Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/YihocO-uOiWyX-6ezL1dwJ5K5i8.roa
File:                     YihocO-uOiWyX-6ezL1dwJ5K5i8.roa (raw, json)
Hash identifier:          FU2Zb9Vp+93rp87Avh0uNAVqI+Nj+QkRwXV4zupe5Uk=
Subject key identifier:   62:28:68:70:EF:AE:3A:25:B2:5F:EE:9E:CC:BD:5D:C0:9E:4A:E6:2F
Certificate issuer:       /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial:       0E89C10D
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/YihocO-uOiWyX-6ezL1dwJ5K5i8.roa
Signing time:             Sat 01 Jan 2022 04:55:15 +0000
ROA not before:           Sat 01 Jan 2022 04:55:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61341
IP address blocks:        193.27.212.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243908877 (0xe89c10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
        Validity
            Not Before: Jan  1 04:55:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62286870efae3a25b25fee9eccbd5dc09e4ae62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:e5:11:d8:6d:a3:f3:ba:a8:ac:80:ee:26:
                    af:59:1f:48:69:62:6b:b1:2c:8e:41:58:8f:58:e3:
                    91:c8:b6:3f:a1:6f:f4:cb:5d:9e:34:f0:43:6a:a4:
                    e2:19:f9:ae:4b:b2:ef:cd:08:4a:12:9e:14:6b:8b:
                    cb:68:61:7f:ee:f5:77:d1:df:42:42:a6:77:d3:cf:
                    55:44:11:ef:fe:dc:cc:eb:94:99:6f:f9:f9:92:ce:
                    fd:fb:5a:8d:0b:2b:ca:de:2a:43:ff:9c:09:7e:09:
                    e2:50:20:c0:b4:00:20:3c:60:d9:ba:ef:10:d0:06:
                    de:6d:26:d5:cc:94:70:b4:b4:cf:0d:23:94:c1:73:
                    2b:99:97:08:6e:5e:4f:8d:8d:e2:bd:7d:45:95:f4:
                    07:68:ec:46:0d:b4:20:5e:32:8d:bc:9e:f4:e0:de:
                    90:7e:a3:d9:65:52:a3:6e:b5:2c:3b:c4:24:ce:51:
                    7c:dd:c5:d8:a5:23:c4:b9:e0:ac:54:7b:9d:b4:92:
                    72:d4:f9:34:0e:ac:cc:ea:b9:17:60:b3:82:81:27:
                    d4:bc:8f:0f:71:98:36:18:84:94:2c:95:b5:68:29:
                    99:38:04:9d:01:77:99:ba:d9:21:fd:ba:c9:5b:5f:
                    5b:6b:a5:be:37:77:84:47:8e:37:7f:44:8b:d9:dd:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:68:70:EF:AE:3A:25:B2:5F:EE:9E:CC:BD:5D:C0:9E:4A:E6:2F
            X509v3 Authority Key Identifier:
                keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/YihocO-uOiWyX-6ezL1dwJ5K5i8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.27.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ea:ef:63:55:24:c8:0f:fd:eb:3a:53:a9:f3:5d:17:cd:a6:
         da:ac:6d:f9:c2:09:2b:62:77:36:8d:66:20:b1:d9:3e:61:ea:
         37:f1:22:c8:99:46:5f:50:e1:b7:6b:13:fd:c2:dc:39:4b:26:
         5c:78:6e:ab:e6:8d:c7:ac:e3:bc:b3:bf:c7:74:c6:de:38:e3:
         99:e9:cc:db:a4:f3:5e:84:c8:d2:4e:06:b3:8e:6a:79:5a:4f:
         6f:ac:f9:3d:d6:68:42:ae:86:da:de:61:10:76:d9:94:96:0e:
         de:42:c6:a5:58:fe:d9:98:87:12:8c:81:e4:29:c9:f1:1a:64:
         44:8e:59:69:73:d8:d7:f1:c6:a5:24:39:4f:b6:4a:c9:42:55:
         97:f2:95:69:89:2e:b1:7b:40:cf:db:f8:5f:af:b5:fd:ea:01:
         e8:32:de:b7:d5:01:5b:ae:46:d9:97:0f:3f:61:c6:ba:31:a6:
         68:d6:ed:81:d2:36:9e:d6:29:67:a8:20:41:ce:70:b0:d7:cd:
         04:80:9c:2d:3f:f9:a8:82:7c:b8:e7:14:59:fc:30:cc:b2:c9:
         4b:f7:93:eb:32:9c:5c:cb:be:12:4d:bf:90:74:3b:93:e6:fa:
         38:0f:eb:7c:1d:51:89:ef:82:a2:53:b0:a4:e3:80:1a:fc:eb:
         17:81:ce:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:28 2024 by rpki-client on console-fra.rpki-client.org