Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/ETZHbrEd9djyQM00S1y-ie4JRGw.roa
File:                     ETZHbrEd9djyQM00S1y-ie4JRGw.roa (raw, json)
Hash identifier:          S98aLba3wNfeWwzeYtofA4wZOc6mJIfyLxKYmlxRkL8=
Subject key identifier:   11:36:47:6E:B1:1D:F5:D8:F2:40:CD:34:4B:5C:BE:89:EE:09:44:6C
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       356DA2E7
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/ETZHbrEd9djyQM00S1y-ie4JRGw.roa
Signing time:             Sat 01 Jan 2022 15:55:16 +0000
ROA not before:           Sat 01 Jan 2022 15:55:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62201
IP address blocks:        93.159.183.0/24 maxlen: 24
                          93.159.188.0/24 maxlen: 24
                          93.159.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896377575 (0x356da2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  1 15:55:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1136476eb11df5d8f240cd344b5cbe89ee09446c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:c2:4c:60:21:ba:3c:28:19:27:1e:d4:bf:
                    8e:9f:65:e2:99:92:31:3f:3a:aa:5f:06:0f:a9:22:
                    8b:57:fa:45:ff:77:69:30:71:ac:85:a9:98:51:b3:
                    cc:2a:12:04:8e:ec:46:c7:8f:dc:64:b7:7f:50:d2:
                    59:d1:f8:6b:76:3a:bb:19:e6:ca:7a:09:2d:b8:84:
                    40:ea:5c:de:52:07:e1:15:4b:c5:bb:16:e0:45:e9:
                    ef:f1:8a:d3:f7:9e:c3:da:ce:bb:e1:d9:31:f8:84:
                    9f:38:b0:10:e6:57:3d:b2:f7:79:ad:8e:64:43:58:
                    f9:c5:eb:c8:a3:48:e0:16:b1:c6:59:c3:be:e1:d6:
                    cb:58:62:ca:9b:ca:69:18:da:62:ac:51:86:cc:9e:
                    c6:13:bc:f6:c1:c2:97:d9:d6:14:32:c5:f5:84:f6:
                    f9:ae:25:61:36:5a:c8:7f:aa:2c:ed:d1:d6:17:3a:
                    9e:00:db:b8:72:8e:9a:d8:8a:00:f0:19:59:01:30:
                    3f:b1:ea:c5:55:fc:73:6f:eb:e3:25:0f:c2:9a:c4:
                    0b:1c:9b:31:9d:db:ef:17:b5:9a:d5:27:03:20:18:
                    3c:93:00:ba:5f:7c:89:8a:da:5e:1d:64:ca:9f:52:
                    9c:5e:96:ff:8a:2b:65:74:a5:96:41:ca:82:1e:a8:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:47:6E:B1:1D:F5:D8:F2:40:CD:34:4B:5C:BE:89:EE:09:44:6C
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/ETZHbrEd9djyQM00S1y-ie4JRGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.183.0/24
                  93.159.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:bc:6c:10:0c:87:72:68:59:97:0f:6d:be:da:61:dc:bd:
         1d:98:ac:fd:a1:25:57:c3:73:fc:d0:64:b0:1f:9f:02:9c:60:
         38:30:e1:ef:09:eb:8a:25:5a:87:88:10:d9:33:d2:75:08:18:
         99:2e:80:40:86:12:b5:66:c1:47:47:76:b1:cd:6f:76:92:73:
         ac:fe:12:f7:f9:6f:00:85:5f:a9:cf:52:42:4e:38:4a:f3:45:
         99:25:78:49:18:a3:58:f9:ce:41:50:b5:c7:ab:a9:cb:e9:97:
         a1:eb:99:b7:4a:01:01:07:eb:9a:bb:31:bc:19:9e:f4:fc:80:
         ff:62:73:2a:8f:41:a7:aa:57:d8:b6:d8:2d:9d:b9:24:0f:9f:
         dd:2f:d9:54:8f:3e:94:a2:25:77:28:88:91:86:ab:63:5d:99:
         61:ca:28:01:8d:4d:0b:3c:78:ab:df:08:7e:f8:ed:aa:60:97:
         72:bf:80:79:70:60:ee:5f:3f:dd:f2:a6:b8:45:6d:1c:bd:89:
         53:3d:f9:6f:58:a3:61:e7:ba:75:a0:08:a2:d5:8e:0b:e1:c8:
         dd:1f:7e:55:22:bd:fa:7f:af:60:0c:de:14:ec:e0:1d:14:a0:
         e7:12:b6:7f:b5:bd:48:17:cb:a8:7d:0d:6c:a0:0a:89:a8:f2:
         6b:bb:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:44 2024 by rpki-client on console-ams.rpki-client.org