Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/7kcBTJbCTnN-cIcvmuAFeV_4Cu8.roa
File:                     7kcBTJbCTnN-cIcvmuAFeV_4Cu8.roa (raw, json)
Hash identifier:          JGZ5SZVtCcvMLhu0cbtOOFcLfD7wg5c/ulAaYdVtGYU=
Subject key identifier:   EE:47:01:4C:96:C2:4E:73:7E:70:87:2F:9A:E0:05:79:5F:F8:0A:EF
Certificate issuer:       /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial:       13E6852E
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/7kcBTJbCTnN-cIcvmuAFeV_4Cu8.roa
Signing time:             Wed 06 Apr 2022 10:22:16 +0000
ROA not before:           Wed 06 Apr 2022 10:22:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60793
IP address blocks:        193.19.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333874478 (0x13e6852e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
        Validity
            Not Before: Apr  6 10:22:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee47014c96c24e737e70872f9ae005795ff80aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:53:a5:a1:b0:5d:46:0f:4b:d2:84:43:d1:
                    b0:05:4a:79:10:d2:1f:60:2f:da:00:e8:04:d6:76:
                    1c:a6:08:15:0a:ee:8c:6f:dc:c3:34:91:66:bc:99:
                    41:7c:4a:b8:b7:2d:9d:98:f6:e5:45:65:5d:3a:fe:
                    d4:14:ba:e4:9f:cc:bd:88:3b:0e:91:ab:81:b8:55:
                    6b:32:f6:a4:ef:20:39:c3:00:1c:65:da:c8:17:cc:
                    42:f9:ec:e7:94:e8:9a:5d:c2:0d:01:6f:2c:60:5c:
                    e1:7e:49:dc:ae:b5:43:e0:f6:66:40:47:5b:3a:11:
                    28:84:17:b1:7b:78:b9:49:3b:8c:be:01:8e:21:ff:
                    06:c2:e2:60:47:06:64:a4:53:eb:9a:a6:65:42:0c:
                    98:6c:d9:47:e2:44:6f:38:b2:23:58:db:38:9e:21:
                    98:88:c1:cd:70:0d:17:5c:9a:00:80:90:60:04:f5:
                    be:23:8e:c1:f4:0a:50:c8:f6:a8:27:8a:59:04:d2:
                    68:e4:7e:79:e1:a5:45:9d:2f:39:32:22:5b:dc:71:
                    c9:59:34:f9:29:73:76:33:62:3f:c7:9b:09:04:a6:
                    21:f2:16:ce:62:7d:c5:c8:3a:fc:8a:31:4d:25:88:
                    a7:ba:7c:48:5d:53:8c:81:6e:d5:f1:43:d0:5a:8c:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:01:4C:96:C2:4E:73:7E:70:87:2F:9A:E0:05:79:5F:F8:0A:EF
            X509v3 Authority Key Identifier:
                keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/7kcBTJbCTnN-cIcvmuAFeV_4Cu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:42:a3:92:42:a4:c1:31:69:8e:cb:29:f4:43:8c:06:81:54:
         5a:1d:32:f3:4d:60:dc:9c:ea:6d:02:6f:94:51:da:5b:81:97:
         fb:11:03:ce:11:91:6e:bc:33:30:01:41:85:30:e6:69:54:99:
         7f:87:31:92:03:93:1e:b0:05:0c:4b:3d:3f:de:c1:c8:ab:b2:
         97:d9:10:5c:25:24:2e:64:a3:52:98:78:69:03:38:28:f8:5c:
         d1:02:f9:71:bb:98:c7:65:98:e2:fc:2d:71:4d:35:29:eb:3c:
         1e:bd:c7:f4:f1:74:11:cd:56:df:f8:f3:eb:ab:a6:12:7d:06:
         2a:da:94:01:6a:f0:91:73:50:9c:55:91:08:7d:4f:65:7a:a2:
         dd:45:bd:bb:7d:a2:8b:90:02:c9:7a:36:bb:e2:02:20:3a:de:
         5d:4c:46:d6:52:9d:85:d4:68:53:da:fb:a1:85:a5:bf:5d:cb:
         9e:78:98:02:27:6a:8a:b9:f0:00:6a:fe:53:7d:d3:db:b1:95:
         61:aa:fe:c3:38:3e:ca:78:17:c8:3e:83:db:82:87:86:aa:b5:
         00:aa:85:24:fc:c3:b5:70:3b:ab:6f:01:6f:41:df:76:f8:57:
         c6:ca:2f:fa:08:2e:b7:54:e2:ad:82:85:5c:26:45:bb:f5:0c:
         63:fd:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:59 2024 by rpki-client on console-ams.rpki-client.org