Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3L_BrO4vxXHHkIh_4K_Tel-bkCw.roa
File:                     3L_BrO4vxXHHkIh_4K_Tel-bkCw.roa (raw, json)
Hash identifier:          X3hvG+dSQy+oiUlOkGxZcukjE11A7k5FoREdJRXn28s=
Subject key identifier:   DC:BF:C1:AC:EE:2F:C5:71:C7:90:88:7F:E0:AF:D3:7A:5F:9B:90:2C
Certificate issuer:       /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial:       0184104BC838658CAE73631914AC65777919
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3L_BrO4vxXHHkIh_4K_Tel-bkCw.roa
Signing time:             Tue 25 Oct 2022 17:58:32 +0000
ROA not before:           Tue 25 Oct 2022 17:58:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212512
IP address blocks:        93.190.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:10:4b:c8:38:65:8c:ae:73:63:19:14:ac:65:77:79:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
        Validity
            Not Before: Oct 25 17:58:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcbfc1acee2fc571c790887fe0afd37a5f9b902c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:27:a2:cb:96:e3:29:94:6f:fb:3c:52:36:
                    ce:7a:cc:f1:8a:a0:9b:a1:92:0d:7c:a0:b6:b1:1e:
                    c3:48:50:84:c0:f7:44:10:9a:cf:a1:87:e4:c5:58:
                    e6:2c:ee:78:93:b2:28:8b:47:d5:85:fa:39:f6:4d:
                    0b:83:8e:ac:c0:68:77:a6:30:eb:96:ff:69:e2:54:
                    d6:12:0b:ba:b9:81:3b:f2:3f:73:a5:80:12:10:52:
                    ce:23:8f:51:00:96:c9:22:09:60:89:71:18:71:c3:
                    f1:a1:57:35:ee:fe:43:15:0a:b3:35:4e:9a:80:06:
                    c1:76:32:06:00:e6:79:5c:7f:bc:45:c1:d8:50:0f:
                    05:5a:16:af:8c:c2:e6:ea:18:77:9e:6a:50:70:89:
                    87:32:0c:3a:53:d6:bb:8a:bf:f9:54:f2:37:35:22:
                    54:f5:2a:32:9c:07:19:c2:e2:a6:91:08:10:51:a7:
                    27:e2:2e:e1:9d:5d:cb:c7:e8:8d:c4:f7:69:74:da:
                    08:19:29:18:64:8f:e0:8d:73:c9:f4:f0:96:fa:ec:
                    48:6a:37:3b:d3:d3:74:b7:d7:c1:bb:7f:e9:6b:4c:
                    1b:30:d2:6a:c5:77:c4:88:29:2b:d6:a8:5a:e9:cd:
                    8d:ca:c1:c8:9e:14:4d:f5:a0:58:40:11:64:86:52:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BF:C1:AC:EE:2F:C5:71:C7:90:88:7F:E0:AF:D3:7A:5F:9B:90:2C
            X509v3 Authority Key Identifier:
                keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3L_BrO4vxXHHkIh_4K_Tel-bkCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:37:41:90:d0:fd:c5:a2:ba:d7:b5:bc:49:ba:3f:ce:12:48:
         2b:76:9a:1a:46:b1:21:15:a3:4a:b9:0b:aa:ee:ee:a5:6d:d6:
         e0:d7:e4:50:05:ac:e6:af:d9:f0:2b:5d:99:f2:58:a6:16:48:
         90:a7:2d:2b:e9:33:07:b2:3e:eb:cc:ec:be:10:f9:3d:d6:b6:
         42:e0:cc:21:6c:5a:36:9f:42:4e:75:97:53:9b:58:e7:d1:3d:
         3a:f6:b2:4a:fb:86:52:87:6a:92:ad:ff:a2:8a:0c:a3:c9:2a:
         01:71:fb:da:45:1e:3c:7e:8d:e7:dd:43:31:2b:a4:24:70:f6:
         69:68:b4:19:6b:26:23:f4:64:ec:b8:07:16:52:0b:29:ed:84:
         8a:c3:7f:bb:04:bd:ca:c9:a8:4e:92:53:a6:51:a1:a3:d4:82:
         2c:23:1c:7a:6c:97:f9:98:0c:55:4a:15:8f:2f:5d:97:ce:77:
         a6:bf:68:bc:d5:3f:93:48:77:b5:b2:13:34:94:65:5d:0f:fa:
         47:ab:63:2a:d1:59:1c:ce:27:2a:7b:e5:71:e6:54:59:da:80:
         ce:07:e1:b9:ae:7c:68:7a:55:d0:a3:33:0b:a1:39:a2:17:be:
         2c:d5:1d:43:ad:d4:0a:10:52:80:9a:42:03:69:5c:34:fc:32:
         fd:cc:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org