Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/QYP4h9_owmKQxVS1qPLN63Zgy64.roa
File:                     QYP4h9_owmKQxVS1qPLN63Zgy64.roa (raw, json)
Hash identifier:          0wn0xJaVFzmmlK3uCZWGQjRhjGf44pT3Ryup/N3CjcU=
Subject key identifier:   41:83:F8:87:DF:E8:C2:62:90:C5:54:B5:A8:F2:CD:EB:76:60:CB:AE
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       066C5D2A
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/QYP4h9_owmKQxVS1qPLN63Zgy64.roa
Signing time:             Thu 21 Apr 2022 12:09:59 +0000
ROA not before:           Thu 21 Apr 2022 12:09:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213175
IP address blocks:        93.179.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107765034 (0x66c5d2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 21 12:09:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4183f887dfe8c26290c554b5a8f2cdeb7660cbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:fb:5f:ff:a9:eb:71:5e:9c:73:f9:98:a5:
                    db:f5:46:2a:47:31:34:d5:bd:5a:b2:fb:e2:6b:4f:
                    bb:e4:b3:90:1e:a8:9a:a5:9a:ae:95:37:53:c1:02:
                    57:d4:aa:b6:5f:97:f7:f1:c7:36:92:5a:e8:16:b3:
                    c2:cd:f1:3f:61:0e:ad:b4:b2:93:35:0e:60:c6:91:
                    bd:c5:ec:d7:10:7a:d0:9c:f3:72:21:e3:f5:4c:9d:
                    c1:41:0d:19:0b:89:4c:7b:f0:c7:1c:dc:dd:45:a6:
                    dc:6f:c4:b7:bd:1a:cd:5a:3f:16:67:47:a6:bf:bd:
                    24:50:56:ab:79:f8:23:ba:1b:06:e0:c1:85:ed:8e:
                    36:be:49:7f:11:94:a7:aa:f3:06:1c:19:f3:fd:f4:
                    89:a6:b9:10:98:b0:fd:85:be:e9:21:ae:b0:1f:b6:
                    6c:66:06:27:7b:bb:4a:0e:44:4d:f6:d9:b7:8e:97:
                    23:54:ae:24:a1:99:b6:c2:a0:a6:8d:00:9b:9c:d9:
                    ed:72:cb:83:27:0c:03:32:f0:f4:99:08:52:d1:12:
                    c6:65:95:0b:06:8a:09:22:d3:85:16:31:3d:0d:2c:
                    1b:a5:90:34:98:d5:08:1f:c5:25:46:54:b3:d9:33:
                    23:68:b0:5c:91:76:20:26:6e:b6:bb:58:27:f8:4f:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:F8:87:DF:E8:C2:62:90:C5:54:B5:A8:F2:CD:EB:76:60:CB:AE
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/QYP4h9_owmKQxVS1qPLN63Zgy64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:4a:21:73:ff:58:c7:45:98:be:e3:18:ea:a0:42:15:d9:7e:
         ef:58:35:23:b5:23:03:c8:45:92:6d:a6:8a:bc:75:79:3a:71:
         29:24:d1:4b:76:c8:7c:2e:e8:04:cd:78:9a:0b:c4:a7:b2:04:
         55:11:8b:a4:40:05:eb:94:03:5b:b9:a0:9d:32:55:0e:02:0b:
         95:c3:98:06:ca:76:06:5d:95:50:65:e6:6c:0c:25:00:02:65:
         6c:39:af:77:6d:f9:90:c7:e2:4f:d3:ca:16:0b:5e:e3:71:b5:
         c7:91:c0:e1:ca:7a:f1:9c:e8:5b:5e:6b:67:e7:fc:e3:e7:50:
         2c:1e:96:10:20:e2:aa:28:c0:7f:92:4d:d0:d7:3c:43:bf:36:
         7d:cf:71:bc:ee:22:3d:4d:d8:15:9b:f4:77:59:a0:e4:06:2b:
         86:02:26:27:ed:d2:b4:2e:1e:12:53:0e:59:74:61:14:b0:8a:
         3f:c1:ef:17:c5:22:6d:5a:56:b4:85:72:09:c9:0f:ee:b4:4d:
         d5:87:c2:28:ee:b4:7b:dc:89:82:b0:f2:c5:b9:86:5b:e3:ce:
         74:e0:a0:28:0b:40:1a:a0:d6:dd:d2:2a:bb:16:d2:3e:d4:f8:
         7f:c6:32:72:01:42:88:03:45:eb:2a:59:b5:c5:22:21:37:b5:
         27:71:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org