Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mBCuVSYi5REwagY7OrK8IMTHkMU.roa
File:                     mBCuVSYi5REwagY7OrK8IMTHkMU.roa (raw, json)
Hash identifier:          rG2QTKiE54FzDLJk7g9uHfVlMtOSvi5HbZRquXKWFn0=
Subject key identifier:   98:10:AE:55:26:22:E5:11:30:6A:06:3B:3A:B2:BC:20:C4:C7:90:C5
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       137DBDC1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mBCuVSYi5REwagY7OrK8IMTHkMU.roa
Signing time:             Sat 01 Jan 2022 05:56:13 +0000
ROA not before:           Sat 01 Jan 2022 05:56:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49527
IP address blocks:        91.214.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327007681 (0x137dbdc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jan  1 05:56:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9810ae552622e511306a063b3ab2bc20c4c790c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5b:d5:7e:80:c3:f1:51:d5:21:e5:0a:f3:e5:
                    d9:ee:dc:70:8a:05:62:bc:47:0d:e0:1b:3e:5e:50:
                    e6:48:e4:af:6c:50:15:86:d3:51:10:ec:0e:08:24:
                    08:84:25:8e:39:56:f2:26:8a:72:60:4b:85:f0:25:
                    fb:6a:5b:2f:4f:d1:11:33:bf:86:42:b8:34:c4:77:
                    92:2f:62:a7:84:c7:58:92:6f:c6:77:88:ba:57:b8:
                    b9:b5:01:e4:21:56:d0:8c:10:fd:20:30:9e:00:34:
                    af:2a:e5:c6:31:66:96:d5:e0:a7:75:65:06:a9:1d:
                    fe:29:59:d5:5d:e1:1a:52:0b:28:77:1a:09:03:c8:
                    20:bb:4c:e0:4f:b6:a1:54:28:6d:95:26:2c:3e:33:
                    04:1a:21:48:1d:f8:f3:e0:83:03:e3:bf:4b:85:8c:
                    b9:68:cf:c7:8c:68:9d:b8:c6:ad:d2:d1:83:72:6b:
                    06:5e:13:be:56:16:db:51:58:1a:73:f3:00:f6:b0:
                    e7:fd:c6:20:36:05:f8:ea:1e:26:dd:ed:f5:b7:fd:
                    cc:ac:ee:c9:e4:af:59:84:8a:03:b7:95:37:7d:81:
                    cc:15:c1:8f:ac:0f:ae:b1:66:cf:0f:43:c9:72:fe:
                    9f:dd:6a:49:59:11:28:27:7c:b4:cf:97:d0:5e:9f:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:10:AE:55:26:22:E5:11:30:6A:06:3B:3A:B2:BC:20:C4:C7:90:C5
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mBCuVSYi5REwagY7OrK8IMTHkMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:e0:59:f3:c1:fc:66:50:f0:bf:32:d6:5f:6f:09:cc:bf:
         57:b0:c5:26:de:85:25:4e:8b:e2:92:9a:fc:15:0a:13:12:8c:
         03:9e:4b:77:00:b3:77:45:bf:28:52:64:55:f0:91:60:3b:38:
         e6:6e:1c:c7:ce:44:8b:10:be:97:3a:13:87:5d:7d:3f:b8:27:
         50:ed:a9:31:b3:0a:5f:1c:da:dc:ad:1e:cc:03:b4:24:09:1b:
         74:80:06:75:ea:6a:c3:63:2e:24:c8:ae:9b:8d:24:4d:40:1b:
         03:73:a0:8d:7c:5b:5d:9d:e4:ca:4c:0a:29:b7:c6:52:22:7c:
         03:00:43:19:3c:7b:21:d4:c6:cc:3f:aa:e0:09:98:42:86:60:
         10:35:40:fc:78:34:c3:61:92:83:21:42:ae:af:45:9b:e0:64:
         bb:bc:b0:40:bf:af:93:f7:2b:16:6b:a8:42:06:86:b1:68:76:
         de:8b:31:b3:98:cd:db:56:e6:c0:51:f6:fc:75:80:ce:d2:2f:
         6c:bc:36:f4:b5:e8:08:f7:85:54:30:f5:27:b1:4f:97:c8:bc:
         6c:9f:6c:fd:f8:fb:f1:b1:3e:3d:18:21:0e:57:d4:e4:fa:c1:
         69:db:09:b2:f7:14:1b:db:d4:0f:33:af:51:8b:b4:5d:90:7f:
         34:a7:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:27 2024 by rpki-client on console-ams.rpki-client.org