Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/8T5vZ5pmIE_I_lkhv1_ZNw5ovD8.roa
File:                     8T5vZ5pmIE_I_lkhv1_ZNw5ovD8.roa (raw, json)
Hash identifier:          ZMWSYk8j+HiGcVp8xZeDfAigOGqX0cwRGaPMadDYyx8=
Subject key identifier:   F1:3E:6F:67:9A:66:20:4F:C8:FE:59:21:BF:5F:D9:37:0E:68:BC:3F
Certificate issuer:       /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial:       052F57F2
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/8T5vZ5pmIE_I_lkhv1_ZNw5ovD8.roa
Signing time:             Mon 09 May 2022 12:58:44 +0000
ROA not before:           Mon 09 May 2022 12:58:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46261
IP address blocks:        194.93.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86988786 (0x52f57f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
        Validity
            Not Before: May  9 12:58:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f13e6f679a66204fc8fe5921bf5fd9370e68bc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:76:e5:24:72:77:0b:e0:36:3f:e1:21:a0:
                    82:cf:8a:37:32:ed:1f:d0:2b:5a:96:d1:8e:3e:a6:
                    51:de:48:20:d8:40:1a:7c:72:8b:62:52:dc:a4:52:
                    a9:96:24:34:cb:d1:81:11:59:bf:fa:a9:3b:ab:02:
                    57:98:4c:04:7d:3d:1c:81:69:75:90:95:c0:0d:4d:
                    99:5b:7e:ca:76:ce:36:1c:17:da:98:28:8b:87:0d:
                    8c:b6:bd:c0:91:aa:7e:ef:c5:a0:4c:a3:84:6e:3f:
                    61:ab:95:72:5d:62:84:54:89:3a:ef:53:db:48:2e:
                    31:e1:d1:d6:21:3d:19:b5:53:67:bb:c4:93:0d:19:
                    e6:e5:20:17:95:15:ce:42:a7:ef:40:70:71:f6:59:
                    00:fa:42:10:bb:16:d8:f4:a4:4b:34:b2:db:a9:74:
                    12:57:db:a0:ca:f4:65:1e:e6:08:6b:1c:b1:94:9b:
                    6e:d8:4f:23:82:97:a8:ea:25:36:01:36:f9:aa:a4:
                    a0:94:e7:5e:85:ef:6d:ae:81:13:c9:d4:13:54:82:
                    b3:52:e0:9b:49:e9:e8:d1:2c:67:9f:c4:2d:f8:00:
                    69:06:c1:9e:cc:4f:61:7b:41:2a:2f:e5:04:9f:a8:
                    95:0e:4c:1d:5c:c9:89:ff:73:d7:2f:84:65:87:94:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3E:6F:67:9A:66:20:4F:C8:FE:59:21:BF:5F:D9:37:0E:68:BC:3F
            X509v3 Authority Key Identifier:
                keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/8T5vZ5pmIE_I_lkhv1_ZNw5ovD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:eb:31:32:7f:fa:9f:2a:8a:94:a9:0d:93:b9:62:73:df:
         8c:4d:c7:8b:b6:44:14:fd:c0:49:4a:0e:e4:ae:73:0f:7e:b4:
         19:99:e6:68:48:ce:e3:df:00:1d:8a:93:42:15:de:0c:e5:bd:
         5c:d9:ea:e4:99:0b:06:c0:3b:37:37:3e:cd:f1:cd:88:4d:72:
         c0:05:ee:10:54:5c:b6:ac:f4:ed:d6:28:0c:b4:ac:10:7d:77:
         5c:bd:a9:b7:dd:4a:5f:3e:01:f8:91:6a:cd:2a:d8:39:4d:1e:
         55:14:95:d4:e7:e1:dd:6d:bf:3b:b8:7e:39:55:1b:7e:45:b1:
         30:80:d5:4b:5c:c1:f6:26:2b:82:85:51:13:d3:fd:db:21:44:
         32:fc:f4:85:cc:04:b4:24:70:a0:b2:94:99:e9:ee:c7:ac:49:
         d2:00:76:ae:c0:8a:28:a5:97:5c:4e:0d:73:99:bc:61:51:1d:
         77:7d:cb:eb:9d:17:ca:25:38:f3:fe:34:12:3d:40:f7:67:f6:
         05:0a:f1:19:72:71:39:ad:fa:48:3f:06:c9:67:21:1b:72:69:
         86:44:fd:bb:97:54:c0:30:9b:0b:97:73:f5:a0:cd:c4:3e:63:
         23:43:e6:4d:a8:ed:89:3c:cb:4d:0b:0f:b1:2e:98:50:12:f1:
         5e:b0:8e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org