Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa
File:                     jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa (raw, json)
Hash identifier:          FkyyMr65AIH8qKUfqOlCzmhpmm7m5wnRLUf/gUj/isw=
Subject key identifier:   8C:A2:C6:25:75:09:B7:F9:CB:90:B0:DB:FD:40:3A:B7:04:AF:FD:9A
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       17D8467D
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa
Signing time:             Thu 24 Feb 2022 19:00:45 +0000
ROA not before:           Thu 24 Feb 2022 19:00:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210876
IP address blocks:        193.57.164.0/23 maxlen: 23
                          193.57.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400049789 (0x17d8467d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Feb 24 19:00:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ca2c6257509b7f9cb90b0dbfd403ab704affd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:40:47:65:c1:20:9b:03:d9:69:26:ad:7a:
                    80:e8:17:1a:ed:b6:e4:7c:29:2b:fc:64:fb:a0:bf:
                    84:7d:1f:d6:59:72:ad:66:cb:ce:28:d8:7d:9e:3b:
                    fa:d3:fb:a5:c2:86:e4:70:47:89:fb:f6:47:43:f5:
                    30:4a:64:42:c4:ef:3c:3a:75:a3:1d:7c:d5:cf:98:
                    24:a3:3c:2b:db:e1:be:b6:b0:e3:61:a1:bc:f6:b1:
                    61:c5:62:06:b4:a6:6b:74:e2:57:2c:91:28:b2:03:
                    00:0f:3a:d2:66:7b:4c:c4:d6:79:e7:2b:d6:41:77:
                    5a:4c:71:72:e6:44:a8:4e:66:1d:a2:b2:8b:90:a2:
                    0f:88:e7:5e:6c:ab:b5:d8:cc:7d:f7:54:ba:9e:6d:
                    19:d4:e7:34:02:35:0e:bf:73:d2:e4:fa:26:6b:c4:
                    ee:41:da:f8:7b:31:68:05:66:62:69:f5:31:85:2c:
                    77:1e:74:76:cd:28:01:8c:5d:76:d5:3e:72:d9:be:
                    15:e9:fa:50:1e:53:ae:6e:66:a0:01:ed:96:27:9d:
                    bb:79:20:b6:e0:d0:46:c6:ba:55:2c:78:d8:80:bb:
                    0a:28:e5:ed:2b:e3:de:3c:0d:e0:e0:20:35:22:65:
                    35:26:e7:60:6f:29:3a:0b:e9:86:f1:2a:22:57:93:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A2:C6:25:75:09:B7:F9:CB:90:B0:DB:FD:40:3A:B7:04:AF:FD:9A
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:25:e5:6e:c7:4b:1b:9a:fe:98:a8:f6:03:87:ab:26:01:70:
         72:c6:ae:50:af:e7:89:89:a0:55:43:77:34:27:aa:39:f3:67:
         b5:85:cf:03:c2:90:6a:69:3e:9f:ef:f3:6c:a9:d4:6c:07:51:
         a6:9f:3c:03:e7:b2:60:3c:ad:89:be:39:7e:b7:f1:e5:7d:32:
         3b:46:e6:a3:60:36:68:06:09:6d:fc:4c:85:97:36:7b:28:02:
         e6:70:a1:fe:08:35:2b:1c:4e:cf:a1:75:20:4c:52:dd:04:e8:
         9a:98:f8:db:b3:5a:cb:90:2f:3a:7d:f4:2b:ac:f0:c8:2c:25:
         67:a6:16:2a:4c:67:36:6f:3a:8c:3b:10:97:2c:6c:0c:c8:d8:
         42:a4:6c:03:e4:81:e1:54:70:1d:8e:02:a0:51:23:d2:cd:cd:
         0a:22:55:3e:4c:19:40:76:f2:75:68:f9:48:d0:3a:e6:60:e1:
         93:32:a3:64:4e:13:62:ed:d0:92:49:53:b2:b9:a3:ad:bd:ee:
         74:28:c7:75:1c:9e:e5:aa:30:b2:0b:2e:2a:9a:0f:5d:74:f4:
         94:73:44:cc:4c:dd:b2:92:6d:67:fc:82:27:1d:ab:f0:30:99:
         41:90:54:35:2d:48:9a:4d:a4:70:e1:db:26:35:3e:9f:e0:60:
         e3:0d:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org