Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mj-szdF5sjY_cJmOlQLi1ulSbEs.roa
File:                     mj-szdF5sjY_cJmOlQLi1ulSbEs.roa (raw, json)
Hash identifier:          z6Ize7AQMOEoYZ398r7nTmtN4IqMNbYN6GPonumxqtw=
Subject key identifier:   9A:3F:AC:CD:D1:79:B2:36:3F:70:99:8E:95:02:E2:D6:E9:52:6C:4B
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       01850BAFDE66C5A6092491A1677835E1F87B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mj-szdF5sjY_cJmOlQLi1ulSbEs.roa
Signing time:             Tue 13 Dec 2022 13:32:33 +0000
ROA not before:           Tue 13 Dec 2022 13:32:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29066
IP address blocks:        93.90.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0b:af:de:66:c5:a6:09:24:91:a1:67:78:35:e1:f8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Dec 13 13:32:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a3faccdd179b2363f70998e9502e2d6e9526c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:a6:59:a9:f3:de:47:7c:bd:a6:20:1e:98:
                    ed:4d:77:5c:88:99:f2:34:2f:5c:95:41:3b:5f:da:
                    62:ee:31:a7:1c:64:7f:74:9c:74:98:cb:38:c8:fa:
                    db:31:a3:b5:69:6e:51:22:59:f2:7b:26:cd:3b:d6:
                    2f:2f:ee:77:fa:7f:e5:9c:bd:d8:8b:b2:9a:1f:81:
                    2a:a3:32:d7:07:92:30:e8:49:8c:6a:6a:8d:f3:26:
                    3c:27:3e:ca:17:f8:30:1b:5f:dc:ee:e9:31:e8:f7:
                    d9:44:fe:37:22:d5:4c:6d:eb:46:55:ab:30:7e:0b:
                    63:8c:e3:57:af:4d:b2:4a:5e:32:ca:1d:27:ea:e0:
                    92:3c:ef:0a:4b:c5:3c:73:b4:d3:c8:5f:46:5c:25:
                    a1:92:49:6e:e7:b9:9c:56:be:91:0d:8b:b8:ca:2d:
                    94:31:98:bd:99:89:8d:02:9a:b9:57:45:77:d0:e7:
                    c6:69:f2:0e:ba:1b:d4:b3:70:0e:a9:e5:4f:35:9f:
                    a7:89:0a:b7:e1:29:3e:7e:6f:da:5e:93:9d:36:f9:
                    68:50:f0:27:52:88:3f:db:97:79:7a:a9:51:82:6f:
                    0c:be:1f:39:3c:2d:cc:71:68:16:41:47:cd:7f:cf:
                    1b:d7:28:0a:b0:a7:53:a1:f3:24:b1:4e:eb:f1:52:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:AC:CD:D1:79:B2:36:3F:70:99:8E:95:02:E2:D6:E9:52:6C:4B
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mj-szdF5sjY_cJmOlQLi1ulSbEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.90.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:51:aa:53:6d:5f:99:1d:1d:d8:6b:2d:92:ef:b0:bf:d2:
         6f:26:e2:22:55:8a:31:07:dd:30:64:52:bb:a6:87:90:55:a8:
         c0:95:2e:12:77:28:b9:b9:bb:48:b5:54:44:bf:2e:a0:5e:fd:
         77:73:10:51:e6:5d:c7:42:79:f8:6c:08:b1:a4:d7:8a:c6:fb:
         ea:02:1d:26:f4:9e:cb:8c:72:94:53:fb:35:af:50:b9:f8:84:
         f6:94:ba:23:78:97:4d:09:bb:df:75:fc:6e:69:52:98:ca:22:
         96:ad:db:e6:5e:d8:26:6e:94:c0:b2:a1:0e:ac:2f:00:a6:16:
         f9:13:6a:ce:3a:20:2e:7a:f9:c6:66:61:72:d1:04:59:39:98:
         2d:d7:6d:fa:d5:1a:6a:3f:b3:c1:11:da:2c:19:1d:3e:41:7b:
         66:ea:a6:3f:4c:89:bb:c6:b7:2a:c6:64:f2:8b:7e:ec:78:cb:
         e6:db:67:b8:2b:44:93:3f:cb:bd:72:f3:b5:ac:1b:85:37:91:
         a0:c8:4d:71:a0:2f:3b:a4:5e:66:17:6e:f2:73:a0:98:0c:61:
         45:96:20:83:b5:e6:15:5d:0b:19:19:92:88:e4:d6:ad:06:4e:
         2b:5c:54:15:f3:fd:9f:66:d9:21:1d:61:a7:26:6d:2d:2d:64:
         1d:37:93:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYULr95mxaYJJJGhZ3g14fh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjIxMjEzMTMzMjMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTNmYWNjZGQxNzliMjM2M2Y3MDk5OGU5NTAyZTJkNmU5NTI2YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0umWanz3kd8vaYgHpjtTXdciJny
NC9clUE7X9pi7jGnHGR/dJx0mMs4yPrbMaO1aW5RIlnyeybNO9YvL+53+n/lnL3Y
i7KaH4EqozLXB5Iw6EmMamqN8yY8Jz7KF/gwG1/c7ukx6PfZRP43ItVMbetGVasw
fgtjjONXr02ySl4yyh0n6uCSPO8KS8U8c7TTyF9GXCWhkklu57mcVr6RDYu4yi2U
MZi9mYmNApq5V0V30OfGafIOuhvUs3AOqeVPNZ+niQq34Sk+fm/aXpOdNvloUPAn
Uog/25d5eqlRgm8Mvh85PC3McWgWQUfNf88b1ygKsKdTofMksU7r8VJlnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJo/rM3RebI2P3CZjpUC4tbpUmxLMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvbWotc3pkRjVzallfY0ptT2xRTGkxdWxTYkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVpLMA0G
CSqGSIb3DQEBCwUAA4IBAQAeeVGqU21fmR0d2Gstku+wv9JvJuIiVYoxB90wZFK7
poeQVajAlS4Sdyi5ubtItVREvy6gXv13cxBR5l3HQnn4bAixpNeKxvvqAh0m9J7L
jHKUU/s1r1C5+IT2lLojeJdNCbvfdfxuaVKYyiKWrdvmXtgmbpTAsqEOrC8Aphb5
E2rOOiAuevnGZmFy0QRZOZgt12361RpqP7PBEdosGR0+QXtm6qY/TIm7xrcqxmTy
i37seMvm22e4K0STP8u9cvO1rBuFN5GgyE1xoC87pF5mF27yc6CYDGFFliCDteYV
XQsZGZKI5NatBk4rXFQV8/2fZtkhHWGnJm0tLWQdN5PN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org