Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/BQmKBu7739ZXKiQFP8_Qw0ZZa5U.roa
File:                     BQmKBu7739ZXKiQFP8_Qw0ZZa5U.roa (raw, json)
Hash identifier:          gnmzec5yXYv6TvA6ISyevsJ6Washj45apJaT0riO+oE=
Subject key identifier:   05:09:8A:06:EE:FB:DF:D6:57:2A:24:05:3F:CF:D0:C3:46:59:6B:95
Certificate issuer:       /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial:       09370ED1
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/BQmKBu7739ZXKiQFP8_Qw0ZZa5U.roa
Signing time:             Sat 01 Jan 2022 09:02:45 +0000
ROA not before:           Sat 01 Jan 2022 09:02:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50557
IP address blocks:        193.105.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154603217 (0x9370ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
        Validity
            Not Before: Jan  1 09:02:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05098a06eefbdfd6572a24053fcfd0c346596b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:d3:23:b2:d4:5d:9a:12:4d:99:08:27:70:
                    80:f8:5c:39:d0:80:80:ae:da:e7:9c:43:ff:e6:71:
                    99:a6:0e:c1:23:7e:ff:c0:cb:0f:40:eb:17:ff:3c:
                    14:51:d7:1e:8c:fc:8d:8b:54:b7:20:66:04:8b:0d:
                    8c:4d:4b:67:11:e9:4b:21:4e:07:5d:06:22:5d:2d:
                    6c:1a:31:d5:cf:1a:f9:73:63:64:59:be:51:84:a9:
                    e8:63:81:9b:06:1a:0c:7b:b0:d6:20:34:46:f0:e8:
                    2a:27:ba:08:9e:9f:a7:3e:f0:22:ae:8a:b2:b4:78:
                    96:45:bc:01:61:1d:63:fa:e5:4e:d6:a6:06:59:29:
                    24:1b:d4:19:89:c9:a5:ce:64:e5:13:70:e0:ed:ef:
                    95:3a:99:52:90:8c:63:32:07:24:45:7b:1b:b0:22:
                    9b:c2:34:a5:c0:03:34:05:f2:4c:ab:fe:10:16:a7:
                    27:92:ed:11:74:1d:e9:c3:87:8d:6e:53:d9:ba:1c:
                    18:30:2f:4c:19:92:c4:66:c7:40:c2:ec:c8:7a:bc:
                    10:88:68:ab:3c:71:2c:51:29:b5:4e:e3:4a:5b:a0:
                    f6:49:6a:a9:47:8b:1b:ff:fd:de:eb:27:58:69:2d:
                    00:0a:5f:9d:74:ed:0e:2c:e7:ad:67:cd:79:38:6b:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:09:8A:06:EE:FB:DF:D6:57:2A:24:05:3F:CF:D0:C3:46:59:6B:95
            X509v3 Authority Key Identifier:
                keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/BQmKBu7739ZXKiQFP8_Qw0ZZa5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:af:78:87:45:c1:0e:3c:c7:93:8f:55:4e:69:57:98:d0:b1:
         7b:58:52:80:83:57:b4:cd:bc:84:e9:7f:ff:6e:c9:94:c0:af:
         7a:0d:a0:61:db:e3:37:47:11:88:b3:e8:5c:63:79:2e:d2:34:
         a9:72:e3:60:29:93:59:f2:fd:88:4d:f1:19:73:06:fd:3f:78:
         2d:36:24:ba:60:e7:4d:44:b2:ec:b2:1e:e7:0e:7a:b4:9d:08:
         5d:70:7b:d4:10:ef:d4:1c:57:9b:1a:77:8d:ec:58:a0:8b:24:
         29:a7:90:90:fd:d8:0b:2c:c5:ea:73:5a:34:f3:75:15:3a:c0:
         c9:5c:5d:f2:4c:eb:ab:76:93:78:f2:14:94:49:ad:e7:4c:32:
         63:6b:1b:01:f1:1e:0e:af:5e:f3:fc:01:60:d7:ce:0f:ff:c9:
         db:f4:2d:6f:54:61:7c:51:62:bb:2e:21:fe:77:30:1f:de:67:
         3c:b0:2e:45:ff:ab:c8:b7:71:d8:c7:b7:e9:2a:fd:9b:fb:91:
         a8:eb:87:68:ab:56:fd:32:b8:b9:20:f5:02:08:cc:56:e8:1d:
         fc:1d:7b:5c:9e:db:cf:de:9f:2d:90:ca:4a:74:a6:72:13:3d:
         b0:77:4d:db:4f:31:04:68:10:84:d5:03:e9:76:c4:c9:33:57:
         77:30:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:18 2024 by rpki-client on console-fra.rpki-client.org