Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jWNQ2JRhENb3x8ibO2Qktk72-_E.roa
File:                     jWNQ2JRhENb3x8ibO2Qktk72-_E.roa (raw, json)
Hash identifier:          3Ch/Oq9/sbrcey+K21uleXtow6Lj5DipebRIecLVrqM=
Subject key identifier:   8D:63:50:D8:94:61:10:D6:F7:C7:C8:9B:3B:64:24:B6:4E:F6:FB:F1
Certificate issuer:       /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial:       0702B12B
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jWNQ2JRhENb3x8ibO2Qktk72-_E.roa
Signing time:             Sat 01 Jan 2022 12:59:21 +0000
ROA not before:           Sat 01 Jan 2022 12:59:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197138
IP address blocks:        91.206.50.0/23 maxlen: 24
                          2001:67c:354::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117616939 (0x702b12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
        Validity
            Not Before: Jan  1 12:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d6350d8946110d6f7c7c89b3b6424b64ef6fbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:7d:00:b0:e5:e6:43:8b:1c:72:1f:e7:98:
                    26:02:d7:87:d9:4e:e3:3e:94:87:0b:42:81:7e:c4:
                    dc:4b:a0:4d:ce:a7:fc:13:6a:1c:d3:dd:b5:56:6b:
                    dc:82:52:5a:2a:c2:b9:07:d7:af:12:69:60:fb:bc:
                    75:70:dd:f0:21:b9:37:4c:6e:08:87:67:78:2e:5a:
                    df:32:25:6e:55:c1:03:b7:74:ca:15:9f:58:a3:b0:
                    78:90:c3:83:32:58:83:cd:a6:65:bd:f7:8e:71:98:
                    bb:db:42:44:bf:1b:c1:20:b7:64:2b:4d:9e:0d:a9:
                    37:d0:28:8e:fd:13:30:03:ab:da:98:3f:3b:4e:a6:
                    c6:47:7a:81:f8:14:4b:4d:fd:c8:c0:b3:64:29:10:
                    ac:e6:35:2b:ae:27:13:7c:96:8c:2e:6b:e5:a2:d8:
                    0c:d3:76:80:f0:7d:63:ec:9e:45:0a:34:45:b4:ac:
                    a0:07:4a:5c:5b:6f:08:da:9e:49:39:da:a5:b4:69:
                    16:35:f7:df:72:06:92:fe:fd:03:37:1b:3b:cf:77:
                    41:5b:b8:81:18:66:ee:a1:bd:e5:9e:6c:f9:b4:50:
                    1c:cb:73:6b:ab:f9:9a:0a:b6:8a:19:62:cf:82:50:
                    66:35:d8:07:67:da:23:9f:49:aa:45:d7:4a:b3:ff:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:50:D8:94:61:10:D6:F7:C7:C8:9B:3B:64:24:B6:4E:F6:FB:F1
            X509v3 Authority Key Identifier:
                keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jWNQ2JRhENb3x8ibO2Qktk72-_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.50.0/23
                IPv6:
                  2001:67c:354::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:85:84:04:eb:d0:7b:55:e6:45:0b:5d:27:7f:1b:17:90:
         32:bc:52:81:f3:73:29:2e:9b:09:4b:5e:b4:c6:33:9a:43:02:
         b5:ce:76:82:ca:e4:6f:b7:e5:24:96:27:bd:b7:6d:f8:ac:50:
         1f:0f:6d:ad:72:30:34:46:f6:69:a1:97:94:10:1b:ae:7c:8e:
         3a:74:04:69:dc:8b:b7:3f:e2:17:7d:8b:c6:1c:2c:7e:99:99:
         79:76:0f:d5:bf:00:37:42:77:cd:19:41:df:b5:f0:6b:f7:9a:
         e4:3f:fb:35:45:9a:93:40:08:e7:b6:db:aa:6b:c1:11:d7:33:
         75:d6:30:14:31:79:13:56:3a:13:04:67:a2:1d:2c:af:12:6c:
         07:a5:03:cd:15:b2:c0:93:69:67:94:a0:42:8e:1d:df:42:40:
         87:a4:e2:2b:5a:6a:59:f4:8f:92:19:bf:90:fc:3b:8c:17:8a:
         45:67:82:d3:ef:9b:c7:0d:f6:0a:ee:88:c6:e3:01:72:3b:c6:
         c4:22:b9:31:b3:0a:b0:18:22:7c:3c:12:23:7f:e8:bb:11:76:
         46:b5:e8:7f:a5:fd:eb:08:f9:5b:17:1e:02:da:24:4c:ed:6c:
         ec:1d:f0:6f:c0:ad:90:9e:f2:6a:80:fc:25:6e:37:2b:64:62:
         d0:83:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org