Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/GylEypUr-1Ep5n_bcArO67mKToQ.roa
File:                     GylEypUr-1Ep5n_bcArO67mKToQ.roa (raw, json)
Hash identifier:          J6uJznQj6YsR4ndiWwN7YL7cim8IRy3MmSE0zPp/1uU=
Subject key identifier:   1B:29:44:CA:95:2B:FB:51:29:E6:7F:DB:70:0A:CE:EB:B9:8A:4E:84
Certificate issuer:       /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial:       018C86
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/GylEypUr-1Ep5n_bcArO67mKToQ.roa
Signing time:             Fri 21 Jan 2022 10:28:10 +0000
ROA not before:           Fri 21 Jan 2022 10:28:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196882
IP address blocks:        193.104.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101510 (0x18c86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
        Validity
            Not Before: Jan 21 10:28:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b2944ca952bfb5129e67fdb700aceebb98a4e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:bb:59:26:43:32:3c:5f:29:f2:b2:cd:c4:
                    4c:ad:34:a0:64:71:c3:75:a9:e9:f2:0c:59:17:94:
                    5a:37:6d:c5:fd:6a:a0:64:ea:5a:1a:bb:75:5c:14:
                    38:f6:25:87:83:82:6b:e9:04:46:a0:12:9f:a8:c9:
                    d9:f8:84:fe:25:3d:c6:15:c1:b2:82:85:d9:9b:14:
                    bb:18:cc:99:58:87:8b:b1:22:ca:06:bf:80:43:4e:
                    f3:2c:dd:d8:a1:38:32:8b:01:88:35:fb:71:30:28:
                    08:9b:ee:e3:a2:d2:39:fc:01:33:45:61:2c:ac:93:
                    d0:9d:c8:08:42:e5:af:13:93:23:ea:01:5f:96:cb:
                    c8:a8:56:6b:12:7d:00:f5:ae:01:d6:13:53:04:63:
                    a4:83:a5:48:58:0b:98:69:df:fb:3b:d7:0a:e5:12:
                    86:f5:35:74:ac:a7:3a:65:8f:fb:75:85:b0:54:f3:
                    4e:07:7b:59:bc:3f:80:53:82:e2:e4:de:4c:42:0a:
                    59:28:53:45:73:15:b9:25:06:97:0e:59:49:84:23:
                    40:d7:ba:3b:4e:d6:f1:77:8c:3d:18:0d:9f:ee:a3:
                    5b:d9:da:a1:c1:df:5f:7d:e1:70:64:d8:d3:f8:4e:
                    e0:eb:60:5c:f1:ec:a4:6f:e7:3b:f4:bb:b0:06:3b:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:29:44:CA:95:2B:FB:51:29:E6:7F:DB:70:0A:CE:EB:B9:8A:4E:84
            X509v3 Authority Key Identifier:
                keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/GylEypUr-1Ep5n_bcArO67mKToQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:88:04:ea:a0:54:0d:b8:7b:e5:37:09:23:e9:bd:c6:6c:2f:
         3d:03:7e:fd:40:e8:c9:62:63:9c:1b:55:9f:cb:32:fa:44:d0:
         5f:17:58:f0:0b:d1:94:b6:12:a1:9d:00:c5:6c:f6:65:cd:ad:
         16:cd:e5:74:3e:48:fe:ce:24:e4:bf:8e:9b:09:ae:c3:01:12:
         02:a1:85:7a:37:ac:4f:15:c1:a5:fa:9f:0f:25:6e:81:91:41:
         46:30:e6:b2:9c:2e:d9:3c:4c:2e:50:6d:dd:c5:84:19:91:93:
         b8:e6:46:c0:7a:ac:36:9f:f8:d5:c6:19:0e:ca:70:e3:4d:08:
         63:4e:bd:ac:d7:0c:56:10:d5:da:90:a3:62:42:69:f7:5f:ca:
         0e:b6:eb:52:0b:86:d5:5c:eb:64:ad:ab:d4:9d:8f:ce:44:b6:
         17:5a:cb:95:bb:c6:e5:d4:06:22:d6:3c:d1:4f:90:9c:a3:53:
         52:1d:08:6e:24:2d:7b:26:6f:f1:cd:ac:8e:52:9a:47:26:71:
         15:2c:a7:f3:4c:39:cd:3b:83:50:f6:0a:15:86:ff:6a:d1:16:
         2d:d1:a0:73:43:67:8d:f7:22:25:10:c8:d6:2d:1a:6d:0f:8c:
         8e:2b:ce:e4:c3:ad:fe:7d:50:c6:b3:ca:8d:3e:76:cf:a9:ad:
         f6:5f:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:05 2024 by rpki-client on console-fra.rpki-client.org