Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/K4v3JgL1N3mPFqch2DwFRgPVx2Y.roa
File:                     K4v3JgL1N3mPFqch2DwFRgPVx2Y.roa (raw, json)
Hash identifier:          QPhtkuldxDdgMm4nOuPbXxtNe1trQt/9+FnXsTUDzEw=
Subject key identifier:   2B:8B:F7:26:02:F5:37:79:8F:16:A7:21:D8:3C:05:46:03:D5:C7:66
Certificate issuer:       /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial:       07B2AA9E
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/K4v3JgL1N3mPFqch2DwFRgPVx2Y.roa
Signing time:             Sat 01 Jan 2022 06:58:42 +0000
ROA not before:           Sat 01 Jan 2022 06:58:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12586
IP address blocks:        193.26.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129149598 (0x7b2aa9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
        Validity
            Not Before: Jan  1 06:58:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2b8bf72602f537798f16a721d83c054603d5c766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:16:38:d0:a7:87:4a:d1:d7:51:0a:75:b9:
                    26:c4:87:26:08:70:37:ba:e6:2c:f9:6a:b3:ec:5e:
                    80:3e:8f:59:54:00:c4:97:53:b3:84:08:49:a8:ba:
                    f3:8d:6e:09:80:4a:d2:b0:30:80:ba:c0:e5:ba:4f:
                    4f:73:ea:79:8d:96:c4:59:d8:12:25:ee:e5:3e:58:
                    37:45:61:46:42:0e:34:b8:1c:24:3c:c3:83:0b:82:
                    e5:8a:1c:39:bd:71:9f:77:4d:04:11:f4:63:f4:d9:
                    d8:9f:69:cd:f4:10:ca:c6:e4:a5:08:a9:b5:4d:c3:
                    2f:20:a0:fb:16:12:27:ac:bc:94:d4:24:12:d0:95:
                    26:c8:49:3a:0f:ce:72:41:24:0e:b2:30:23:5c:00:
                    28:a3:8a:6c:c4:18:fe:d3:c7:27:a0:d7:5a:f0:0c:
                    fa:01:ee:a4:12:ff:74:45:9b:16:e0:b6:f3:c7:c6:
                    14:17:3b:81:3b:42:81:92:96:69:8d:0c:34:a7:94:
                    4f:5c:65:61:b0:63:f7:e5:85:eb:bd:cf:96:73:64:
                    ed:1d:1a:56:59:f3:94:6e:b1:dd:37:15:38:80:97:
                    da:66:60:6d:4f:cf:7d:61:86:e4:14:15:74:1d:8f:
                    c7:ac:55:3c:35:3e:90:00:4f:95:57:d0:d1:2a:7b:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8B:F7:26:02:F5:37:79:8F:16:A7:21:D8:3C:05:46:03:D5:C7:66
            X509v3 Authority Key Identifier:
                keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/K4v3JgL1N3mPFqch2DwFRgPVx2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:65:38:75:a9:80:d7:51:80:04:f4:ed:ea:75:de:2f:87:dd:
         38:89:b3:7c:b7:ea:2c:59:e3:16:38:4d:85:3d:23:ab:fb:13:
         67:c9:52:28:30:e9:38:fc:2d:87:27:d6:59:58:9f:db:47:de:
         c2:ea:ed:07:dc:f3:f2:27:6d:2f:79:90:a0:05:b1:02:9b:c7:
         93:84:18:c2:c5:5c:dc:9c:94:4a:40:8d:6a:54:87:62:91:be:
         e8:88:13:69:52:ab:32:1a:27:a1:f1:83:88:3b:c4:88:3d:a2:
         9e:0e:0f:1e:18:d7:5f:1b:24:07:ed:80:69:eb:95:75:f7:ee:
         78:84:eb:65:18:e4:2d:1b:8b:ee:0b:04:a6:28:d0:d2:a6:79:
         86:be:de:12:66:8e:15:18:93:84:72:f2:30:ec:81:67:c7:d4:
         f3:51:c7:d6:5f:0e:38:95:c4:b4:0f:ec:46:7e:d7:18:35:d5:
         9c:fb:5d:90:b9:a0:b3:c1:29:31:00:40:9a:83:d4:df:14:44:
         62:52:f7:6b:7c:5d:94:27:4c:1b:fc:b5:e6:53:2f:b1:06:68:
         60:45:00:10:05:6b:a9:20:6b:4e:a1:4e:b0:af:3e:cd:57:18:
         6e:c0:1c:58:d9:07:6f:f2:1c:22:fc:7c:3d:43:62:fe:ca:9e:
         31:f9:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:40 2024 by rpki-client on console-ams.rpki-client.org