Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/HpAm6uG3S7dd7kpOPuXM-4DPiaI.roa
File:                     HpAm6uG3S7dd7kpOPuXM-4DPiaI.roa (raw, json)
Hash identifier:          DxL4n9GmzQumd0Tr8sGx9cu9EjxoykB6R5/I7w5hpJE=
Subject key identifier:   1E:90:26:EA:E1:B7:4B:B7:5D:EE:4A:4E:3E:E5:CC:FB:80:CF:89:A2
Certificate issuer:       /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial:       0640C2E7
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/HpAm6uG3S7dd7kpOPuXM-4DPiaI.roa
Signing time:             Thu 19 May 2022 07:38:18 +0000
ROA not before:           Thu 19 May 2022 07:38:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61334
IP address blocks:        93.113.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104907495 (0x640c2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
        Validity
            Not Before: May 19 07:38:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e9026eae1b74bb75dee4a4e3ee5ccfb80cf89a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:67:a4:2a:14:5b:67:00:0e:5b:0b:95:25:
                    46:c1:f4:db:ba:61:b9:fc:38:7d:cb:78:1a:37:51:
                    d8:0a:88:04:58:9d:d1:1d:11:b3:2e:a4:64:3e:39:
                    7b:15:69:e2:56:80:01:57:27:38:25:f4:67:c8:68:
                    50:48:1f:c7:44:19:62:31:fe:93:cc:a0:14:97:20:
                    44:58:2c:72:2c:0b:42:c4:e5:c7:98:3d:bd:a0:14:
                    12:b0:93:e9:39:0f:fe:af:37:3d:4b:d8:c4:4c:87:
                    19:72:08:b6:79:a1:17:9e:37:5b:1c:5c:01:20:69:
                    a6:30:ed:a7:0b:83:95:c0:5f:1d:6f:37:c2:a7:1c:
                    77:ed:72:d1:5f:1e:02:e2:65:33:0b:cc:1b:47:66:
                    1b:d4:f6:45:ca:f1:48:b6:51:23:57:7b:18:e6:d0:
                    a6:e6:b2:34:5a:c7:d3:f0:ac:4b:48:01:52:23:94:
                    9a:30:81:e7:30:7f:4f:c1:9c:bf:93:e4:85:51:29:
                    74:5f:e7:7d:93:61:6f:fa:8a:88:63:1c:18:1c:bf:
                    6a:72:1f:4d:0f:8b:b9:b0:ab:46:de:55:56:28:02:
                    52:bf:92:69:49:35:0a:51:ab:44:07:16:e3:ef:30:
                    c3:5a:71:a0:0c:99:c9:0a:3b:e8:94:7b:3f:81:9b:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:90:26:EA:E1:B7:4B:B7:5D:EE:4A:4E:3E:E5:CC:FB:80:CF:89:A2
            X509v3 Authority Key Identifier:
                keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/HpAm6uG3S7dd7kpOPuXM-4DPiaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:cf:37:be:6d:ca:e6:75:4f:8b:b4:06:56:fe:6c:97:c4:4e:
         65:80:b3:11:cc:b4:2c:29:be:53:a3:60:09:ed:c8:c4:25:7f:
         b5:77:0e:16:1b:d9:cf:22:da:a8:59:aa:75:93:4f:23:bc:76:
         c1:9e:13:31:b6:be:0c:6d:e2:1c:ca:7f:2a:15:e8:b6:9a:34:
         e5:ad:d8:44:10:1f:12:ec:4d:d4:94:19:6c:d8:27:1e:54:2a:
         3b:a0:7f:5d:9d:51:0c:d5:b3:e9:1c:5d:f7:74:da:97:ff:78:
         b1:56:77:b7:73:6a:1b:b6:cb:21:73:c6:c2:bd:de:e1:c9:3f:
         10:f5:13:2a:96:2b:1e:75:0e:de:46:90:a8:46:10:ed:a5:48:
         4f:74:0e:3e:1c:61:d7:99:24:f3:6f:65:ae:74:97:88:64:99:
         cd:09:45:dd:a6:5f:76:ae:b1:67:0a:cf:01:20:d1:10:be:ee:
         9d:6b:97:24:2d:9b:8b:50:d3:4c:b7:4e:12:1a:52:db:e4:83:
         77:24:1d:53:c4:79:69:06:f8:49:00:7a:f7:30:93:3c:0c:d1:
         1a:27:72:1a:d0:31:57:a1:86:56:37:d3:a4:2f:d0:e5:4f:fe:
         05:f3:c3:fb:f3:88:00:bc:32:12:36:ae:77:fa:a7:32:c7:ab:
         5f:16:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org