Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/5QTEZQ8xMIOCHQwxNpM-dQursXI.roa
File:                     5QTEZQ8xMIOCHQwxNpM-dQursXI.roa (raw, json)
Hash identifier:          WwfibsV+jQ/4V9dIQfLn4X/tlUi6HLes9pZNDNtNhQw=
Subject key identifier:   E5:04:C4:65:0F:31:30:83:82:1D:0C:31:36:93:3E:75:0B:AB:B1:72
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       04442306
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/5QTEZQ8xMIOCHQwxNpM-dQursXI.roa
Signing time:             Sat 26 Feb 2022 21:47:22 +0000
ROA not before:           Sat 26 Feb 2022 21:47:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58224
IP address blocks:        93.126.30.0/23 maxlen: 23
                          93.126.27.0/24 maxlen: 24
                          93.126.38.0/24 maxlen: 24
                          93.126.37.0/24 maxlen: 24
                          93.126.32.0/24 maxlen: 24
                          93.126.45.0/24 maxlen: 24
                          93.126.50.0/23 maxlen: 23
                          93.126.48.0/24 maxlen: 24
                          93.126.46.0/23 maxlen: 23
                          93.126.58.0/23 maxlen: 23
                          93.126.57.0/24 maxlen: 24
                          93.126.52.0/22 maxlen: 22
                          93.126.60.0/24 maxlen: 24
                          93.126.16.0/24 maxlen: 24
                          93.126.14.0/24 maxlen: 24
                          93.126.12.0/23 maxlen: 23
                          93.126.24.0/24 maxlen: 24
                          93.126.23.0/24 maxlen: 24
                          93.126.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71574278 (0x4442306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Feb 26 21:47:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e504c4650f313083821d0c3136933e750babb172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:f7:54:80:ed:93:50:fd:32:d2:b1:3b:7f:
                    21:95:af:5a:6b:9e:61:05:f3:8d:27:22:68:b4:9e:
                    f7:dd:c7:f9:ed:71:08:af:66:6f:45:53:55:a4:47:
                    e3:17:6c:47:c2:d0:03:aa:17:fa:09:34:a0:57:b9:
                    10:d7:05:55:38:5b:74:73:77:cc:d9:ba:b9:d9:10:
                    43:bf:a3:25:9f:c8:25:14:06:e2:75:76:89:b1:a2:
                    ab:9e:21:9a:3d:c3:e4:1f:3c:7a:66:b3:09:2f:19:
                    ae:54:91:3c:de:5e:d1:eb:3c:8b:d8:c4:8e:fa:cd:
                    53:04:82:fa:5c:b1:7c:88:28:ce:c0:0a:80:af:b9:
                    b6:17:69:21:a7:d2:ee:4e:dd:68:4c:51:d6:e3:02:
                    28:cf:84:04:ed:9f:3c:ea:e2:a4:4c:33:7b:d4:66:
                    d0:e7:e0:73:3f:40:2c:ef:e2:2e:5f:38:33:8d:e8:
                    ac:b8:b4:e1:a9:5d:eb:ea:37:eb:12:b6:91:3a:7a:
                    20:63:25:9b:d1:5f:d6:ce:a2:9b:93:a7:1f:af:ad:
                    49:9f:59:b2:42:34:2a:ee:fd:34:70:a3:ce:0a:25:
                    b2:bd:97:15:8e:66:6b:ad:b2:ca:59:c0:a8:2a:80:
                    65:5e:ce:0d:ea:27:65:3b:02:cf:b9:7f:bf:83:da:
                    2d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:04:C4:65:0F:31:30:83:82:1D:0C:31:36:93:3E:75:0B:AB:B1:72
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/5QTEZQ8xMIOCHQwxNpM-dQursXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.12.0-93.126.14.255
                  93.126.16.0/24
                  93.126.18.0/24
                  93.126.23.0-93.126.24.255
                  93.126.27.0/24
                  93.126.30.0-93.126.32.255
                  93.126.37.0-93.126.38.255
                  93.126.45.0-93.126.48.255
                  93.126.50.0-93.126.55.255
                  93.126.57.0-93.126.60.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:4c:e4:fc:f3:dd:fa:7b:a2:1c:4b:ac:4b:59:50:f2:e7:
         36:1a:3e:3f:89:61:bf:50:8e:cd:ef:e3:5a:c6:2f:80:41:f1:
         28:83:0d:e5:c5:23:60:4d:1d:00:fe:c4:7b:32:88:7c:e3:a5:
         ea:4d:8d:41:ed:db:4a:69:cd:f4:f4:c0:4d:6f:49:e7:24:ed:
         de:ea:2c:5a:47:ac:f7:0e:b5:f0:79:e2:c4:8b:a1:49:a0:ea:
         75:e5:93:c1:2f:b9:3f:d7:cd:a6:84:4f:24:d1:1e:e1:c7:79:
         6f:07:26:f1:0d:3f:f1:d2:79:1e:93:18:fc:80:41:f3:e5:d2:
         df:f2:49:2c:4c:4d:20:22:fd:9a:31:84:c7:1d:f9:59:68:3f:
         1c:f6:c6:a5:b3:6a:80:70:fd:6d:d2:3c:df:f4:09:a5:22:4f:
         62:40:93:ef:0b:f9:0c:0f:ee:a3:42:56:d1:2c:0a:48:70:fb:
         08:cc:54:c6:03:b9:9e:c5:79:9d:7d:9a:2b:eb:ce:52:25:98:
         fa:84:68:84:a4:0a:df:37:ad:fd:3a:f9:8f:ba:29:0e:4e:3c:
         33:a0:c8:e2:68:dc:20:b9:02:79:80:98:07:8f:f9:7a:9b:f4:
         91:2d:f7:1f:1b:f0:66:23:c2:31:8d:ec:0a:d2:1e:d7:3e:f8:
         f2:37:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:00 2024 by rpki-client on console-ams.rpki-client.org