Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1I9IVcvMgbYM8UXANMz_Zqp24LM.roa
File:                     1I9IVcvMgbYM8UXANMz_Zqp24LM.roa (raw, json)
Hash identifier:          VAW++p15PR9cwZyvUuINg2j5/QcSJbbadFmI5vn5PaU=
Subject key identifier:   D4:8F:48:55:CB:CC:81:B6:0C:F1:45:C0:34:CC:FF:66:AA:76:E0:B3
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       0393A7B1
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1I9IVcvMgbYM8UXANMz_Zqp24LM.roa
Signing time:             Sat 01 Jan 2022 06:06:46 +0000
ROA not before:           Sat 01 Jan 2022 06:06:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203068
IP address blocks:        109.205.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60008369 (0x393a7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  1 06:06:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d48f4855cbcc81b60cf145c034ccff66aa76e0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:fc:fc:3d:a6:b8:11:d5:25:74:b8:01:c2:
                    64:0c:52:ec:2f:ae:fc:95:6e:59:c2:20:6d:6d:c1:
                    04:d9:dc:b1:bc:0e:3e:93:c5:ee:25:d3:ca:7f:0d:
                    6c:1a:5d:2e:c0:bd:30:af:0e:97:85:88:53:80:1a:
                    0e:b3:3b:95:c7:2b:2c:03:14:11:d4:3e:1f:02:ce:
                    b8:ea:dd:90:df:47:5a:d9:51:4f:c6:27:8c:85:12:
                    3a:96:f0:a1:76:84:c7:c1:5d:13:be:df:14:f6:ba:
                    c6:a6:a5:3f:12:8e:9f:27:8b:22:78:a6:27:2c:32:
                    5a:9d:e2:a7:79:57:06:e6:b4:ce:0c:f6:ad:73:32:
                    c7:b4:1e:3c:f8:00:60:d9:97:7f:23:e3:9f:20:48:
                    32:65:d6:b6:64:07:3f:fc:de:6b:b6:66:79:12:fb:
                    4e:69:98:7a:be:84:27:73:80:05:2b:95:a7:a9:d7:
                    97:73:9d:9a:57:96:54:74:11:a8:ec:82:ba:f6:92:
                    19:03:59:ff:16:df:c2:2b:90:3b:70:62:66:ff:36:
                    de:ce:7c:d9:7c:32:28:9b:64:10:49:a1:18:02:d5:
                    7e:2a:be:04:fa:de:d8:7b:6d:0f:b5:be:81:60:07:
                    64:67:c7:c1:b3:2a:e4:ba:81:67:18:93:5a:c8:82:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8F:48:55:CB:CC:81:B6:0C:F1:45:C0:34:CC:FF:66:AA:76:E0:B3
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1I9IVcvMgbYM8UXANMz_Zqp24LM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:bd:f7:73:a3:0e:cc:08:94:2e:de:95:de:b4:32:1c:54:30:
         21:50:1a:54:cb:3e:f5:35:04:cb:5f:2e:dd:d2:53:d9:53:a0:
         9f:f2:97:31:fe:4d:c4:8e:03:c3:00:56:0d:02:88:32:73:37:
         12:87:a2:ad:f3:83:49:51:98:b2:3c:c1:33:51:92:a5:d0:a5:
         03:c6:ac:e7:51:43:42:ad:e5:59:a7:12:49:7c:34:91:e7:d1:
         26:8e:75:55:30:ef:5c:0b:a3:06:7e:36:cf:8c:8a:da:d6:e2:
         c0:6c:a9:23:f0:f7:f8:db:05:3e:3d:8b:d3:f8:23:45:28:19:
         cf:13:d0:0d:00:2f:a1:36:11:1b:55:ef:bc:e9:88:34:77:ce:
         2e:a3:7e:3d:4c:59:c0:5d:62:73:32:30:c9:1f:8d:8b:fb:cf:
         c5:60:2d:a5:f5:1f:c5:82:ab:00:15:95:fd:90:28:67:f5:5f:
         41:43:50:1c:37:3b:56:d5:79:b4:e8:de:f0:35:8a:d6:0b:bf:
         1f:81:d9:fd:a4:b5:0b:4e:36:b2:8e:7b:44:e3:a9:17:fa:bf:
         b0:9e:16:c3:43:65:d9:b5:8a:ca:c3:8f:97:9f:d4:3a:d1:fc:
         a2:d4:c8:2e:a1:cc:9c:f9:71:0b:10:72:56:80:fc:d4:b5:6f:
         7d:43:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org