Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/6K4T36EzOnpyP_6HEefHnZXjz9s.roa
File:                     6K4T36EzOnpyP_6HEefHnZXjz9s.roa (raw, json)
Hash identifier:          ya9MjGCMCGanq1S5iOzLH+9BAHcJFQ6ORzMbfoqtHC4=
Subject key identifier:   E8:AE:13:DF:A1:33:3A:7A:72:3F:FE:87:11:E7:C7:9D:95:E3:CF:DB
Certificate issuer:       /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial:       02ED3BF9
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/6K4T36EzOnpyP_6HEefHnZXjz9s.roa
Signing time:             Sat 01 Jan 2022 01:54:09 +0000
ROA not before:           Sat 01 Jan 2022 01:54:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31396
IP address blocks:        193.30.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49101817 (0x2ed3bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
        Validity
            Not Before: Jan  1 01:54:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8ae13dfa1333a7a723ffe8711e7c79d95e3cfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1d:a7:b2:24:75:8e:15:07:19:fd:b4:11:ed:
                    ef:fe:1d:b9:d6:e9:70:14:5d:14:34:f7:14:f8:a8:
                    3b:db:5d:d9:64:4b:c9:40:ce:64:47:c1:46:e6:57:
                    fa:61:f0:23:5c:d1:47:93:7c:52:09:03:97:2d:39:
                    8d:f3:7c:7f:ac:d4:45:95:a4:58:54:67:5e:ac:41:
                    9d:84:c3:be:b3:c4:4c:df:e3:79:17:37:a9:05:3f:
                    91:7b:d0:7b:54:5b:26:e4:e4:b2:5b:7f:57:c8:99:
                    f1:3a:58:36:2a:90:03:62:cd:fa:c3:77:96:1b:bb:
                    02:e9:b9:5b:95:75:3f:a5:2b:d7:65:60:c7:7b:02:
                    2e:cb:81:1f:b2:49:6a:cb:81:25:bb:9a:50:94:52:
                    73:49:0a:ce:b0:c4:ae:5f:50:c3:00:2e:dd:22:11:
                    67:00:5a:f7:85:23:33:c0:f7:35:0d:f0:a1:bc:ad:
                    db:2f:2b:2c:90:3f:78:a8:b8:d8:a0:07:06:95:0f:
                    07:ae:5c:be:66:9c:0c:fc:8a:00:ed:9a:f0:92:3f:
                    04:31:58:59:50:9c:16:ce:9f:ca:c8:cc:b9:64:45:
                    7c:33:67:8f:66:fc:80:90:26:4f:d7:ef:ef:83:a7:
                    09:32:89:f1:3f:af:a7:d6:8f:ab:6d:bf:be:19:53:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:13:DF:A1:33:3A:7A:72:3F:FE:87:11:E7:C7:9D:95:E3:CF:DB
            X509v3 Authority Key Identifier:
                keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/6K4T36EzOnpyP_6HEefHnZXjz9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:b3:2b:8c:87:5b:65:8f:70:bf:51:ee:b3:43:0a:eb:98:
         5e:63:8f:8d:20:ef:e8:5a:4a:3d:d4:77:52:79:3c:8d:fb:a7:
         63:a6:a8:8f:c6:34:59:d7:03:eb:74:b2:8e:a4:05:91:c5:e5:
         58:fd:05:d2:2c:4d:d5:18:55:a5:55:80:58:95:fb:65:41:68:
         7c:5b:cf:4c:37:8d:64:59:9d:77:fb:2f:e0:50:93:3f:86:46:
         2f:c4:f0:cd:c2:71:27:cd:0f:7a:62:00:8b:59:12:f1:91:7f:
         c5:2a:33:1e:3a:b1:f8:75:15:89:77:cc:cc:0e:dc:05:86:39:
         46:ab:79:ae:52:56:20:cd:af:f0:40:37:24:e4:dd:de:66:81:
         05:37:39:1a:63:c1:a9:de:8d:7a:57:c3:3d:ee:04:79:08:b9:
         89:ef:75:c4:1e:72:90:27:da:8f:0c:a2:26:d3:c0:38:a6:0e:
         29:d3:39:86:35:b6:51:d0:21:5b:ad:f0:19:ef:f5:b4:53:0d:
         1a:04:ae:17:c1:18:0c:f9:7f:a4:9a:58:0a:12:88:5a:0f:5b:
         24:64:fb:b1:ba:c6:da:c1:40:6a:71:07:b3:db:cf:52:cd:9b:
         c9:f4:d9:6b:94:57:9c:d7:93:a5:ca:e1:8e:53:7f:70:c4:2c:
         2c:11:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:26 2024 by rpki-client on console-fra.rpki-client.org