Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/LvJIH2jvUcBypJ4oTP7J0t3TruU.roa
File:                     LvJIH2jvUcBypJ4oTP7J0t3TruU.roa (raw, json)
Hash identifier:          Zmdz8JNZnyS+n7leCojZRXQSa/H9jKSFN/l9wUan1oE=
Subject key identifier:   2E:F2:48:1F:68:EF:51:C0:72:A4:9E:28:4C:FE:C9:D2:DD:D3:AE:E5
Certificate issuer:       /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial:       0438EF47
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/LvJIH2jvUcBypJ4oTP7J0t3TruU.roa
Signing time:             Sat 01 Jan 2022 00:59:06 +0000
ROA not before:           Sat 01 Jan 2022 00:59:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44478
IP address blocks:        193.84.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70840135 (0x438ef47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
        Validity
            Not Before: Jan  1 00:59:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ef2481f68ef51c072a49e284cfec9d2ddd3aee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:a6:bd:72:38:87:47:4c:32:c8:82:dd:20:
                    bf:24:d0:2d:0b:36:0e:da:3d:bc:cf:bd:cd:7f:c1:
                    4d:27:eb:45:03:0d:db:f4:12:e1:15:9d:35:89:39:
                    49:ed:03:e7:b0:60:59:d7:5f:5f:4d:c9:f9:0f:11:
                    27:e9:3b:34:27:d9:1d:42:15:8e:f1:0c:b5:80:a1:
                    87:22:77:8e:63:1f:ff:f7:9d:ec:c0:d5:29:65:e0:
                    74:be:ed:3e:1c:a8:cf:58:87:50:4e:b4:04:fe:2c:
                    31:10:20:b4:f2:e7:c9:a0:a0:5b:c3:f4:50:69:24:
                    e5:cb:18:1d:a5:75:77:ff:13:fb:03:1d:1b:e5:9d:
                    13:d5:a6:3c:dc:cc:68:46:87:8c:69:14:26:08:42:
                    ee:e0:d0:59:bb:7a:37:f8:d1:f9:4b:6e:2d:4d:99:
                    1c:be:e2:f8:b9:85:d0:a2:eb:16:c6:ed:6e:d8:97:
                    0d:0d:1b:53:82:36:6b:74:0a:31:4e:36:9e:a6:87:
                    06:ec:78:ba:1e:6d:d6:71:d5:80:59:77:04:26:e1:
                    17:bd:ef:2c:bf:0a:ee:0f:03:8c:d7:3b:d0:91:b9:
                    5c:42:84:6b:76:b2:2f:f3:63:57:ff:58:47:df:19:
                    d8:a3:d4:a3:15:8b:99:04:a5:2e:91:54:b1:47:12:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F2:48:1F:68:EF:51:C0:72:A4:9E:28:4C:FE:C9:D2:DD:D3:AE:E5
            X509v3 Authority Key Identifier:
                keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/LvJIH2jvUcBypJ4oTP7J0t3TruU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:dc:11:ca:7e:0d:0f:1b:5a:af:a8:59:b1:9d:ec:cc:f3:9b:
         e8:69:c5:b9:50:33:14:ff:82:a4:fe:15:47:8e:d0:62:7a:6b:
         24:48:d1:35:3b:91:46:b4:4d:1e:8c:20:2e:98:10:42:da:79:
         7c:f9:a6:af:de:f8:8d:b0:68:41:ec:99:63:f3:cf:59:14:b8:
         4e:da:8d:ef:1d:00:9b:41:b7:84:07:12:d4:97:06:23:4a:a7:
         4c:60:f2:e1:54:f1:63:07:dd:c9:d2:e0:2c:bc:c1:3f:3a:65:
         22:e0:76:84:b2:93:15:c9:5a:a3:34:8b:40:14:94:54:4c:86:
         e6:d5:1a:d2:56:d1:58:c2:ce:83:4f:b7:2b:29:55:ff:84:45:
         84:5a:a0:0c:ca:68:34:f2:3d:4f:ff:29:df:11:45:8b:61:6c:
         36:da:35:1b:26:4a:f2:a8:47:68:e3:34:7c:a3:6b:67:a2:17:
         3b:72:3c:06:2d:7b:e5:8e:cd:79:ed:e7:cc:99:d4:23:32:46:
         87:84:08:1f:f0:fe:b7:2d:8d:59:19:de:f8:41:97:ff:3c:35:
         4c:a6:51:98:f7:6a:e5:c7:8b:11:3b:95:7a:ea:18:52:a3:63:
         20:1e:e4:14:f7:6b:a4:00:e6:79:3d:74:53:65:46:67:98:98:
         57:f1:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:15 2024 by rpki-client on console-fra.rpki-client.org