Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/mUTvEyiLy_FrEalB-6D_qRC6OEc.roa
File:                     mUTvEyiLy_FrEalB-6D_qRC6OEc.roa (raw, json)
Hash identifier:          /ptJpkajP+9v9glCNIAjLp+b9g2fFRJ2XQFEmQt1CpM=
Subject key identifier:   99:44:EF:13:28:8B:CB:F1:6B:11:A9:41:FB:A0:FF:A9:10:BA:38:47
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       0182D05437505C8BB7AA989B63E5CEF3AF14
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/mUTvEyiLy_FrEalB-6D_qRC6OEc.roa
Signing time:             Wed 24 Aug 2022 14:49:16 +0000
ROA not before:           Wed 24 Aug 2022 14:49:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198380
IP address blocks:        193.24.40.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d0:54:37:50:5c:8b:b7:aa:98:9b:63:e5:ce:f3:af:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: Aug 24 14:49:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9944ef13288bcbf16b11a941fba0ffa910ba3847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:02:c9:6d:dc:2c:99:5a:02:e5:25:5a:7b:
                    3f:d0:4c:92:33:8e:77:bc:13:e2:21:e3:47:1b:a6:
                    dd:2f:4e:9b:df:f0:39:cb:e9:a9:39:0c:8a:45:9e:
                    03:8d:1f:e4:e9:c8:49:6d:6a:ef:ff:8b:22:ea:d7:
                    ad:5d:a9:2d:12:16:75:ec:e8:6f:36:dc:46:c0:7f:
                    61:1b:5b:af:55:ba:23:dc:f1:bd:be:bf:2f:92:ea:
                    a7:17:07:a6:5c:68:f8:34:64:f3:29:27:fe:1f:a3:
                    72:ce:d8:dd:73:26:6d:27:f4:ea:95:b5:3f:9b:e1:
                    17:3e:bf:84:7f:18:11:31:32:20:0c:15:3f:ad:56:
                    6e:f1:ba:b8:12:38:f6:b8:1d:73:3a:58:86:35:ae:
                    3f:3d:7a:c8:11:3c:6d:da:8e:54:7e:30:40:24:59:
                    f7:3e:4c:c5:c2:f6:8a:d0:33:8c:5c:79:07:c2:7d:
                    cc:83:d1:89:a2:17:a1:92:92:08:df:97:5f:26:ac:
                    f6:6f:67:cd:8a:b7:16:8c:51:e5:fa:44:7d:5b:67:
                    ff:75:95:33:2f:17:89:ba:52:a9:be:a1:d3:67:60:
                    0e:5e:36:22:c2:19:ae:47:94:1c:c8:10:89:61:c2:
                    a7:07:64:11:be:61:64:d9:9b:f0:97:89:03:c1:20:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:44:EF:13:28:8B:CB:F1:6B:11:A9:41:FB:A0:FF:A9:10:BA:38:47
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/mUTvEyiLy_FrEalB-6D_qRC6OEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:67:bc:93:3a:28:1d:f9:1b:34:a3:69:27:93:db:a7:9d:39:
         c2:0e:8e:26:ba:4e:ac:f9:78:5c:54:70:98:39:d7:a3:73:47:
         8b:f1:70:8f:bb:6c:fc:f0:05:85:cf:92:f8:05:27:c7:3a:d2:
         f1:45:ba:e5:d7:1f:7d:ed:48:45:d4:af:ce:0b:18:70:d6:fb:
         d5:fb:69:3c:97:1e:e2:30:cf:27:fb:9a:f1:e8:4f:39:d4:d8:
         16:37:e0:0f:5c:33:12:70:1e:9c:e7:a4:06:b6:d9:46:75:19:
         f8:b9:b7:65:0c:d3:7f:9e:7b:79:09:13:d1:2b:4e:6e:f9:d1:
         cf:7e:8a:fa:6d:ef:9e:6a:89:63:1a:f0:64:05:a8:95:7c:03:
         a8:61:d5:b0:ed:f5:3d:41:67:16:bc:07:4c:95:5c:ec:4c:3c:
         59:19:9d:2b:b1:d8:50:92:72:4c:ef:bd:cc:ba:94:4f:42:8b:
         a6:bf:7f:5d:40:3e:35:ae:47:89:3f:66:b3:fc:f7:b0:f8:6c:
         ff:1b:4e:1d:5e:56:6a:2e:c1:4c:2f:0e:8a:f9:81:e3:44:7e:
         f9:bf:14:46:fc:fd:be:85:64:78:04:f5:7d:71:28:f5:0d:c9:
         86:97:ef:c0:d7:2a:de:e2:13:5f:c5:8c:fa:07:04:a4:2e:97:
         f5:2e:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:32 2024 by rpki-client on console-fra.rpki-client.org