Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/wbKT7oZow_Nnsf3fYjZqiejrdOo.roa
File:                     wbKT7oZow_Nnsf3fYjZqiejrdOo.roa (raw, json)
Hash identifier:          oySGCuK91gsmVVZij8Ph0FL6ebHiJf8V2YGzLDj/dwc=
Subject key identifier:   C1:B2:93:EE:86:68:C3:F3:67:B1:FD:DF:62:36:6A:89:E8:EB:74:EA
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       0EECDD9B
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/wbKT7oZow_Nnsf3fYjZqiejrdOo.roa
Signing time:             Sat 01 Jan 2022 14:06:31 +0000
ROA not before:           Sat 01 Jan 2022 14:06:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3219
IP address blocks:        193.6.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250404251 (0xeecdd9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jan  1 14:06:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1b293ee8668c3f367b1fddf62366a89e8eb74ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:79:7c:09:f6:34:a1:5b:c1:10:dd:34:bc:
                    3a:1b:51:7c:36:a3:f4:9e:f3:ef:4c:ff:ae:a6:e8:
                    4b:41:f3:38:92:d0:b7:45:e2:f2:1b:5a:7b:d3:2d:
                    61:94:3a:11:68:71:aa:f5:3e:b3:ae:34:20:de:04:
                    f8:4c:58:1f:4e:f9:6e:ce:16:4a:89:3a:4c:a2:fe:
                    f5:ab:5c:a0:32:21:4d:85:b6:2b:34:b0:57:35:09:
                    67:76:78:26:43:f9:c5:3f:46:07:b8:02:e0:cb:7d:
                    d8:5e:87:34:26:ad:99:13:ea:94:e8:80:75:08:77:
                    22:2b:a3:b3:34:57:94:63:d5:ed:35:38:2a:10:dd:
                    64:c9:15:6b:ad:54:59:c0:24:5f:47:76:4c:95:b4:
                    33:86:04:3e:0a:c4:15:ae:5f:20:ad:73:42:8e:03:
                    cb:f1:48:c2:3f:d8:57:bb:de:df:b9:2b:29:65:89:
                    e2:d0:92:1f:46:44:3a:c8:30:bb:2c:d5:2b:86:81:
                    ad:25:37:38:69:32:7f:1d:d6:1b:56:12:1d:1e:12:
                    69:bc:da:30:7e:e2:b2:dd:f2:89:5c:70:da:05:e3:
                    41:c4:50:ea:4d:22:15:f4:9c:f2:5c:ae:b0:e8:d2:
                    b6:8e:29:4d:66:00:ab:8a:c6:bf:25:28:7d:fa:61:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B2:93:EE:86:68:C3:F3:67:B1:FD:DF:62:36:6A:89:E8:EB:74:EA
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/wbKT7oZow_Nnsf3fYjZqiejrdOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.6.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:96:cb:84:13:8c:d9:c4:97:c1:73:74:6b:5b:6b:42:5f:
         e3:27:66:e9:88:f4:80:4e:83:38:c0:19:c5:0e:18:05:0a:98:
         5a:8b:41:82:85:2d:8c:c9:df:51:6a:26:07:0d:fe:39:a5:39:
         e1:10:43:e2:e5:16:83:12:c6:72:66:41:e1:6d:ef:d6:91:ac:
         c0:1f:4e:97:5b:33:fb:08:39:c1:c8:23:05:6d:76:c7:55:4c:
         3a:ca:70:9c:08:32:dd:ff:07:b2:46:52:14:e4:1a:bc:84:c5:
         36:8c:2d:2b:4b:54:da:1d:04:da:65:50:1b:d3:fc:44:ac:11:
         df:ee:e1:41:01:36:be:a6:2d:d5:cf:99:11:6a:b1:cc:a5:2e:
         76:10:44:b3:3c:2d:d9:c0:67:b8:0a:b8:42:49:9f:53:a5:62:
         0a:b7:9d:47:e7:36:c6:52:d9:98:2b:f4:d3:5b:44:5e:47:d4:
         38:94:09:24:4c:36:6f:36:34:b9:9b:3a:22:ce:3f:24:3b:15:
         e4:1a:68:bc:a3:4b:7b:06:cb:d8:24:c9:29:82:3d:89:8b:76:
         33:64:b3:1b:1b:99:27:f4:d9:d3:d3:89:ca:5c:ed:f9:2a:6b:
         5d:ee:26:20:d2:08:e7:b8:ee:bf:f5:1b:64:e4:98:99:6d:43:
         62:fc:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org