Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-VWeeSjxjn6wRQCmFaDlM-v63IY.roa
File:                     1-VWeeSjxjn6wRQCmFaDlM-v63IY.roa (raw, json)
Hash identifier:          EppPteBMTGa+k7E5SANWfYMKfV11VP+75gSPT8XQ/UE=
Subject key identifier:   F9:55:9E:79:28:F1:8E:7E:B0:45:00:A6:15:A0:E5:33:EB:FA:DC:86
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27B4C735
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-VWeeSjxjn6wRQCmFaDlM-v63IY.roa
Signing time:             Sat 01 Jan 2022 16:08:40 +0000
ROA not before:           Sat 01 Jan 2022 16:08:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50182
IP address blocks:        93.170.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666158901 (0x27b4c735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9559e7928f18e7eb04500a615a0e533ebfadc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:6f:ab:6e:c4:ff:9f:8f:4f:de:b3:ff:09:
                    f6:50:39:ae:2e:74:0a:26:54:5f:75:a2:5f:5f:96:
                    ad:7a:55:0e:c8:5b:e2:a5:8c:c4:b3:a6:bb:ef:a7:
                    c3:f4:72:ae:5f:6d:aa:f6:af:5b:84:b8:ec:b6:f1:
                    62:bc:d6:4f:a6:d8:25:43:b1:e5:fe:ab:3d:b0:ad:
                    ad:f2:e8:c5:8c:8f:65:b6:21:80:bf:b4:28:76:a1:
                    07:03:58:51:6f:53:3c:f0:17:d8:66:e7:18:98:a8:
                    f7:11:a9:ef:1c:01:61:6f:ab:95:5b:e2:5c:fb:bb:
                    84:74:13:bb:fe:9c:5f:fe:64:3f:b4:8d:56:67:36:
                    9d:99:4a:3c:48:6c:ec:ee:c0:f1:e2:d0:a7:ae:cd:
                    64:26:f8:bc:43:34:86:5a:85:d6:2e:d7:06:fb:9d:
                    11:eb:74:d9:07:89:97:d7:27:c1:57:6a:d0:2a:b0:
                    c1:98:bc:f2:d4:53:e7:63:02:23:3b:b1:74:8a:c7:
                    b4:40:ab:15:1d:39:5a:65:d8:e0:60:06:77:68:f6:
                    67:19:55:3d:0a:df:c0:24:6b:ca:75:d8:57:11:49:
                    60:0a:fe:ff:fb:ac:7c:d1:28:ca:26:47:39:a0:ed:
                    e7:35:a9:a0:8c:97:62:0e:6a:cc:3d:ff:0d:c6:7d:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:9E:79:28:F1:8E:7E:B0:45:00:A6:15:A0:E5:33:EB:FA:DC:86
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-VWeeSjxjn6wRQCmFaDlM-v63IY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:a8:64:ce:50:5a:aa:64:e9:eb:68:02:75:d9:3e:05:2d:67:
         08:49:24:5c:45:ff:1d:03:a0:73:b8:ce:28:6f:bd:d2:5f:43:
         26:53:a9:f7:56:a9:a2:83:99:63:eb:b3:07:d1:67:f1:b7:07:
         5b:5f:4f:cb:ae:69:8a:e6:ea:9c:b6:f9:50:20:d0:5c:4d:72:
         bd:43:b6:09:d9:2e:44:6e:b3:81:99:00:34:f7:0e:7c:fb:fd:
         08:84:e7:a4:39:89:44:9e:33:19:6a:df:a0:e3:8c:73:91:fb:
         aa:c3:e7:e9:a5:44:ec:c0:d0:85:b4:68:3c:3c:b7:6f:7e:03:
         1a:0b:ed:50:31:1d:0f:25:f8:05:10:ec:b7:19:87:fe:0b:5d:
         3b:3f:96:f2:c6:5d:d4:77:6b:d5:51:14:52:3e:1e:6a:dc:a3:
         2c:98:f8:4a:1a:93:f6:35:eb:d8:13:2b:a6:a9:f3:b2:d4:ab:
         50:8b:e0:59:e7:d5:fb:5f:98:31:a4:a2:1f:d6:4b:80:07:d4:
         cc:db:6e:7b:28:fa:73:71:b6:d3:08:0e:79:80:4c:52:98:c7:
         0c:51:7a:1e:82:ee:a4:1a:cc:9e:d0:5f:65:46:71:6b:62:a3:
         23:dd:16:78:d6:56:b2:9a:ce:66:dc:b0:79:8a:5a:6f:d6:64:
         e9:09:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:35 2024 by rpki-client on console-fra.rpki-client.org