Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/yRok2Qw5YE5DIvxavoH6OsREoqQ.roa
File:                     yRok2Qw5YE5DIvxavoH6OsREoqQ.roa (raw, json)
Hash identifier:          k2lpxwyLER8L7aw2eSpp01yAQQJqf3wLgadVlcs/GxI=
Subject key identifier:   C9:1A:24:D9:0C:39:60:4E:43:22:FC:5A:BE:81:FA:3A:C4:44:A2:A4
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       065EC9C0
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/yRok2Qw5YE5DIvxavoH6OsREoqQ.roa
Signing time:             Tue 19 Apr 2022 14:11:15 +0000
ROA not before:           Tue 19 Apr 2022 14:11:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200687
IP address blocks:        93.179.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106875328 (0x65ec9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 19 14:11:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c91a24d90c39604e4322fc5abe81fa3ac444a2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:3e:c1:af:46:01:3b:ae:0e:9a:0a:8b:e8:
                    68:4f:6a:f2:d0:92:54:1d:5f:8e:fb:56:6c:bc:b2:
                    ba:c7:30:3c:09:d7:ed:bc:8a:55:3b:b4:b2:49:72:
                    d7:02:f6:4b:0f:25:d8:46:69:54:7d:d9:95:27:7c:
                    77:36:0c:7a:fb:ab:c4:1a:8f:f1:08:cc:6f:70:b3:
                    6e:6e:4d:44:44:91:15:20:86:51:87:18:8f:6e:47:
                    96:9d:36:6a:f4:e8:a4:67:42:2e:1d:17:2c:6b:ca:
                    46:c7:e1:62:c8:5f:e9:cb:19:22:95:12:9a:08:b3:
                    9c:5a:12:3a:99:7c:29:9b:02:6a:a6:17:91:91:1f:
                    18:d3:79:b4:46:7d:9c:99:12:1d:b0:46:38:77:8f:
                    17:40:42:d9:7e:3d:bc:20:2e:8c:c7:3f:4c:a9:1e:
                    20:fa:a0:3e:38:99:fc:cf:f5:30:a7:ec:1d:cf:94:
                    98:76:3f:8f:3e:ed:38:a1:e2:e2:28:42:9c:c0:87:
                    24:11:ac:e8:80:b0:7b:72:41:b9:57:a5:b6:ad:db:
                    6c:cb:cb:c0:f1:4b:39:0b:db:1b:ca:30:09:9b:e8:
                    63:33:87:28:10:5a:c2:ed:85:2c:6c:c8:e3:57:d3:
                    1d:0e:d9:34:28:f7:4b:6d:6f:3d:3e:24:0f:67:cf:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1A:24:D9:0C:39:60:4E:43:22:FC:5A:BE:81:FA:3A:C4:44:A2:A4
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/yRok2Qw5YE5DIvxavoH6OsREoqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:04:ff:de:67:92:1d:1a:c1:7d:2a:39:b3:7d:44:78:9c:
         c9:67:c4:10:02:1c:17:ab:77:18:7d:d1:f8:40:93:62:83:94:
         58:98:a6:c9:72:36:b5:8a:45:af:50:b0:41:f0:1b:e6:66:5e:
         92:be:93:bc:9a:da:2b:ba:02:e2:46:38:ea:20:10:cf:c8:ac:
         68:a5:71:e5:74:fe:b3:9f:43:4b:e2:38:35:8e:36:c7:c2:9f:
         22:21:bc:f1:69:31:ec:3e:ef:e9:29:9f:f5:ed:03:82:68:d7:
         f1:b0:f3:ae:44:c3:da:3d:29:ae:a9:a2:9d:5d:e2:88:5f:7d:
         e7:95:04:46:a9:09:4d:6f:e0:e1:9f:5f:66:2c:f0:a6:48:23:
         3f:a3:75:80:d1:46:b7:2e:e5:56:f3:81:3f:35:8b:0a:b4:da:
         96:bf:da:8b:9c:b1:a2:b9:6b:e3:87:2c:88:50:bd:dc:bb:d5:
         01:3b:a0:a0:f1:6c:37:44:49:0b:cb:70:e8:70:75:36:57:8e:
         9d:89:3b:82:19:b4:f8:d4:ba:4c:b9:df:a0:cb:85:dc:2b:7c:
         1f:c4:e3:f1:c6:f8:e0:2b:54:94:2c:0a:d1:5e:0b:7d:38:41:
         e6:64:6e:20:81:ed:c1:33:a9:41:c6:64:7f:d8:da:65:b5:ef:
         0e:59:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org