cb:4b:88:4e:3c:a4:4d:22:f1:93:a8:
                    d6:f3:5a:07:27:bc:e0:33:a7:bf:43:12:f6:b8:6a:
                    37:35:17:7f:4c:74:d9:6b:05:d7:ec:49:d2:28:d5:
                    02:d2:e0:e9:35:69:f9:14:f8:ba:ec:13:a1:3f:91:
                    59:16:be:bc:01:32:98:f9:b7:2c:a2:a9:31:88:c2:
                    76:25:07:bc:00:70:7b:ba:38:2a:f6:de:f5:05:7a:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:92:69:B9:6B:59:94:E8:DE:14:AA:40:91:8F:B3:23:C1:22:22:71
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/S5JpuWtZlOjeFKpAkY-zI8EiInE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:3a:68:98:02:57:e2:23:b4:23:55:55:f3:a1:6a:a2:5a:e4:
         1e:f7:61:ab:55:78:3d:a7:c9:43:e2:48:a0:7f:00:0d:4c:6f:
         64:e9:94:5f:dd:2a:ca:f6:bf:a6:01:d8:fd:58:87:f3:d2:9d:
         1d:dd:4c:0a:5d:13:04:8d:c1:6f:52:41:eb:c3:c8:88:af:b6:
         37:30:ae:6a:de:53:af:3e:68:90:81:fc:e2:ec:91:07:33:0f:
         98:ab:00:4c:c2:a4:2a:47:6b:20:95:50:ea:84:fe:14:a7:2e:
         7a:e7:89:2c:74:a9:42:e0:e4:73:62:0c:d9:f9:f2:5e:bd:38:
         50:73:8e:61:ea:e6:72:49:e2:80:b4:9b:97:20:5e:e3:23:35:
         db:83:18:39:6e:d5:06:8d:3e:33:f2:e5:40:51:35:36:fd:28:
         a9:ef:17:0f:66:ac:34:dd:1f:9a:95:61:cc:50:94:ef:ae:4b:
         20:ae:6d:5c:b9:98:5c:fe:5d:bd:b6:12:2f:a7:f1:6c:a6:97:
         cf:1c:70:7d:4a:17:c9:32:5f:b2:ea:f5:2a:f4:9b:99:a8:fb:
         8e:73:33:4b:7b:bf:54:bc:9d:67:00:5c:f1:fe:37:6f:10:7c:
         7e:6e:be:38:7c:36:84:d8:0b:9c:20:7b:b5:2c:58:ef:ca:4e:
         7c:3e:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:32 2024 by rpki-client on console-fra.rpki-client.org