Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VwVVfIg60Z73wbKR678nG81I80g.roa
File:                     VwVVfIg60Z73wbKR678nG81I80g.roa (raw, json)
Hash identifier:          dApEc/g2AmFlc9KzrhxBpzo0uI+mAQ92F1EuaB4tLsc=
Subject key identifier:   57:05:55:7C:88:3A:D1:9E:F7:C1:B2:91:EB:BF:27:1B:CD:48:F3:48
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       08DE746B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VwVVfIg60Z73wbKR678nG81I80g.roa
Signing time:             Sat 01 Jan 2022 07:01:27 +0000
ROA not before:           Sat 01 Jan 2022 07:01:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211129
IP address blocks:        193.107.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148796523 (0x8de746b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  1 07:01:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5705557c883ad19ef7c1b291ebbf271bcd48f348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:a6:79:d8:b7:37:bb:5f:05:0e:6b:e1:f4:
                    a9:6d:0f:41:4f:56:c6:1f:b0:99:71:b5:97:ac:c9:
                    da:58:86:17:b3:4b:0e:cf:6b:23:d8:98:16:1b:97:
                    a6:a8:6a:a3:76:ce:52:d7:3a:ef:1b:c0:19:a7:e6:
                    f6:f6:94:f0:11:e5:fb:9a:1e:72:1f:df:99:9f:ee:
                    72:65:82:8f:04:c7:38:ad:8f:a6:c3:f3:29:6b:f6:
                    f6:44:a6:d4:1b:ab:b8:f6:d1:1b:a6:60:10:ab:f1:
                    7e:e0:f2:fd:4c:bd:ce:fb:61:8b:cb:4e:18:5f:a2:
                    7c:f7:21:e4:b8:1b:c0:1b:7b:41:3c:da:60:7d:2a:
                    68:a5:a6:c8:39:88:31:68:08:0c:7f:10:f6:77:30:
                    c2:3b:dd:4a:f6:f2:4d:21:3f:eb:6d:69:12:91:39:
                    91:89:84:c1:6c:e9:09:2d:00:a1:f4:ad:ae:35:f8:
                    89:d7:71:a6:7d:72:63:f6:f2:4c:5c:e8:cc:71:0f:
                    a7:e7:e4:ea:3f:f8:74:96:bb:5a:7a:60:c3:2c:ab:
                    1e:db:43:b2:3f:eb:67:64:3e:db:37:55:b7:e7:5a:
                    7e:cf:2c:eb:4f:c8:21:5b:a5:23:22:57:65:73:7d:
                    f2:1d:74:91:34:35:b6:90:d9:49:94:49:7b:54:ce:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:55:7C:88:3A:D1:9E:F7:C1:B2:91:EB:BF:27:1B:CD:48:F3:48
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VwVVfIg60Z73wbKR678nG81I80g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:15:33:f9:59:47:39:62:61:f6:8c:18:df:ca:cc:78:ca:
         9a:68:11:2f:bc:78:37:9b:f9:5a:b0:a0:d5:d6:91:b1:61:25:
         f9:b2:91:b6:13:3b:5a:2f:61:2e:a4:4b:61:fa:15:ce:21:6e:
         cd:7c:86:19:6a:6e:96:ca:db:76:c2:04:38:e6:90:15:46:6b:
         7e:70:40:76:8e:ee:42:a7:ec:62:ac:28:3c:0b:17:81:56:51:
         bc:5d:d3:36:51:8d:65:d0:79:e0:11:55:05:fb:42:31:b9:35:
         a7:2e:9f:20:e5:de:78:ff:67:64:5f:68:ba:bb:31:0b:0f:ee:
         c5:83:7e:3e:6b:57:68:eb:60:3c:39:be:06:85:85:ff:19:80:
         6e:53:9f:2b:d4:13:8a:d4:53:44:96:0a:35:79:b2:7d:9b:e0:
         06:22:f6:08:96:cc:53:64:81:b1:44:77:7d:a1:37:07:18:c0:
         1a:bf:91:e0:0a:85:c2:ed:77:42:ba:91:45:72:0b:4e:db:81:
         7b:8b:ad:ce:93:e1:68:c9:a3:34:5e:a9:fc:65:9a:cd:1a:44:
         8b:12:3c:35:f3:9e:85:93:57:82:61:6d:90:d3:4f:8e:08:03:
         9a:58:af:6e:70:47:41:cc:67:51:e8:8c:8b:d9:2a:b8:8b:6d:
         a8:ad:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org