Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/R5DoAAiZfqEmvF5pdGSWwWOlTvY.roa
File:                     R5DoAAiZfqEmvF5pdGSWwWOlTvY.roa (raw, json)
Hash identifier:          dj1G2eM0IIi5gIpNqp8xBwAYYbQpLxVkl7vPjTE5tPc=
Subject key identifier:   47:90:E8:00:08:99:7E:A1:26:BC:5E:69:74:64:96:C1:63:A5:4E:F6
Certificate issuer:       /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial:       09E2E471
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/R5DoAAiZfqEmvF5pdGSWwWOlTvY.roa
Signing time:             Sat 01 Jan 2022 01:54:03 +0000
ROA not before:           Sat 01 Jan 2022 01:54:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50198
IP address blocks:        193.202.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165864561 (0x9e2e471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
        Validity
            Not Before: Jan  1 01:54:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4790e80008997ea126bc5e69746496c163a54ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:96:90:9d:d6:a1:e2:4f:ea:42:da:3f:71:
                    32:f7:22:e7:2d:f5:fa:17:4f:56:21:dd:5b:d9:84:
                    8a:48:5f:e5:e4:e8:a2:a3:d9:f3:6e:17:bd:95:0b:
                    96:4b:7d:45:c8:49:15:2a:c9:61:32:f2:e9:d4:7d:
                    e7:b1:d5:0a:ef:37:a9:cd:7e:30:36:e9:06:99:f2:
                    ed:0a:c5:d1:b4:5b:ad:8c:87:13:80:32:ca:c6:da:
                    28:3d:b5:70:71:86:08:49:45:7c:4f:c7:7f:6c:85:
                    ad:5c:e3:5d:4e:fc:88:c0:35:49:58:fe:4c:27:13:
                    67:e8:60:77:f5:e3:47:76:39:21:08:73:f6:bd:b0:
                    e1:dc:db:00:77:cf:8b:a8:fa:2d:ec:65:8f:87:7b:
                    a7:74:2c:0f:61:69:4d:a5:27:bb:5a:7e:38:3b:ba:
                    c0:02:2e:81:5c:32:0f:5b:1f:d6:19:8e:ff:81:37:
                    b4:f5:0c:fe:4b:f7:db:61:6b:bf:7e:bd:df:0e:50:
                    0f:fd:b8:3b:78:18:a2:b7:c9:29:d3:f9:2a:96:9d:
                    39:56:0b:41:fc:74:f5:44:e7:8f:a5:89:c0:0b:6b:
                    36:0b:d4:15:e7:65:b3:b5:16:1b:c0:16:d9:38:83:
                    6c:4f:cf:b3:dd:86:b9:ff:7d:82:e5:73:28:bd:a8:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:E8:00:08:99:7E:A1:26:BC:5E:69:74:64:96:C1:63:A5:4E:F6
            X509v3 Authority Key Identifier:
                keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/R5DoAAiZfqEmvF5pdGSWwWOlTvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b0:49:62:1e:d6:31:f0:cb:a3:8c:db:02:48:fd:0a:84:23:
         16:2b:3a:76:e3:fb:23:1d:80:98:2f:03:96:d5:f3:23:64:e5:
         80:80:b1:74:ca:bc:aa:61:cc:82:ed:5f:11:62:27:e7:b1:b6:
         92:6a:42:7c:6b:de:2e:91:b4:6e:30:1d:40:28:ec:bd:a6:9e:
         a8:4d:6a:f3:87:a1:9e:a8:df:9b:1a:ef:42:3a:50:e4:6c:23:
         90:d1:53:a2:a6:59:42:44:c4:84:ee:80:9e:00:03:98:08:a8:
         86:70:8f:4c:ad:0f:85:05:d1:e5:3e:b3:ff:a3:7a:27:82:22:
         d9:ba:31:d8:95:c3:78:1f:1c:50:04:19:51:de:78:82:45:ba:
         d9:18:2c:c4:81:91:6a:70:53:90:fe:74:47:08:d7:81:bf:74:
         c1:e3:2f:51:f1:40:43:a8:a2:14:29:9f:9c:f2:0f:2e:08:36:
         af:dd:52:41:e6:0b:1b:31:90:f2:77:5d:bf:db:a2:45:68:de:
         1f:9b:cc:b7:4e:e0:48:7b:8d:9d:5d:ba:38:36:f8:65:0a:12:
         38:62:4f:6b:1d:83:b4:64:eb:9d:eb:ff:95:64:ee:31:84:d6:
         a6:cc:99:03:36:79:bb:3d:4d:b8:41:a8:54:f3:03:e3:fd:c1:
         46:dc:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org