Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/V_HtUC6x9JNuYScFY00Ibpif0ik.roa
File:                     V_HtUC6x9JNuYScFY00Ibpif0ik.roa (raw, json)
Hash identifier:          awo0ECTVjU2Tq17V4ZmmCetHA+ZPZrwLYXKt1etdHmQ=
Subject key identifier:   57:F1:ED:50:2E:B1:F4:93:6E:61:27:05:63:4D:08:6E:98:9F:D2:29
Certificate issuer:       /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial:       372C2811
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/V_HtUC6x9JNuYScFY00Ibpif0ik.roa
Signing time:             Sat 01 Jan 2022 13:56:16 +0000
ROA not before:           Sat 01 Jan 2022 13:56:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44637
IP address blocks:        93.93.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925640721 (0x372c2811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
        Validity
            Not Before: Jan  1 13:56:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57f1ed502eb1f4936e612705634d086e989fd229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:33:c4:c5:7e:b3:9a:df:08:93:67:98:c3:
                    c5:ca:56:53:33:4a:66:79:f1:e7:a6:ee:28:d8:52:
                    22:1d:a9:d9:cf:ab:a6:50:3a:7e:a3:91:53:6a:48:
                    b8:73:ce:d7:42:56:29:81:c8:29:86:93:77:13:e0:
                    59:2d:85:80:6b:18:2f:fd:eb:e3:02:19:02:26:16:
                    6d:eb:bd:46:aa:9c:0f:84:5f:60:df:fc:d6:61:83:
                    49:96:d3:13:2c:c5:3f:fd:88:45:3b:23:22:16:f9:
                    cc:57:88:ed:0f:44:35:46:d6:5b:01:c2:d7:bc:7d:
                    af:60:f7:5a:cc:66:33:32:42:a4:b6:c1:ef:fe:b8:
                    2d:d6:f4:80:ed:98:9d:78:4c:06:be:bb:07:cc:1d:
                    53:6a:64:f9:3b:31:84:9a:51:0f:ed:72:41:14:9a:
                    ab:c8:d9:38:dd:ff:6f:2e:5e:45:29:b9:3c:32:16:
                    aa:87:9e:08:d9:69:e6:8d:96:51:0a:a3:03:1d:7c:
                    ca:cc:4d:ba:48:e8:f9:a6:84:6d:fa:e6:f0:8c:88:
                    1f:a4:df:09:fb:cd:ad:65:f9:ee:1a:1a:4c:d1:2d:
                    ba:9d:55:01:7d:b1:6c:f6:c4:81:4d:82:6b:14:34:
                    fa:18:64:1e:47:3b:95:24:cd:dc:7d:44:59:b7:02:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F1:ED:50:2E:B1:F4:93:6E:61:27:05:63:4D:08:6E:98:9F:D2:29
            X509v3 Authority Key Identifier:
                keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/V_HtUC6x9JNuYScFY00Ibpif0ik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:e7:54:be:0a:bf:81:df:51:96:34:8c:de:40:de:c6:7e:
         80:76:8f:a4:6e:3c:41:f0:43:6f:3a:4c:c9:10:c3:31:a5:c2:
         cd:01:55:f4:a8:a2:dc:39:d5:55:3b:fe:75:b5:66:d1:8d:ba:
         43:17:66:6a:a3:ac:ee:47:c8:5d:a2:a9:d2:89:8f:e0:93:43:
         10:ec:6c:b6:91:e1:82:db:98:1d:f6:4f:17:3f:53:7b:f5:60:
         56:de:23:e1:f5:63:28:af:11:eb:24:96:3d:3b:d9:e0:6a:0e:
         7f:97:99:5a:96:dd:a0:2b:b0:fe:c0:80:e6:b2:02:b1:d8:56:
         a9:49:0c:cd:28:26:ab:32:3b:5b:c7:ab:23:1d:8f:00:ce:02:
         09:29:08:9b:eb:d1:e2:5b:60:72:0c:98:24:b8:6b:a4:5f:6c:
         a8:5e:0c:fd:81:23:93:c4:fc:83:38:93:8f:0a:96:b0:a0:3f:
         5c:e5:71:06:f0:6d:96:38:58:79:83:17:55:5a:3d:06:da:68:
         cb:7b:ea:0f:c7:58:04:9f:d4:38:4f:14:38:57:bd:86:50:7c:
         98:d5:20:c6:d2:f3:1c:4f:a3:9b:3e:b2:52:24:a8:04:d5:db:
         47:41:4b:7a:02:b2:95:dd:59:bf:71:22:7f:96:f8:bf:1e:b9:
         92:c4:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org