Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/tix9Nf_ib86JW1_eHwNKf91fuDk.roa
File:                     tix9Nf_ib86JW1_eHwNKf91fuDk.roa (raw, json)
Hash identifier:          WrBMr7vGYoeAqwhffUBvGAAhZGezwH9a1c4GFZFrRVM=
Subject key identifier:   B6:2C:7D:35:FF:E2:6F:CE:89:5B:5F:DE:1F:03:4A:7F:DD:5F:B8:39
Certificate issuer:       /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial:       1880638E
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/tix9Nf_ib86JW1_eHwNKf91fuDk.roa
Signing time:             Sat 01 Jan 2022 04:52:53 +0000
ROA not before:           Sat 01 Jan 2022 04:52:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208746
IP address blocks:        193.56.233.0/24 maxlen: 24
                          193.56.235.0/24 maxlen: 24
                          193.56.236.0/24 maxlen: 24
                          193.56.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411067278 (0x1880638e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
        Validity
            Not Before: Jan  1 04:52:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b62c7d35ffe26fce895b5fde1f034a7fdd5fb839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:7f:b9:3d:4a:71:6e:dc:72:8d:d8:c6:f9:
                    0e:a9:59:1a:09:0b:cb:84:b7:d8:02:79:ec:74:64:
                    b2:39:1f:a8:1b:38:c3:84:a1:62:24:49:59:eb:c2:
                    cd:c1:92:06:7e:99:fd:31:33:04:6e:e1:b7:71:31:
                    53:15:20:7d:14:05:e2:e9:46:d9:08:c8:98:80:95:
                    79:02:b0:e9:00:78:f7:10:87:2f:e8:fe:84:a2:88:
                    9f:46:9f:ce:5a:4d:a8:f7:be:21:ae:00:7f:9e:7a:
                    6b:c1:c0:14:b7:bb:85:e7:69:c3:a4:54:ed:b0:3c:
                    dd:80:71:fd:c3:39:62:f7:4c:a2:1e:49:ed:73:ab:
                    1a:39:dc:52:ba:42:ae:1e:a2:2e:c1:a1:97:a8:ba:
                    1e:13:88:88:8e:e8:67:87:c2:56:03:07:26:12:f3:
                    f3:a0:50:91:6c:72:78:f0:a9:fb:10:d3:53:a8:04:
                    20:3d:69:01:20:2c:76:67:a6:a0:81:b7:4a:b4:b3:
                    6c:81:db:7a:e4:78:09:85:f4:67:df:df:56:b0:2f:
                    af:d8:64:e9:41:ec:3b:6a:39:3f:00:a4:01:c8:69:
                    fa:ae:93:b9:ba:da:87:63:4f:c9:cf:13:16:12:15:
                    cd:ac:b4:7e:38:86:23:22:09:8d:4b:36:2e:cb:6f:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:7D:35:FF:E2:6F:CE:89:5B:5F:DE:1F:03:4A:7F:DD:5F:B8:39
            X509v3 Authority Key Identifier:
                keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/tix9Nf_ib86JW1_eHwNKf91fuDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.233.0/24
                  193.56.235.0-193.56.237.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:c5:fc:ff:4d:71:67:40:fe:2f:70:d5:95:c2:8a:b1:d0:
         cd:dd:b0:db:4e:51:b2:17:b1:29:3b:f6:e3:98:3c:f1:bc:7f:
         c2:e2:42:6a:69:9a:82:a6:20:0f:d6:f0:d8:cb:d3:b8:2e:a1:
         7e:7f:85:f6:3d:3d:d8:c1:22:f8:4a:b0:d7:f3:91:4f:18:c7:
         e5:2b:b4:31:c5:a9:bd:df:20:00:5d:45:04:6b:b1:cd:d0:02:
         93:2a:b9:21:e4:be:4c:21:f1:6d:ff:16:fb:00:e8:b0:d7:f9:
         9b:a0:51:26:3b:fb:00:d5:f4:e4:90:9c:32:9d:17:12:be:2d:
         42:e5:be:49:6c:74:7a:54:db:7e:a1:23:07:1b:33:fd:e9:33:
         e7:1e:77:f2:60:56:58:3f:09:da:00:24:8a:34:d9:81:35:76:
         ea:82:2c:7e:27:ac:61:55:ca:38:2b:98:ef:61:e7:dd:6a:4f:
         31:6c:69:a8:19:cc:fd:8e:19:32:9e:2d:a4:65:cc:d2:eb:e1:
         d2:aa:9d:ed:72:8e:81:bd:f9:00:59:d5:55:3a:96:d3:53:b8:
         ff:81:9b:15:be:5b:cd:91:e9:9c:31:42:05:f3:99:cc:48:e1:
         7f:bc:20:cd:fd:85:49:e7:54:4a:70:8e:b4:81:b5:55:1a:4e:
         f4:8d:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:51 2024 by rpki-client on console-ams.rpki-client.org