Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ktyWPzJYFIkM31QWfVAyci9QcGs.roa
File:                     ktyWPzJYFIkM31QWfVAyci9QcGs.roa (raw, json)
Hash identifier:          Nh7Q9AeJV6EO+/HnGoUGqt11/GaSQDBd5FmO4HJO0j0=
Subject key identifier:   92:DC:96:3F:32:58:14:89:0C:DF:54:16:7D:50:32:72:2F:50:70:6B
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       1789F0A7
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ktyWPzJYFIkM31QWfVAyci9QcGs.roa
Signing time:             Sat 05 Mar 2022 19:05:42 +0000
ROA not before:           Sat 05 Mar 2022 19:05:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        188.72.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394916007 (0x1789f0a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Mar  5 19:05:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92dc963f325814890cdf54167d5032722f50706b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:48:85:25:16:87:89:e2:01:e0:88:d6:c5:
                    8d:3b:c3:b9:7e:c8:e9:a6:c3:6d:2a:e0:34:6a:48:
                    f6:c9:cc:e7:d1:22:f6:09:43:8e:0a:24:1b:ea:28:
                    8d:c7:4d:8a:c1:71:3d:3c:eb:82:f8:04:5c:77:98:
                    b4:d0:86:f2:2f:25:f4:ca:5a:ef:36:35:64:00:9c:
                    8e:90:43:d5:74:ce:1d:9a:29:6c:76:1e:96:05:c6:
                    ec:b5:49:0c:ac:82:18:d4:c5:26:8c:69:d9:21:3b:
                    72:91:5b:43:a4:d8:ad:bc:12:eb:c6:8f:8b:06:a1:
                    06:09:f3:cd:82:da:48:5e:9d:74:2c:a3:3a:67:08:
                    1b:95:b9:ae:0c:0e:ea:00:24:04:b5:1f:40:e7:f8:
                    f5:72:2e:51:46:7c:19:10:96:af:99:8f:fa:04:84:
                    c8:05:45:e9:09:4f:be:2e:f8:35:6e:01:93:41:39:
                    08:5c:9c:4c:69:5d:e6:c7:4e:0f:2f:8d:b0:f8:f5:
                    85:3e:f2:ee:62:47:f6:f1:41:61:6c:5a:a7:6b:ca:
                    9f:76:15:ba:2d:ab:a9:c3:c7:54:27:64:3c:0a:38:
                    9c:2a:4e:74:e0:5c:46:89:1b:13:30:46:95:d5:c1:
                    39:8f:9d:cc:88:78:d8:7c:44:db:eb:c7:94:47:bc:
                    07:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DC:96:3F:32:58:14:89:0C:DF:54:16:7D:50:32:72:2F:50:70:6B
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ktyWPzJYFIkM31QWfVAyci9QcGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.72.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:e6:52:79:51:e8:a2:dc:fe:56:e6:f9:eb:b5:b6:d2:59:
         95:1f:db:0c:23:62:f3:74:1d:b4:53:6b:6c:d8:d7:2e:ef:41:
         f8:d1:cb:ed:7c:9b:21:07:2c:28:7c:3d:d5:da:99:5e:76:f1:
         a4:d5:7f:79:35:8c:ed:62:76:a2:a2:91:77:e3:a5:4c:ee:6b:
         1b:f5:d2:b5:d9:79:dd:50:97:d0:c0:aa:a1:61:70:45:eb:8b:
         47:ff:5e:ef:98:93:11:b7:ee:2d:13:2d:a8:04:15:82:1a:2b:
         87:0c:36:46:92:f7:38:7a:3a:57:a7:4c:5c:fa:64:5a:c7:bc:
         d7:9b:c1:93:bc:55:23:bd:f9:2c:14:80:12:30:63:41:33:09:
         39:1a:06:f4:08:70:ac:ab:d7:08:44:b1:3b:b0:e1:f5:75:b5:
         b8:ea:b4:62:f7:fb:c3:a2:03:bc:d3:55:13:b7:39:1b:f1:35:
         3a:e5:5a:0b:05:59:be:dd:c7:e7:8d:88:4e:ef:80:4d:33:96:
         22:5c:47:50:b5:56:7f:77:a8:10:3a:08:79:ba:86:0c:e6:70:
         bf:0f:65:a5:68:3b:3b:db:a3:6b:c6:e9:3f:c1:6a:95:0e:16:
         92:90:0a:05:28:9b:d3:0d:bf:8b:83:a7:f7:40:3e:54:e5:df:
         22:c4:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org