Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/P3lmAJZ02piB8h1-qLwToMs-6Nk.roa
File:                     P3lmAJZ02piB8h1-qLwToMs-6Nk.roa (raw, json)
Hash identifier:          3XdWKebcdeJ449u9vbyyvuqno875/j2YjIKquHU5pVk=
Subject key identifier:   3F:79:66:00:96:74:DA:98:81:F2:1D:7E:A8:BC:13:A0:CB:3E:E8:D9
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       03C68A69
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/P3lmAJZ02piB8h1-qLwToMs-6Nk.roa
Signing time:             Sat 01 Jan 2022 06:06:29 +0000
ROA not before:           Sat 01 Jan 2022 06:06:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44400
IP address blocks:        93.126.9.0/24 maxlen: 24
                          93.126.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63343209 (0x3c68a69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan  1 06:06:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3f7966009674da9881f21d7ea8bc13a0cb3ee8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:82:57:4b:f5:df:2f:7f:48:b8:5d:09:67:
                    62:19:7c:e8:37:c1:a3:89:93:eb:7a:c1:8b:8a:54:
                    17:24:be:fb:11:07:2f:4b:7f:82:21:30:95:1a:d4:
                    06:a9:17:5b:88:c7:23:68:44:5e:73:f2:01:cc:df:
                    c5:00:5c:0d:88:fc:1b:53:d1:29:34:fb:c5:78:7e:
                    71:fb:0c:07:0b:be:32:e9:f1:e5:ab:8e:ff:67:a9:
                    b3:5e:b1:74:12:f7:a2:72:58:85:57:8a:91:8c:23:
                    50:d5:32:b6:d5:2e:3a:52:0d:d0:f7:b3:69:80:a3:
                    36:62:1a:67:51:f1:f6:99:ab:f9:4b:0a:cf:b2:85:
                    62:a7:f9:c5:47:03:8c:86:2f:dc:56:8b:b4:1b:d6:
                    50:8c:70:92:f2:fa:c6:91:62:94:9e:82:cf:2f:ea:
                    72:76:36:45:93:92:3a:50:e3:4f:17:9e:c4:0b:53:
                    71:9b:70:df:99:09:98:98:74:22:16:18:c8:38:99:
                    97:90:4a:b0:da:5f:8e:eb:2a:74:bc:9e:95:76:2d:
                    67:4d:e5:7e:6e:bf:ae:5a:99:9f:f5:d2:66:0c:bb:
                    69:e8:4f:c6:ec:44:26:c4:9a:f8:de:f6:e3:0e:d1:
                    0d:e2:79:a3:bc:0f:e5:05:dd:47:21:dc:56:fb:c3:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:79:66:00:96:74:DA:98:81:F2:1D:7E:A8:BC:13:A0:CB:3E:E8:D9
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/P3lmAJZ02piB8h1-qLwToMs-6Nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.9.0-93.126.10.255

    Signature Algorithm: sha256WithRSAEncryption
         06:49:1d:ee:80:3f:5e:57:8b:34:62:f1:13:96:83:2a:92:a5:
         a7:c9:89:3b:4f:6e:2b:c3:75:90:23:0a:d2:33:04:db:5b:4c:
         6a:4f:8e:bc:71:1f:ee:70:c7:04:20:90:5b:15:96:00:11:71:
         72:5d:4e:92:18:06:83:3a:68:e7:b1:73:1e:44:21:5f:86:a4:
         d2:5d:31:16:68:f4:25:13:f5:e7:f7:9e:fd:f5:66:1f:65:a7:
         23:ec:c7:0f:a4:4f:a8:a3:63:60:88:b8:e6:53:36:b9:cb:25:
         28:9a:16:6e:63:64:3e:ce:c8:20:cf:2b:bf:f4:cd:53:d1:c8:
         1c:55:cd:a3:f8:cb:27:f9:d9:a0:c0:62:13:95:5d:4c:15:44:
         39:f3:3e:93:07:4e:09:92:8b:fb:04:d8:96:03:06:36:01:13:
         b1:91:d9:97:94:bf:90:5c:f1:59:19:f8:6e:ab:c9:d8:72:0c:
         f6:3b:5d:28:51:1f:58:f9:00:b1:55:6e:b9:6c:43:f0:17:e9:
         5f:08:18:f6:19:8a:8f:ec:1e:8c:b8:76:e0:f2:5d:67:02:ab:
         80:4a:a2:43:72:96:b2:9b:58:5b:b9:32:d3:f3:8f:57:7b:e3:
         11:9c:64:5f:e0:05:d1:5d:b8:12:15:3f:9d:47:ec:8a:90:67:
         b7:20:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:00 2024 by rpki-client on console-ams.rpki-client.org