Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/g2j6oI0tV56qDi75NyD5GXzgLN0.roa
File:                     g2j6oI0tV56qDi75NyD5GXzgLN0.roa (raw, json)
Hash identifier:          2z7nYiRxgrhQK9xpkKBu11t/x9EEyIz03CQFIwaaMv0=
Subject key identifier:   83:68:FA:A0:8D:2D:57:9E:AA:0E:2E:F9:37:20:F9:19:7C:E0:2C:DD
Certificate issuer:       /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial:       CB19
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/g2j6oI0tV56qDi75NyD5GXzgLN0.roa
Signing time:             Sat 30 Apr 2022 16:15:57 +0000
ROA not before:           Sat 30 Apr 2022 16:15:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207616
IP address blocks:        91.193.56.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51993 (0xcb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
        Validity
            Not Before: Apr 30 16:15:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8368faa08d2d579eaa0e2ef93720f9197ce02cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:66:41:a5:3f:0d:f1:cf:de:90:4a:ea:f7:
                    c4:25:d5:80:dc:d3:87:14:b5:ce:a4:a9:31:a7:e5:
                    bf:11:f6:bb:47:ee:81:65:6f:32:7c:97:78:ca:47:
                    f9:c6:f0:c6:02:33:70:2a:b6:b6:43:d4:eb:95:01:
                    c9:09:05:59:3b:95:c2:fb:ba:86:85:b4:16:ab:ba:
                    f8:2f:34:43:05:01:0c:af:e1:9e:7e:5f:da:6d:50:
                    00:65:b2:e7:b6:e1:dc:0f:dc:09:31:57:c1:3c:c7:
                    ef:a7:38:29:f0:ad:a5:19:31:e4:d1:2c:a8:80:79:
                    ba:05:42:37:13:95:35:6b:96:ef:43:b6:e1:79:7e:
                    d4:0b:c4:98:06:6b:39:f1:7e:71:78:3f:e7:1f:93:
                    f3:08:16:08:c5:4c:6a:35:a8:51:ca:30:aa:6c:c1:
                    11:2a:e5:6f:87:29:1e:16:f4:54:a4:13:06:88:6f:
                    f6:27:1d:e0:58:4b:b8:a8:0e:06:91:01:52:56:b1:
                    0d:73:1f:0b:de:82:2d:84:b2:aa:eb:6d:76:d2:0b:
                    55:9c:14:23:91:83:b7:66:92:fc:60:2b:c0:df:c6:
                    34:c0:3d:9e:4b:73:17:8b:c3:e5:10:7e:f7:18:50:
                    d4:5a:17:b2:8e:2d:04:c6:ae:b2:cb:70:9c:e2:64:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:FA:A0:8D:2D:57:9E:AA:0E:2E:F9:37:20:F9:19:7C:E0:2C:DD
            X509v3 Authority Key Identifier:
                keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/g2j6oI0tV56qDi75NyD5GXzgLN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:7e:2e:8f:07:93:b0:5e:96:12:a9:fe:12:81:97:52:4d:
         e1:cf:28:b9:23:0a:e4:a0:39:ec:88:60:e0:fd:5d:f9:42:45:
         f4:0a:f2:02:91:6d:99:03:78:dd:9d:93:bd:b0:04:79:7f:f3:
         6f:b0:96:71:f7:1b:5c:68:27:87:40:93:31:46:26:6c:85:52:
         21:ba:25:33:46:6f:b6:b9:49:1b:f4:e5:e4:c0:fb:55:c2:b3:
         c6:78:34:d1:be:20:58:0d:28:e0:bb:31:2e:3f:2b:0e:b6:ef:
         29:67:19:ce:3e:49:f7:88:99:c6:f8:e8:c3:fc:9d:31:70:70:
         c7:6a:73:82:78:8c:65:e9:64:24:08:ce:5e:73:44:7d:9e:01:
         c5:28:1c:66:fd:e7:dd:0b:f4:30:15:6f:e9:26:5e:ed:45:f8:
         78:b7:27:11:6b:12:ad:1b:3c:8f:28:f1:d5:04:5d:fc:a3:d0:
         eb:fe:7f:03:fe:d8:c6:33:17:e1:1b:97:cf:5f:d8:8c:62:55:
         14:6a:a6:50:8f:10:d6:39:99:43:99:58:d1:a9:87:2f:8f:04:
         dd:ca:05:4f:c9:35:80:99:35:56:fe:90:02:14:dd:c2:ef:cf:
         f5:69:4a:23:a7:b4:6a:a4:7f:7d:6d:11:4a:1e:0e:19:ef:fa:
         21:26:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:18 2024 by rpki-client on console-fra.rpki-client.org