Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ej-S4-nETd0-A1ru5yKo3cLSSSE.roa
File:                     Ej-S4-nETd0-A1ru5yKo3cLSSSE.roa (raw, json)
Hash identifier:          d7b+14UtFq5PbFXWYAn4pf+xBm9Jll3EZrwF9JzLNpI=
Subject key identifier:   12:3F:92:E3:E9:C4:4D:DD:3E:03:5A:EE:E7:22:A8:DD:C2:D2:49:21
Certificate issuer:       /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial:       018243AD90AFAD51442D6910BC00A039C166
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ej-S4-nETd0-A1ru5yKo3cLSSSE.roa
Signing time:             Thu 28 Jul 2022 07:20:24 +0000
ROA not before:           Thu 28 Jul 2022 07:20:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60027
IP address blocks:        91.93.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:43:ad:90:af:ad:51:44:2d:69:10:bc:00:a0:39:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
        Validity
            Not Before: Jul 28 07:20:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=123f92e3e9c44ddd3e035aeee722a8ddc2d24921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:de:ad:13:08:db:ba:79:fb:1a:9c:1c:34:
                    f5:7a:a2:a1:7d:f4:67:e3:7c:42:56:52:ee:3d:18:
                    0d:83:6c:1f:a0:0b:60:06:db:da:73:2d:f3:41:93:
                    b6:8b:8e:91:3b:56:be:3e:87:cb:9b:26:07:92:4d:
                    8d:72:9f:9d:a1:78:de:5c:7e:e1:27:10:3f:29:25:
                    6d:4d:22:a0:f7:18:7c:9f:62:86:23:94:b4:c3:34:
                    14:d9:2d:78:a8:65:df:f1:8b:3c:ee:1c:89:8e:99:
                    2a:19:da:95:8c:70:91:9f:e4:d2:ee:8a:42:81:c7:
                    64:80:8c:b3:eb:82:48:ce:05:de:a4:ff:e7:89:e9:
                    69:37:c9:98:8a:f2:fe:32:e7:3b:6a:b4:b0:50:42:
                    03:7e:15:00:ce:93:56:4b:53:8b:5c:07:26:79:bd:
                    05:eb:7b:38:b4:93:bf:9a:e2:92:e7:f5:97:58:8e:
                    5c:d4:6a:a9:6e:5e:38:2e:42:7f:d7:5e:b1:a6:a3:
                    5c:f3:ad:a3:eb:f2:08:16:70:96:21:b7:65:0c:bc:
                    90:99:86:e9:45:45:cc:ae:f2:49:33:6d:b3:61:78:
                    31:ba:98:14:8f:0b:06:9e:84:50:15:33:85:7a:ca:
                    fa:e7:15:ce:61:4b:09:97:37:79:37:5e:ab:23:07:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:92:E3:E9:C4:4D:DD:3E:03:5A:EE:E7:22:A8:DD:C2:D2:49:21
            X509v3 Authority Key Identifier:
                keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ej-S4-nETd0-A1ru5yKo3cLSSSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.93.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:96:42:51:2b:cb:55:f0:a1:4a:fb:3d:2d:8b:c7:53:84:7a:
         5e:0f:6c:15:1b:8f:d1:d9:1e:d8:92:ba:bf:c9:d6:c3:e8:26:
         1e:ac:70:03:36:df:50:df:87:6b:a7:31:16:65:b2:9d:f3:7b:
         09:2f:81:7e:fa:63:d6:42:9e:1b:94:31:e5:72:a4:ab:ee:33:
         98:fe:46:2c:6d:cf:2f:33:8d:96:90:0c:6a:a3:0d:bb:61:2d:
         e2:b3:fe:ee:ec:56:65:28:12:38:f1:23:04:18:ff:65:69:2b:
         1a:5b:56:3e:35:e4:0d:75:c7:f1:b4:ec:79:e5:4e:b0:8b:d4:
         0a:9d:e1:b5:2f:a0:04:39:79:22:1f:ff:6d:92:b8:cc:c3:63:
         d9:90:29:66:41:8f:4d:34:d3:f7:d6:09:fa:69:43:bb:af:ee:
         f3:fe:72:a3:5f:9b:7d:6b:4e:da:f2:b5:52:8d:bc:56:a5:56:
         ce:7f:1b:ba:da:3b:72:08:2f:9d:13:86:91:37:18:19:9b:b0:
         64:69:1d:21:0b:9b:fb:9a:21:06:95:b1:d4:cc:8d:5e:b2:40:
         eb:2a:78:5b:fe:74:75:a6:fa:1a:15:95:78:31:91:b3:03:91:
         37:9f:06:81:fa:97:a9:ec:5e:e0:a8:f1:c2:d9:e1:d4:71:32:
         3e:36:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org