Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/TwroDRTNEH7YXE4X_uudOCVr0Xk.roa
File:                     TwroDRTNEH7YXE4X_uudOCVr0Xk.roa (raw, json)
Hash identifier:          NMuFJuVpwg8OUedAOyH3fQMrIF9p08jI0GvLt1hcJNc=
Subject key identifier:   4F:0A:E8:0D:14:CD:10:7E:D8:5C:4E:17:FE:EB:9D:38:25:6B:D1:79
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       0183CF822588DB5053A7825A91A057D45DF5
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/TwroDRTNEH7YXE4X_uudOCVr0Xk.roa
Signing time:             Thu 13 Oct 2022 04:02:36 +0000
ROA not before:           Thu 13 Oct 2022 04:02:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397651
IP address blocks:        193.46.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cf:82:25:88:db:50:53:a7:82:5a:91:a0:57:d4:5d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: Oct 13 04:02:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f0ae80d14cd107ed85c4e17feeb9d38256bd179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:a2:75:3f:0a:18:c1:bf:ec:66:65:d8:02:
                    4b:0d:55:9f:55:7f:67:18:28:4c:09:68:5a:59:74:
                    95:cd:89:4e:dd:af:72:b4:78:aa:89:d3:fa:79:59:
                    aa:ac:e0:7b:17:36:15:ab:34:e8:23:a6:50:89:2b:
                    2c:cc:51:e1:fd:47:03:0b:9e:55:1e:d8:5e:23:5f:
                    b3:0c:07:9f:77:ab:67:a6:6b:42:b7:f5:58:e6:ec:
                    5a:47:66:0a:ef:f1:f7:b2:a8:8c:c9:22:c7:4d:a5:
                    b3:93:18:df:02:be:d9:c9:83:cc:9e:5f:f8:2e:40:
                    67:40:2a:a3:40:ca:11:22:43:d7:bc:d2:f2:cc:51:
                    1a:5b:87:8a:ad:dd:ec:df:0f:3b:7e:83:ed:46:71:
                    3f:82:39:fb:fa:8e:f4:33:b0:8e:78:ed:49:b5:7f:
                    08:1b:05:d6:8f:ab:9a:15:f4:13:0c:cd:93:d8:37:
                    75:d7:17:9a:f7:c2:fd:62:13:d3:2e:68:5c:6e:a4:
                    76:ff:20:15:f1:f6:28:b1:3e:05:50:75:f3:9f:dd:
                    4f:18:19:18:41:62:fe:c1:7a:51:26:bd:74:53:20:
                    92:9d:aa:17:19:c0:36:7b:b7:2e:a1:6b:ef:fc:76:
                    82:80:6e:2c:ba:65:6a:8d:b4:85:7b:14:4b:d9:84:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:E8:0D:14:CD:10:7E:D8:5C:4E:17:FE:EB:9D:38:25:6B:D1:79
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/TwroDRTNEH7YXE4X_uudOCVr0Xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:47:07:09:4a:7d:7d:dd:d7:11:69:61:1b:f9:36:f4:8b:
         95:a5:e0:77:bc:a1:38:c0:86:c0:36:ad:60:f5:e7:23:2b:ba:
         8e:70:b4:46:80:3c:0a:aa:0f:f2:7f:b3:d6:97:31:5e:35:77:
         59:26:4d:18:65:ba:45:15:cc:64:07:06:30:93:f6:96:ad:5a:
         f3:aa:62:4b:e2:7f:fd:59:93:2d:bb:4d:d0:5a:1d:67:72:ba:
         c3:6e:13:9c:6f:c6:65:c6:2e:81:80:07:8f:0c:f5:7d:2c:40:
         96:61:9e:f0:32:fb:13:d4:98:d4:0c:bd:76:ed:a8:6d:f3:a1:
         b2:95:97:81:9e:a3:f2:18:ba:c9:1e:60:bd:00:f6:df:b4:10:
         14:2b:fb:0e:7c:7a:48:65:90:a4:63:f2:32:c0:13:3c:b6:c6:
         ed:0a:f0:7e:db:2f:1d:d7:c3:3c:46:11:45:1f:27:21:61:82:
         58:ad:7e:5a:f1:8b:40:f0:96:4b:40:55:42:84:21:8d:42:89:
         f7:c0:7a:81:f3:5f:a8:16:a6:a2:94:33:13:9b:4e:f5:c0:51:
         8c:b0:ee:f0:af:10:db:12:ae:31:da:c2:24:46:c6:94:e5:69:
         ce:dd:ac:dd:5a:65:7f:51:d6:d8:4a:77:e1:ca:f3:35:8d:aa:
         c7:d6:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:19 2024 by rpki-client on console-ams.rpki-client.org