Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/dzZH5d5Eqhs5nmBfC1jctCX8f7c.roa
File:                     dzZH5d5Eqhs5nmBfC1jctCX8f7c.roa (raw, json)
Hash identifier:          skHVuutWpgg0trCIuAhgfyO2TpCClsZVpqVe7tzjEhE=
Subject key identifier:   77:36:47:E5:DE:44:AA:1B:39:9E:60:5F:0B:58:DC:B4:25:FC:7F:B7
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       1755E2B1
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/dzZH5d5Eqhs5nmBfC1jctCX8f7c.roa
Signing time:             Sat 01 Jan 2022 12:56:10 +0000
ROA not before:           Sat 01 Jan 2022 12:56:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47886
IP address blocks:        213.193.232.0/24 maxlen: 24
                          213.193.212.0/24 maxlen: 24
                          213.193.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391504561 (0x1755e2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Jan  1 12:56:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=773647e5de44aa1b399e605f0b58dcb425fc7fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:f5:27:ae:b3:3f:1a:ac:18:59:0b:c5:5a:
                    0c:a3:c9:49:29:fd:78:ba:6c:7d:70:ab:ef:ec:c3:
                    32:64:fd:5d:ff:c8:44:33:ad:8a:72:af:dd:2f:25:
                    b4:16:f0:9c:ec:1d:22:97:76:73:4c:05:07:d4:55:
                    8b:f7:1b:2f:a5:e4:a5:d7:53:7d:a4:da:6d:0c:0b:
                    82:49:bd:a0:a7:80:8a:6b:e0:81:e6:d8:e1:60:6f:
                    ee:6e:27:1d:53:28:ff:d8:62:59:1d:ec:c6:62:d7:
                    80:c6:09:e1:16:ef:36:6c:85:f3:7a:81:df:13:f6:
                    2d:e7:91:04:e7:a7:e6:cb:6e:f6:ac:5f:39:17:77:
                    61:b5:02:07:55:aa:22:fc:6f:b6:d8:7f:c0:63:a9:
                    19:b2:38:09:0c:62:0b:61:95:56:a4:7d:ac:2d:3a:
                    91:4a:d4:fe:40:39:7c:34:8d:d9:a3:b3:14:6a:53:
                    e0:90:df:2a:d6:45:e8:eb:de:77:60:c6:63:62:46:
                    fe:d5:b9:4b:af:53:92:9a:b5:5a:48:61:27:dc:97:
                    5a:0f:d0:06:c0:40:da:96:37:73:72:ab:8f:7e:fd:
                    a3:9a:30:4d:aa:64:50:e0:8c:43:29:13:04:ee:dc:
                    6d:c5:e2:f2:0a:2f:29:4d:99:ef:67:10:64:21:a2:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:36:47:E5:DE:44:AA:1B:39:9E:60:5F:0B:58:DC:B4:25:FC:7F:B7
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/dzZH5d5Eqhs5nmBfC1jctCX8f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.193.209.0/24
                  213.193.212.0/24
                  213.193.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:9f:1e:25:68:5b:d4:51:21:ad:20:4e:9e:98:2c:97:33:3a:
         25:69:4d:b8:6f:db:e7:1d:14:18:06:95:67:44:14:82:77:be:
         e7:b5:9f:f8:d4:0f:7c:ed:07:11:63:f5:bc:b3:f5:65:37:2c:
         b8:00:97:88:a9:90:59:7c:11:8f:0c:14:2e:f5:d2:51:07:91:
         18:cd:e9:22:96:03:ab:32:fa:87:1e:4e:b8:10:dd:ad:41:f0:
         f1:46:20:4b:25:73:62:dc:be:4c:06:de:b6:15:d5:e2:f5:32:
         8a:42:7e:75:38:d9:cf:16:b2:bd:7a:71:b3:a4:2b:26:b6:2a:
         92:89:fa:44:e8:6c:f4:16:20:9d:fe:0c:43:55:58:7a:29:97:
         18:62:44:78:4c:ef:1b:ce:a4:85:6e:9c:de:64:20:9e:d0:bb:
         da:d4:b1:11:ba:bb:f1:76:59:93:b7:a6:6a:75:9a:cb:d2:de:
         22:e0:4c:c5:2f:a3:44:3a:7c:be:e5:5a:77:cd:0b:d6:cd:87:
         8f:16:44:a5:76:f0:ef:55:3e:80:e9:44:71:a3:f2:fb:83:99:
         30:7d:28:3c:2a:d7:82:56:a1:fd:48:50:cf:09:19:b4:bf:76:
         5a:70:6d:32:b4:c6:b3:8a:0a:be:d4:fd:c5:43:d7:c1:cd:b4:
         1b:ff:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:08 2024 by rpki-client on console-fra.rpki-client.org