Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/RNkIU9xToU_xPX8yZibi2urX65M.roa
File:                     RNkIU9xToU_xPX8yZibi2urX65M.roa (raw, json)
Hash identifier:          sLOILJulnX2fBswXVZqE6mITMP6ZhQmmLHxzb8C7ECU=
Subject key identifier:   44:D9:08:53:DC:53:A1:4F:F1:3D:7F:32:66:26:E2:DA:EA:D7:EB:93
Certificate issuer:       /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial:       0A6E9CC8
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/RNkIU9xToU_xPX8yZibi2urX65M.roa
Signing time:             Wed 01 Jun 2022 11:20:20 +0000
ROA not before:           Wed 01 Jun 2022 11:20:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206461
IP address blocks:        93.94.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175021256 (0xa6e9cc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
        Validity
            Not Before: Jun  1 11:20:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44d90853dc53a14ff13d7f326626e2daead7eb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:c7:43:ba:62:25:3e:3b:c5:95:06:0a:3b:
                    be:b5:08:a8:06:e2:47:44:43:f4:12:9b:34:b5:72:
                    f4:31:91:0b:c0:dd:d4:ee:2f:68:85:fe:9f:30:f5:
                    8d:3c:b1:00:a4:26:cf:17:f3:d1:ac:8d:cb:dd:33:
                    4d:f5:41:3b:35:11:a3:27:1d:51:1c:e1:30:79:55:
                    a6:9b:b2:3c:e8:20:fc:fd:b7:83:30:f1:b7:fa:28:
                    9b:3d:0d:a0:36:4b:ab:33:c0:8e:c1:b8:f4:06:22:
                    f2:8f:ae:9f:d8:01:b0:f3:bc:ad:9a:a3:73:74:f5:
                    b4:15:80:a6:c8:5f:8f:f4:1f:b3:02:36:17:9e:9a:
                    98:d2:60:7a:ff:14:51:d9:d4:62:17:15:ee:f4:69:
                    65:de:88:17:2d:c8:e8:a1:88:24:85:4c:b8:f2:98:
                    0f:39:68:bd:95:a8:d9:fe:cb:a2:24:70:1f:36:9f:
                    e0:58:62:47:c9:e5:00:d4:9c:d6:19:69:fe:ad:03:
                    be:f0:a5:25:01:53:89:25:b5:74:bb:be:71:26:bc:
                    9f:74:0f:a4:7c:ff:dc:61:aa:cd:80:2b:3b:16:df:
                    fd:3e:9d:f2:4d:35:e8:98:51:91:ae:7e:4f:6e:17:
                    ac:43:c9:26:27:2d:6d:7e:f5:e2:18:b6:69:e5:ee:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D9:08:53:DC:53:A1:4F:F1:3D:7F:32:66:26:E2:DA:EA:D7:EB:93
            X509v3 Authority Key Identifier:
                keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/RNkIU9xToU_xPX8yZibi2urX65M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.94.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:85:8d:23:a8:e4:eb:e9:a9:4f:0b:6f:00:12:d9:91:d9:e1:
         af:89:67:c8:da:61:8b:03:c7:96:22:2a:df:d9:5c:f1:66:9c:
         65:6b:da:70:73:00:59:47:b3:0e:66:4a:98:a0:d7:0a:02:48:
         38:c6:13:b0:f5:f4:b5:8e:be:a1:69:8c:20:90:01:77:d4:cb:
         1b:ab:28:d8:05:36:dc:b9:f4:57:0e:26:dd:02:0b:62:19:14:
         7d:9b:ed:0b:83:5d:cf:12:ac:4f:88:ee:fa:b3:01:77:c9:a7:
         01:5e:a4:6f:2c:f7:d0:0a:87:33:ad:98:4c:f9:59:24:2f:70:
         34:b0:6a:9c:c9:07:29:be:70:a8:ab:ab:56:35:02:2a:c7:42:
         8d:2b:d1:02:84:f5:fc:81:fb:0c:d1:14:09:b7:e8:fe:ea:b6:
         1f:e1:80:e8:fc:a7:71:4a:e8:d6:21:e6:64:f4:ed:97:a2:90:
         2e:60:97:22:a5:17:dc:dd:fc:ec:e0:32:00:da:e3:20:8b:59:
         54:e6:03:70:65:7f:11:ab:f0:80:43:3f:48:4b:71:e5:65:ff:
         82:84:3a:9d:5e:da:9d:6f:be:b0:2a:32:0f:d5:c1:8d:29:dd:
         bf:14:cd:50:a9:38:a0:9c:d3:92:88:68:7e:94:87:dd:7b:d5:
         c4:01:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:41 2024 by rpki-client on console-ams.rpki-client.org