Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Mei7BCpjIT_Uz7wNOfMAU3X_8MM.roa
File:                     Mei7BCpjIT_Uz7wNOfMAU3X_8MM.roa (raw, json)
Hash identifier:          JAy/Z6fMvxsna0pb0SppDnBipcHF7Jg1rrJ3BBZ0bSQ=
Subject key identifier:   31:E8:BB:04:2A:63:21:3F:D4:CF:BC:0D:39:F3:00:53:75:FF:F0:C3
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27D17682
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Mei7BCpjIT_Uz7wNOfMAU3X_8MM.roa
Signing time:             Sat 01 Jan 2022 16:08:55 +0000
ROA not before:           Sat 01 Jan 2022 16:08:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57298
IP address blocks:        93.171.162.0/24 maxlen: 24
                          93.171.186.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668038786 (0x27d17682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31e8bb042a63213fd4cfbc0d39f3005375fff0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:fa:b3:ad:f8:28:69:4f:79:70:f7:3a:5e:
                    01:8d:9a:2c:6b:e9:61:15:11:ad:3b:0a:4f:a7:88:
                    55:67:5a:fe:d3:c7:3a:fc:1a:f9:3a:c4:c0:b2:20:
                    1e:c7:73:95:24:05:1b:6a:42:04:4b:6b:2c:d9:2e:
                    57:99:b4:44:f7:d8:11:6f:42:cf:59:8d:d1:4d:42:
                    5b:f8:7b:ee:35:f7:87:cb:e5:fe:45:0e:0a:18:db:
                    05:77:ec:1b:cf:11:bc:93:f9:6a:ca:a4:35:94:11:
                    ca:d5:b6:76:93:1b:b9:4f:10:75:b9:e4:9f:8e:f0:
                    e1:ca:12:60:c4:fe:02:eb:49:94:f1:77:fd:f6:a4:
                    3b:0f:77:f1:54:17:7b:03:b2:d0:e4:19:bf:a7:98:
                    fa:1c:14:8f:81:06:51:e1:87:3e:c3:9e:e5:c7:9e:
                    a9:2e:97:46:b7:a6:23:8f:e0:e5:3b:30:3d:ab:cb:
                    7a:57:aa:11:5a:12:81:e4:9d:65:09:b5:54:9a:3e:
                    d4:d0:1f:46:4b:17:3b:12:e8:a1:f6:45:5b:8d:05:
                    2a:cb:29:4e:4d:55:41:31:07:1a:85:af:96:e3:3f:
                    96:39:b6:f6:91:7c:c7:d9:85:e0:a7:71:3d:36:a2:
                    18:f1:df:b2:fa:d9:8b:eb:fd:c3:2d:39:3d:0e:c3:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E8:BB:04:2A:63:21:3F:D4:CF:BC:0D:39:F3:00:53:75:FF:F0:C3
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Mei7BCpjIT_Uz7wNOfMAU3X_8MM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.162.0/24
                  93.171.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:50:44:f7:ff:9b:30:21:9c:33:69:92:e3:b2:07:ba:db:
         6f:99:27:cd:76:3f:3b:05:e1:86:b8:e0:bc:f5:fd:7d:e0:bc:
         0d:26:a5:83:c9:d2:da:27:dc:12:89:ce:74:f7:c1:c3:08:d0:
         3b:a9:05:25:71:c4:34:2e:54:5b:0f:27:6e:91:5c:3f:8a:f6:
         92:ea:02:70:48:9b:1a:ab:a2:2f:5d:46:ba:54:64:55:99:02:
         dc:9b:af:c7:09:e8:ec:4a:4f:72:9f:77:42:50:5b:f7:72:50:
         14:f6:bc:db:f2:0c:cd:4a:73:6f:28:6f:41:f8:58:3d:1f:0e:
         f1:35:ea:39:3b:20:f8:5b:62:81:a4:da:54:de:47:ae:c8:a4:
         d6:7f:b9:9e:59:2a:fb:3f:d8:86:f8:ef:de:c5:cc:a3:56:9d:
         ce:df:d7:4e:b7:6f:ee:17:85:7e:70:0b:8f:fe:35:a8:20:54:
         4c:66:85:54:bd:dd:c7:7a:db:ea:f7:36:ff:01:0b:6b:f9:79:
         0e:ff:4a:ba:d2:a9:3f:a6:43:28:03:c8:5e:5d:a2:b5:16:0a:
         14:e3:b8:3f:85:84:89:08:2d:77:00:cd:93:16:1a:68:1b:97:
         83:20:89:d5:aa:8d:aa:78:76:00:56:7c:af:54:54:93:0f:87:
         4b:be:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:34 2025 by rpki-client