Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/TjF7fee5sQ1OntIq7kcUA1lSOsM.roa
File:                     TjF7fee5sQ1OntIq7kcUA1lSOsM.roa (raw, json)
Hash identifier:          wJwP9UPg3CAfIHXLWMPV/t+4kDpuYc8af03vHfrXxKA=
Subject key identifier:   4E:31:7B:7D:E7:B9:B1:0D:4E:9E:D2:2A:EE:47:14:03:59:52:3A:C3
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       1C487F60
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/TjF7fee5sQ1OntIq7kcUA1lSOsM.roa
Signing time:             Thu 26 May 2022 10:40:13 +0000
ROA not before:           Thu 26 May 2022 10:40:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        87.248.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474513248 (0x1c487f60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: May 26 10:40:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e317b7de7b9b10d4e9ed22aee47140359523ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:12:97:48:7d:fa:39:bf:01:ed:f4:95:4b:
                    53:53:4e:61:69:fd:f2:67:11:2c:da:b7:80:2e:94:
                    00:09:f4:97:44:45:a7:44:f7:f6:1a:1e:52:98:81:
                    d5:76:42:28:7c:28:a9:35:e2:02:88:cd:0b:9d:1a:
                    0e:8e:0f:89:13:83:29:b4:c3:22:63:8c:38:22:f6:
                    91:83:99:84:30:80:02:ab:f7:ac:27:94:66:52:88:
                    14:4b:4a:e3:81:e0:20:7b:03:01:eb:a1:85:60:15:
                    e8:0a:66:73:9f:d0:96:8b:82:0f:4f:be:3b:03:8e:
                    fd:30:7a:bd:aa:72:b7:a6:a0:b5:ef:da:91:98:76:
                    8d:54:fc:63:7d:50:a6:0f:df:62:05:b8:58:c4:8d:
                    e3:a7:16:99:6d:5b:ad:6e:fc:1e:36:ef:29:d5:a0:
                    58:04:72:10:22:47:da:74:f9:7f:e9:1e:9a:89:03:
                    e8:4c:00:75:30:6b:85:31:4d:18:76:f4:43:10:36:
                    ba:92:4d:f0:f7:6e:55:47:04:5e:44:6b:20:ce:90:
                    1e:1b:31:55:ee:c9:b1:c1:74:31:68:b6:c1:60:7e:
                    f7:80:4b:13:d2:7b:c5:7e:5c:1b:8b:53:a7:1c:ed:
                    1c:af:aa:94:12:04:9d:fc:ee:b8:33:e3:87:8f:fa:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:31:7B:7D:E7:B9:B1:0D:4E:9E:D2:2A:EE:47:14:03:59:52:3A:C3
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/TjF7fee5sQ1OntIq7kcUA1lSOsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:4b:11:c8:c1:8a:38:d2:10:e7:c7:1b:dd:b9:20:98:7f:
         c9:42:5e:36:34:6d:00:e2:7a:e6:c8:92:e1:73:60:30:49:49:
         c0:43:97:a5:86:32:8a:5d:71:68:59:1e:80:24:8a:6e:33:56:
         bd:7c:51:9d:b6:43:bf:5a:32:c6:33:5a:c4:28:4a:87:bf:ec:
         ab:e4:b9:4f:d7:c2:40:da:ef:27:ba:f4:1f:6f:55:3d:3f:05:
         3e:2b:3b:90:11:30:18:80:32:09:84:0e:98:70:fe:6b:1a:0d:
         49:fe:25:f0:bf:c2:b8:3e:cd:bb:d5:8c:1d:ef:d1:b8:6e:21:
         8d:2f:44:e4:c7:77:8a:3c:93:5d:b5:40:3d:f0:3f:b3:d7:2a:
         16:2f:cf:b1:0a:f5:d3:3f:07:cd:3e:71:8b:8c:b2:1b:90:88:
         11:1c:1c:a0:1f:c0:5d:f2:73:e8:cc:fe:7f:d0:d0:96:94:92:
         cc:9c:bb:12:0b:0f:48:ce:60:9e:3a:4a:ed:f8:3a:70:4a:ac:
         1e:ee:a4:98:5b:3f:ff:19:96:bb:41:2a:53:b7:c5:fa:64:d0:
         24:76:06:78:aa:9f:06:b1:fc:9f:66:65:b0:56:2b:4b:25:cb:
         80:7c:cf:35:a1:e2:b1:5c:b9:5e:a9:c0:68:89:9e:23:6d:65:
         77:93:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org