Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/7WB2ebEdiMFg0yQjb4ikGU7oPJ8.roa
File:                     7WB2ebEdiMFg0yQjb4ikGU7oPJ8.roa (raw, json)
Hash identifier:          F39KrBcaMeOuUggm9Z1GCzwoytgSNOZZU/U+WMiO7tA=
Subject key identifier:   ED:60:76:79:B1:1D:88:C1:60:D3:24:23:6F:88:A4:19:4E:E8:3C:9F
Certificate issuer:       /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial:       0AAC3EA9
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/7WB2ebEdiMFg0yQjb4ikGU7oPJ8.roa
Signing time:             Sat 01 Jan 2022 04:57:48 +0000
ROA not before:           Sat 01 Jan 2022 04:57:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44863
IP address blocks:        193.138.246.0/24 maxlen: 24
                          193.138.245.0/24 maxlen: 24
                          193.138.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179060393 (0xaac3ea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
        Validity
            Not Before: Jan  1 04:57:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed607679b11d88c160d324236f88a4194ee83c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:50:3d:cc:b6:59:d7:25:96:5c:bf:20:23:
                    da:b0:bf:75:38:e9:9e:24:ef:de:9e:0a:f7:70:36:
                    89:f1:40:ea:35:0e:8c:16:49:67:00:42:5e:70:f8:
                    f3:3b:ad:c6:c6:bd:3a:36:28:e6:80:5b:2a:48:cd:
                    68:a1:b0:20:d4:7f:5c:e7:4a:93:0a:e8:64:fe:52:
                    17:8f:f4:5a:e4:d1:32:ef:25:09:ce:a1:cf:91:6b:
                    5d:09:72:af:69:08:88:8a:ce:74:dc:42:58:2f:64:
                    e7:8c:bd:a9:17:00:4e:e0:81:9a:c8:4d:1c:03:3c:
                    fc:b5:f5:47:2f:95:6c:f0:77:de:37:b1:ae:10:63:
                    c9:3d:26:e0:e4:23:60:04:20:7f:03:1a:3b:ef:c2:
                    d8:67:15:61:4c:07:ac:38:fa:6f:f4:91:b9:ed:b7:
                    d8:90:a6:54:c2:ef:0d:f0:13:bf:c4:94:2f:13:06:
                    a8:2b:68:0b:50:50:7f:62:93:49:fe:74:4e:2a:99:
                    d9:da:75:29:8c:65:fa:57:ac:d8:93:ad:2c:57:68:
                    05:58:01:89:ef:2b:28:3d:65:06:8d:46:d1:32:fe:
                    55:9e:bb:b3:f8:f1:7f:bd:de:35:50:f5:42:65:ce:
                    00:c8:1e:6f:0d:b6:7a:ab:68:7b:18:6d:ba:0a:ed:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:60:76:79:B1:1D:88:C1:60:D3:24:23:6F:88:A4:19:4E:E8:3C:9F
            X509v3 Authority Key Identifier:
                keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/7WB2ebEdiMFg0yQjb4ikGU7oPJ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.245.0-193.138.247.255

    Signature Algorithm: sha256WithRSAEncryption
         32:15:02:c1:43:37:01:59:5f:c1:1a:25:bd:13:d8:44:87:59:
         01:41:f3:ff:31:3d:c7:75:37:4b:8e:1a:37:a1:27:f5:80:fa:
         8d:e5:f3:e6:8d:33:9d:87:a9:45:ae:60:da:a6:c1:2a:41:c3:
         1e:65:b4:6b:1b:0f:f6:4a:ea:f5:f5:c2:70:29:ce:d5:2c:ef:
         b1:b9:03:36:10:2e:04:ba:94:1c:1b:af:1d:b3:18:05:7b:a9:
         7e:e3:b3:92:9d:2a:46:b2:63:35:55:e1:ab:a8:0a:a1:d6:7a:
         0c:94:8a:d7:8f:4f:03:86:2a:98:7f:0e:ad:57:03:3b:93:56:
         30:af:51:67:41:70:f5:c8:f1:b7:85:a7:6e:7d:5f:61:0a:fa:
         04:31:3d:f1:12:11:e8:91:47:ae:58:f2:84:79:0a:9f:4f:61:
         2e:c1:ce:78:11:6f:30:37:5d:90:5f:d4:b0:c5:18:0a:ea:e9:
         ed:36:5d:27:d1:d4:8c:4b:b1:80:62:0c:9a:91:99:e3:e9:e6:
         58:6d:86:86:03:92:22:71:40:7a:da:d0:3e:b7:f1:2b:b3:7a:
         7e:9d:51:49:31:24:fe:f0:a6:77:44:f3:ed:cc:c5:ac:10:fa:
         5a:ba:23:53:58:60:48:97:7a:84:49:53:d7:aa:d0:16:87:8b:
         c6:f0:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:42 2024 by rpki-client on console-ams.rpki-client.org