Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa
File:                     qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa (raw, json)
Hash identifier:          KxxweHDDBrl0+X0j9Tk7UlndoC3oTHNx5NGPEWdZLLg=
Subject key identifier:   A8:21:0B:0A:2E:D3:8A:ED:AA:B6:9A:BE:C3:4A:BB:0A:00:8D:13:F8
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       2A1000DE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa
Signing time:             Wed 01 Jun 2022 09:32:22 +0000
ROA not before:           Wed 01 Jun 2022 09:32:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50182
IP address blocks:        93.170.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705691870 (0x2a1000de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jun  1 09:32:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a8210b0a2ed38aedaab69abec34abb0a008d13f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:aa:0c:ef:bf:e5:18:6d:03:63:d4:2e:e2:
                    9e:00:83:ae:c5:00:fd:0e:f0:4f:ce:7b:88:77:6d:
                    c8:25:45:7c:28:97:43:c5:58:f6:74:1a:c7:c0:ce:
                    2e:cd:06:fe:c7:b0:ef:14:fb:69:e2:a0:31:63:2b:
                    04:5f:7b:5a:50:5c:32:37:73:91:54:c6:4f:8e:aa:
                    e5:7d:7b:d6:f3:52:70:c7:21:fb:b2:d4:6a:50:a2:
                    96:a8:d7:df:f8:c8:b2:99:ba:d7:65:2d:6a:6b:fb:
                    e6:ab:64:c9:9d:7b:29:cf:73:06:f4:8f:f7:e0:01:
                    49:8e:5f:7a:08:b8:09:80:41:bb:4b:a6:0f:e9:a9:
                    74:17:9d:f0:30:ef:e7:d7:38:ae:8a:0d:b3:85:f0:
                    af:69:01:17:ab:2c:fd:0f:c2:a2:3f:f7:cf:95:ba:
                    ac:86:05:41:4d:d1:5e:64:96:1b:74:76:32:b6:2d:
                    2c:1b:b5:2b:1c:ea:a4:8a:79:05:03:cf:9f:4d:b5:
                    48:ca:78:49:81:bd:2e:bd:67:08:a4:97:b8:5d:35:
                    5c:03:26:ce:38:a1:eb:67:34:a7:93:f7:32:4a:ba:
                    8c:fc:c5:7b:55:a7:6c:6c:b3:be:38:67:57:6f:64:
                    62:7d:95:7a:62:74:dc:74:0b:f6:6f:a4:db:c3:87:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:21:0B:0A:2E:D3:8A:ED:AA:B6:9A:BE:C3:4A:BB:0A:00:8D:13:F8
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:ed:0e:e1:07:44:fb:13:3e:19:12:81:84:af:0c:0e:7b:
         f6:42:92:d7:90:0d:1e:83:69:c4:b2:73:4c:6e:c6:ab:ca:23:
         c8:c0:8b:4c:98:ba:8b:30:28:9f:13:8e:16:24:73:53:1f:2b:
         77:91:26:bd:f3:c2:7e:ae:fb:5c:7b:e2:1f:0f:a3:31:e7:17:
         a2:84:5a:fb:e8:50:88:7d:2f:56:e3:ee:ad:7a:82:29:94:3a:
         a8:01:da:18:80:a7:80:5f:dc:cb:52:3c:ad:3b:51:b1:c5:8e:
         45:a6:82:6b:ed:ef:1f:5d:bc:61:1e:c1:b8:f4:04:7c:49:7d:
         44:8f:79:99:12:13:c3:f6:5b:81:6c:5a:c1:02:6c:92:ce:88:
         7c:f1:e1:37:d0:40:29:91:16:ba:e0:85:2e:ba:e2:88:75:53:
         ec:cf:e9:0e:5c:00:f9:7e:95:ae:b7:1d:45:d4:6f:86:45:97:
         60:7a:6b:e7:c6:ef:54:a8:94:80:90:2f:f6:61:c2:55:22:6e:
         01:b4:bb:e4:18:be:91:d6:e6:9e:5d:a7:33:f2:66:52:26:59:
         b2:ce:00:76:75:72:2b:75:ba:8e:da:ba:19:09:05:ad:e2:0b:
         6a:94:5d:cb:db:39:fe:2a:11:ef:d4:b0:2d:b5:a4:dd:c9:12:
         2b:c4:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:52 2024 by rpki-client on console-ams.rpki-client.org