Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/u1pj1L4fdrWbhn2zEGB1Jzh4Q48.roa
File:                     u1pj1L4fdrWbhn2zEGB1Jzh4Q48.roa (raw, json)
Hash identifier:          X5bMGf1JCNMKfStKS33EpnfKidB3PlyTIQHuxkknplo=
Subject key identifier:   BB:5A:63:D4:BE:1F:76:B5:9B:86:7D:B3:10:60:75:27:38:78:43:8F
Certificate issuer:       /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial:       07952AC4
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/u1pj1L4fdrWbhn2zEGB1Jzh4Q48.roa
Signing time:             Sat 01 Jan 2022 07:56:30 +0000
ROA not before:           Sat 01 Jan 2022 07:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202574
IP address blocks:        193.57.17.0/24 maxlen: 24
                          193.57.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127216324 (0x7952ac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b613794927050b22525ab70091835408eee4c79
        Validity
            Not Before: Jan  1 07:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb5a63d4be1f76b59b867db3106075273878438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:6f:cb:2f:ab:95:f3:b6:27:0e:d3:6d:66:
                    d2:87:2d:8f:c1:98:8f:df:35:7f:26:6c:24:fc:27:
                    ed:f8:d9:98:d2:13:c8:8c:e2:f8:5a:14:02:eb:18:
                    b1:c8:6d:d2:60:28:06:bc:a5:86:fc:19:f7:fb:84:
                    c7:b2:1c:0b:06:e7:de:05:48:22:10:01:b1:a1:70:
                    6f:36:4b:ec:6c:2f:af:69:61:c7:f6:6f:61:80:09:
                    47:8e:07:90:6a:0a:83:88:f4:28:e4:ad:d7:8e:01:
                    90:03:3c:30:8d:b4:54:77:ba:74:b9:26:5e:ab:d0:
                    26:02:eb:b9:2f:23:d1:86:69:bd:b1:18:2c:f2:70:
                    0a:df:4f:a9:61:4c:51:da:4f:69:47:5c:88:f5:6c:
                    85:c5:b3:4a:d0:1e:13:88:53:31:5f:a0:a6:09:13:
                    44:d2:f6:2b:db:4d:71:98:82:6c:44:4a:45:e8:61:
                    7e:dd:26:66:2f:5c:bc:72:fe:33:e8:97:16:72:76:
                    8d:85:36:c2:f7:15:9d:b5:5f:b3:dd:b2:1a:5d:6c:
                    be:82:d4:1b:81:b1:a3:8f:21:cf:73:d1:60:8f:a8:
                    fb:0e:93:58:aa:11:2d:69:12:21:95:69:8b:44:08:
                    b6:ac:eb:09:bb:52:f5:23:b7:1c:4e:bf:2c:45:0f:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5A:63:D4:BE:1F:76:B5:9B:86:7D:B3:10:60:75:27:38:78:43:8F
            X509v3 Authority Key Identifier:
                keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/u1pj1L4fdrWbhn2zEGB1Jzh4Q48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.17.0-193.57.18.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:81:01:5f:ee:3d:77:fb:53:a3:88:44:15:d6:9d:f4:37:e5:
         1b:d5:a9:e9:36:5b:36:84:25:bd:0a:71:eb:6a:7e:5d:69:43:
         f0:97:ba:83:f7:f0:f9:ab:7e:f4:49:9d:f8:f4:cc:cc:da:44:
         57:eb:19:07:19:b3:1c:1b:a0:fa:e4:f3:dd:e4:eb:9c:c7:a9:
         86:d1:cc:d5:c7:ee:76:08:ac:e7:e9:26:df:30:77:6f:6d:d8:
         0b:4c:e4:de:e4:1c:bc:b3:23:83:f1:bc:77:53:c5:3d:ac:3f:
         dd:ce:28:6e:e3:c3:9f:7e:3e:0f:a8:18:9b:39:ac:1a:24:6c:
         29:cb:46:82:92:d9:7f:77:29:0c:bc:ef:72:96:d2:c4:3e:41:
         ee:de:f0:95:3d:c8:e0:98:a4:7d:75:fc:af:30:b9:ed:a0:b3:
         3d:ee:6a:56:cb:3a:cf:92:82:0f:78:8f:8e:29:0f:a4:74:06:
         8b:9d:fd:bb:56:8b:52:76:0b:e6:59:31:ab:47:c2:09:3e:74:
         3c:8a:68:9d:39:90:f7:26:a9:27:27:3a:03:1f:bc:0f:d7:19:
         a5:b3:e2:40:13:4b:06:b6:59:ee:4f:24:a1:19:2b:0e:6e:36:
         98:c9:be:a5:d0:ec:96:dd:2c:78:96:ed:1d:27:de:bc:4d:d6:
         92:4d:07:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:24 2024 by rpki-client on console-ams.rpki-client.org