Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TZOrObNAyMqmWPn7PukMToCWS-g.roa
File:                     TZOrObNAyMqmWPn7PukMToCWS-g.roa (raw, json)
Hash identifier:          Dp814JPypUGrYf1AKv8JX9SIcW/Z4XLpFgyZKHdkPrM=
Subject key identifier:   4D:93:AB:39:B3:40:C8:CA:A6:58:F9:FB:3E:E9:0C:4E:80:96:4B:E8
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       2924C2B2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TZOrObNAyMqmWPn7PukMToCWS-g.roa
Signing time:             Fri 11 Mar 2022 11:24:19 +0000
ROA not before:           Fri 11 Mar 2022 11:24:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210063
IP address blocks:        93.171.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690274994 (0x2924c2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Mar 11 11:24:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d93ab39b340c8caa658f9fb3ee90c4e80964be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:8a:78:75:85:21:54:fc:f6:6c:cb:aa:fb:
                    76:cf:27:3e:68:cb:12:9c:17:f2:a2:50:72:70:5b:
                    4e:a0:0a:c7:a7:b6:df:71:d2:0e:8c:4b:7a:b2:0c:
                    c0:98:5d:6e:e9:be:d9:e1:ad:19:f0:0a:f7:59:d8:
                    86:03:5f:f1:15:77:53:df:ef:33:7d:b1:7e:05:7f:
                    2e:68:c5:00:7f:ef:20:d7:b3:45:a4:4f:7b:f4:1a:
                    22:29:7a:83:86:82:86:08:b3:55:c2:a3:fd:97:b3:
                    83:7a:cf:4c:cb:0c:40:2c:01:b7:7f:43:c1:99:4c:
                    66:23:c2:7c:b3:9f:18:61:af:00:85:8f:a9:e1:80:
                    16:a5:1e:b2:df:4b:06:ed:5e:3c:d1:a6:40:67:64:
                    d1:d7:a9:06:ad:ef:a7:00:a6:ce:bd:50:a4:08:88:
                    a9:8d:11:e5:26:7c:bc:08:43:d8:5a:88:d4:3d:89:
                    e2:f1:e9:9b:af:76:4f:9b:f2:1a:a7:5e:a7:56:fe:
                    3a:0d:6e:a9:90:28:bc:fb:a7:ef:a9:37:71:bd:b2:
                    fa:5a:4b:cf:12:fe:e5:da:1c:d5:da:61:40:b5:7a:
                    44:30:1f:03:e5:0a:a6:fe:c9:0b:6b:e0:4d:0c:b9:
                    9a:3f:7d:ad:0f:dd:83:34:71:4a:44:de:0d:87:e0:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:93:AB:39:B3:40:C8:CA:A6:58:F9:FB:3E:E9:0C:4E:80:96:4B:E8
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TZOrObNAyMqmWPn7PukMToCWS-g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:a0:77:9c:0a:49:d4:12:a0:a5:d8:ee:26:32:9a:74:b3:
         e9:6e:31:15:fe:13:c9:71:61:55:bf:3d:d5:6c:46:4d:2d:99:
         37:7d:fd:39:e6:2d:2d:1b:59:e0:bf:c5:b7:03:a4:3b:15:0d:
         df:10:49:97:db:11:5d:b6:09:15:c0:a3:72:46:8f:ad:27:fc:
         ee:f2:1e:fd:96:aa:0f:8e:32:e7:f4:fe:a5:8a:09:67:07:e1:
         e3:63:92:7a:18:dd:33:27:79:7d:67:11:4a:2d:93:16:b4:37:
         19:a8:69:04:ef:c4:51:89:de:43:e4:a3:df:15:e9:7c:56:a4:
         a2:7e:ef:f9:db:09:ed:5b:0c:12:85:7f:06:09:46:0c:34:a0:
         65:ea:fb:a8:8d:1f:fc:f0:5d:2c:ee:76:b7:cd:3a:2f:cc:d5:
         a4:da:30:ad:89:be:ad:75:05:92:2e:a3:c8:a6:1e:df:40:18:
         63:9b:7f:1e:58:16:21:aa:ef:72:1b:52:56:33:5a:bd:42:1a:
         52:6d:0b:6b:cc:34:5d:87:a6:78:5a:f3:cc:82:d6:ff:ae:34:
         c3:eb:ae:c8:4b:90:bf:15:67:d2:56:d7:c2:8d:f9:50:1e:63:
         0c:0e:5d:af:07:ec:08:1c:19:d7:da:e6:ef:9d:cc:2a:21:e2:
         d0:7b:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org