Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/QuEyHuVQKy-lWhcPjWwnFtvKNVQ.roa
File:                     QuEyHuVQKy-lWhcPjWwnFtvKNVQ.roa (raw, json)
Hash identifier:          1DfczcUTYGJlVC8IRDrQFPdiTPeBsz69eW9YQe5Ur8I=
Subject key identifier:   42:E1:32:1E:E5:50:2B:2F:A5:5A:17:0F:8D:6C:27:16:DB:CA:35:54
Certificate issuer:       /CN=8eb045110c41edb25931f4a523c39dd4c941d718
Certificate serial:       07B91B36
Authority key identifier: 8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/QuEyHuVQKy-lWhcPjWwnFtvKNVQ.roa
Signing time:             Sat 01 Jan 2022 10:55:03 +0000
ROA not before:           Sat 01 Jan 2022 10:55:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201707
IP address blocks:        93.93.104.0/24 maxlen: 24
                          93.93.105.0/24 maxlen: 24
                          93.93.106.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129571638 (0x7b91b36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb045110c41edb25931f4a523c39dd4c941d718
        Validity
            Not Before: Jan  1 10:55:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=42e1321ee5502b2fa55a170f8d6c2716dbca3554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:84:a1:bc:8e:02:8e:5d:e8:11:03:8c:71:
                    85:2e:ea:0c:92:d1:6f:b1:15:1d:44:6e:90:54:6a:
                    10:39:1c:52:80:15:b6:b5:08:b9:5b:c3:10:53:c1:
                    5a:9a:62:31:2e:4b:32:c3:9a:a3:8e:be:83:38:61:
                    74:31:6a:36:ee:c8:53:0b:23:60:86:2a:bc:c1:05:
                    fd:b1:e0:33:63:21:6b:82:c9:a0:8f:ae:71:85:de:
                    33:9b:01:3d:f4:ab:64:9a:dc:24:4c:9c:83:f0:14:
                    6a:0e:54:76:54:7c:3a:78:7c:ed:b0:a9:be:87:76:
                    6c:3d:3c:e2:b3:a6:c6:3d:42:db:d0:b0:6b:67:e6:
                    a3:1d:10:0d:28:2f:68:59:1d:e3:67:c4:9d:64:aa:
                    b4:a2:b2:bf:42:13:23:74:99:e0:1e:84:c4:35:49:
                    03:4e:9f:ce:15:d7:95:7e:d9:7a:41:63:ac:96:f1:
                    4f:12:d8:f6:38:b6:f1:cd:27:c2:9f:11:fa:7e:89:
                    ae:ba:91:35:b0:20:40:00:bb:3b:f7:2b:4f:f4:55:
                    71:76:59:32:8e:2b:da:90:c1:ff:34:6b:43:8e:03:
                    25:b1:f7:a3:8f:e6:b5:52:b9:8e:72:ea:db:9f:30:
                    56:e3:e1:2c:3f:f9:c9:61:96:5f:0c:aa:e1:2d:da:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E1:32:1E:E5:50:2B:2F:A5:5A:17:0F:8D:6C:27:16:DB:CA:35:54
            X509v3 Authority Key Identifier:
                keyid:8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/QuEyHuVQKy-lWhcPjWwnFtvKNVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:e1:cd:f1:03:42:1c:af:f0:dc:bb:9b:04:3f:5f:79:13:
         aa:c4:75:a7:f3:fe:fd:eb:9b:b0:12:19:fa:bc:59:7d:74:67:
         77:22:64:14:1e:10:c5:74:6d:3d:f6:1b:ea:ab:e7:61:d0:63:
         f4:d8:66:70:f3:f3:71:ae:b9:e7:ac:aa:b3:0b:f6:85:03:98:
         86:9f:5d:43:0d:89:ef:2c:5b:8f:31:f1:7a:8b:2f:77:2e:b6:
         09:88:fd:65:fd:1c:1c:02:6f:67:eb:3f:ef:8b:dc:91:46:df:
         cf:8b:34:61:a3:6b:96:ac:e4:c7:ba:7f:a0:7a:79:ac:d0:42:
         7f:41:2a:17:5e:4b:bf:97:6c:89:f2:08:06:10:1f:e3:38:40:
         39:ec:15:a4:de:da:90:7e:45:9a:d9:d4:a3:a2:61:2b:39:dc:
         10:99:82:2b:40:4d:16:e1:6d:eb:27:7e:8e:61:54:54:67:07:
         a3:cf:18:11:7c:bd:8a:06:e5:98:17:5e:08:dd:9e:40:d3:86:
         dc:c0:8a:31:a3:d7:94:c7:a8:74:db:d9:25:98:44:95:b0:d5:
         f6:85:04:de:ef:f4:0a:cc:c3:19:22:53:24:dd:08:4c:c0:e9:
         6d:53:2e:ab:32:27:c6:f2:f4:49:3e:90:ff:4e:4f:70:9e:eb:
         94:e1:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:16 2024 by rpki-client on console-ams.rpki-client.org