Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E4Fn8rEWdNWpAoXBp6d50_L_zjM.roa
File:                     E4Fn8rEWdNWpAoXBp6d50_L_zjM.roa (raw, json)
Hash identifier:          W7Z/YJVZ9MK+doWcj/ZPF9gIsPrSwhEdP/LJzE8vjUI=
Subject key identifier:   13:81:67:F2:B1:16:74:D5:A9:02:85:C1:A7:A7:79:D3:F2:FF:CE:33
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       28340BDB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E4Fn8rEWdNWpAoXBp6d50_L_zjM.roa
Signing time:             Sat 01 Jan 2022 16:09:50 +0000
ROA not before:           Sat 01 Jan 2022 16:09:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204720
IP address blocks:        93.171.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674499547 (0x28340bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=138167f2b11674d5a90285c1a7a779d3f2ffce33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:51:6d:74:da:41:10:03:f5:8c:5d:8c:f9:
                    4a:c3:c8:01:5d:44:07:6f:c3:98:f7:04:3b:69:05:
                    a8:35:94:f2:f0:a5:75:1d:61:35:73:e5:ca:14:54:
                    cf:68:e1:8c:49:d1:38:a4:35:cc:e2:46:c3:54:ef:
                    67:68:d3:6b:d4:32:14:26:80:86:37:eb:bb:d8:6f:
                    eb:fc:68:9d:a7:e2:6c:e3:7c:19:c0:08:d5:d1:90:
                    f6:08:c9:cf:0e:5b:2b:f6:c7:a9:38:39:86:80:7d:
                    ac:ec:c6:54:ca:9a:41:cf:fd:e1:87:70:5a:95:be:
                    94:99:c8:51:b6:f8:66:5f:cf:db:9c:8c:6e:d6:99:
                    c6:9c:74:54:44:c7:60:c6:75:eb:18:d5:fd:42:be:
                    4b:fb:1c:c4:60:97:d1:cd:52:cb:d8:3b:67:64:68:
                    1f:83:52:8c:d8:21:58:ff:3c:ec:1f:bc:50:9a:b4:
                    08:f8:3f:17:bb:65:bd:a8:6d:ee:4f:47:23:26:b9:
                    d3:56:28:12:55:04:24:68:14:e9:69:01:fa:30:99:
                    54:37:15:08:ba:09:66:b2:4c:a2:e3:b0:9b:c6:4c:
                    1c:d0:e5:ab:11:87:6a:be:42:e5:7e:5e:63:e0:5f:
                    9f:46:c3:98:e5:82:66:15:34:37:e7:2f:a2:d4:4b:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:81:67:F2:B1:16:74:D5:A9:02:85:C1:A7:A7:79:D3:F2:FF:CE:33
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E4Fn8rEWdNWpAoXBp6d50_L_zjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:06:f7:6f:16:ea:7f:fd:5d:5c:fb:79:f0:0b:9a:2e:48:b0:
         59:fa:94:f5:5a:dc:8d:b0:f1:a9:bb:7f:22:24:62:18:26:8e:
         0d:e7:f1:76:03:96:8b:a6:5b:f3:1d:94:4a:fd:9b:42:66:39:
         b1:ee:c5:3c:a6:27:06:68:92:ce:4a:96:46:f0:0f:2c:33:ad:
         b0:5b:8e:35:00:1d:8d:07:d2:c2:e3:79:82:08:cc:18:e9:80:
         25:bb:4b:ba:cb:db:1e:d5:5f:da:58:bf:6c:45:bb:ae:2e:87:
         ef:50:a4:b1:50:3e:71:fb:d0:bf:8f:83:d4:70:f4:92:5a:f0:
         e8:05:ec:c3:1e:8e:7e:39:ff:87:42:f5:c7:dd:6d:be:fc:1f:
         55:83:7d:78:ad:83:38:b5:fd:c1:18:44:16:d9:c6:84:8f:09:
         1d:81:71:5e:70:6a:6c:61:b7:79:e6:9d:de:cb:b5:e1:c4:1a:
         05:1a:32:4e:53:54:61:e8:1b:56:79:2e:11:19:85:7a:bd:4f:
         b4:e5:7a:c2:45:99:b0:12:37:92:26:42:10:d1:0e:3e:f2:dc:
         e6:33:37:76:35:24:cc:dc:d4:29:83:d6:da:05:bc:ae:74:e4:
         a0:63:5d:39:10:a0:6c:5a:ce:19:59:4b:9f:27:41:2a:b8:1d:
         56:e9:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org