Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u1a6zNMs1aR3A5RZZvhUd_IWKC4.roa
File:                     u1a6zNMs1aR3A5RZZvhUd_IWKC4.roa (raw, json)
Hash identifier:          SNcOo4f3OF5xEgtwBjr3WhBBppCGTaAejUOHobCfX5M=
Subject key identifier:   BB:56:BA:CC:D3:2C:D5:A4:77:03:94:59:66:F8:54:77:F2:16:28:2E
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       2A16E1E3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u1a6zNMs1aR3A5RZZvhUd_IWKC4.roa
Signing time:             Wed 01 Jun 2022 09:32:24 +0000
ROA not before:           Wed 01 Jun 2022 09:32:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57712
IP address blocks:        93.171.228.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706142691 (0x2a16e1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jun  1 09:32:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb56baccd32cd5a47703945966f85477f216282e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c7:8d:8a:02:44:30:64:50:30:28:29:e6:77:
                    c2:7b:89:33:d2:9d:1b:d3:a3:a1:d8:ba:e1:0e:12:
                    43:a2:03:14:31:86:96:2e:64:82:c7:24:67:58:8d:
                    9d:9e:a1:ff:5e:ba:c5:4c:60:84:ce:e1:f8:e0:29:
                    89:4a:eb:51:d9:a6:94:23:97:7a:70:21:a4:0a:c2:
                    0c:1c:ec:0b:da:23:5c:77:ab:32:77:60:70:5b:c7:
                    f0:97:b5:8a:c6:75:83:cb:1b:40:0e:18:a4:a8:45:
                    88:90:45:aa:74:04:41:d7:8d:5d:77:28:4d:b9:b6:
                    50:66:b6:62:a5:85:f4:f7:58:05:54:a1:9d:87:4e:
                    c7:92:9f:4f:03:52:53:ae:7f:cd:df:2f:49:be:8b:
                    06:f7:3b:a8:46:8b:e9:1c:07:8c:31:7f:c0:f9:64:
                    bc:98:cd:97:36:5d:f0:c7:2e:cb:1c:2c:31:89:d3:
                    eb:4d:5b:b8:2c:47:5b:a4:bc:23:e9:1c:e2:5e:e1:
                    16:61:f7:78:0c:9c:8d:b0:dc:1e:0f:98:dd:7d:51:
                    2e:99:57:da:ec:eb:0d:c9:e8:bc:20:95:48:85:ab:
                    37:b3:6a:24:43:25:e4:00:1e:cc:da:b9:3a:1a:30:
                    dd:fb:19:9e:8c:1c:50:86:29:39:86:1f:c5:9e:9b:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:56:BA:CC:D3:2C:D5:A4:77:03:94:59:66:F8:54:77:F2:16:28:2E
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u1a6zNMs1aR3A5RZZvhUd_IWKC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:0e:61:1f:5e:97:09:ef:32:8e:78:3f:5d:61:22:93:d1:
         7b:04:0f:bf:13:c9:28:be:99:2a:60:0f:eb:2d:59:3e:26:ad:
         f8:27:6d:3b:58:4a:f6:ee:44:e2:fc:4f:cc:d5:69:be:d3:c5:
         4e:3a:8d:1d:73:9f:16:29:cc:35:1b:fd:af:9e:4b:dc:4f:c7:
         1f:1c:8b:74:06:08:e6:bd:5e:c3:08:68:db:fc:c7:48:3d:c9:
         c6:c8:2c:6c:d9:4b:e9:23:b0:1e:2c:93:01:28:c5:d7:00:ca:
         f2:9a:09:4d:58:a0:80:be:ca:85:c1:43:b5:36:8d:27:8d:c8:
         fd:56:4e:6d:4e:ce:7f:0d:bf:ef:f6:68:d4:b2:b5:8a:01:95:
         a5:e9:cd:e2:f6:34:a8:b7:60:1c:4c:4d:9a:84:8a:15:1b:28:
         58:65:c8:e5:6a:ab:c1:6b:8b:42:5e:36:7b:09:3c:e2:85:d8:
         f7:b7:c0:94:b8:ef:ae:5b:7d:44:de:2d:e7:50:9a:56:eb:f4:
         86:00:2d:3b:f3:51:12:43:53:3e:6e:df:5e:22:4c:2e:92:f8:
         8f:cb:d5:eb:11:a8:01:b1:12:14:74:bd:44:ad:9b:a2:15:a3:
         6f:25:ce:06:de:d0:48:5a:16:7b:70:a3:95:e0:e4:f7:11:38:
         e5:93:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:38 2024 by rpki-client on console-fra.rpki-client.org