Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/6absBUU_iNhJebdDSZuwbUW-SAc.roa
File:                     6absBUU_iNhJebdDSZuwbUW-SAc.roa (raw, json)
Hash identifier:          KtP2RVszHucF73vXzywfjBcnhAKN6Oj7om/P3PytKRE=
Subject key identifier:   E9:A6:EC:05:45:3F:88:D8:49:79:B7:43:49:9B:B0:6D:45:BE:48:07
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       18125B
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/6absBUU_iNhJebdDSZuwbUW-SAc.roa
Signing time:             Sat 01 Jan 2022 00:52:53 +0000
ROA not before:           Sat 01 Jan 2022 00:52:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50096
IP address blocks:        193.104.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577563 (0x18125b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: Jan  1 00:52:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9a6ec05453f88d84979b743499bb06d45be4807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:a4:64:8f:6d:4e:24:35:1b:67:b0:48:fb:
                    f3:33:67:f4:15:e0:65:ac:77:e7:44:6f:7b:6d:69:
                    3b:c3:47:26:97:fc:2f:7d:92:4f:b9:a7:b9:1a:2b:
                    09:bf:bc:52:b1:70:b9:e9:de:b1:51:ba:a2:92:f3:
                    63:c8:2e:92:4a:ec:21:ea:56:59:18:6c:5f:8c:2e:
                    57:25:bc:af:ba:5e:7e:79:93:e6:86:5b:57:ef:67:
                    93:85:b1:53:bb:01:97:55:e6:3d:f8:00:99:ee:37:
                    fc:72:75:35:b2:08:11:1e:c9:02:48:8a:6e:09:8b:
                    31:8a:8e:8a:e8:68:31:fd:c0:e6:a9:dd:8d:1f:4c:
                    ff:9f:76:ef:3a:e7:e4:8c:8c:92:cb:8b:c8:f6:24:
                    5b:af:2d:8b:60:a0:4e:44:6a:77:c8:f3:50:da:de:
                    b9:d7:75:6b:61:a1:08:2e:d4:97:02:8f:d5:ec:92:
                    da:a3:94:f8:52:a3:d3:d4:12:a2:08:e4:c5:29:39:
                    b2:d4:bd:10:76:76:be:20:9c:3b:23:95:de:7a:32:
                    75:90:93:0e:2b:c6:2b:a6:4c:c3:4f:21:41:42:49:
                    cb:8c:7a:79:ec:d7:5a:c6:75:c4:ae:9f:5c:9a:b1:
                    ce:d4:82:c6:6b:cb:b2:7e:65:ec:62:d2:19:ff:1b:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:EC:05:45:3F:88:D8:49:79:B7:43:49:9B:B0:6D:45:BE:48:07
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/6absBUU_iNhJebdDSZuwbUW-SAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:25:af:6f:97:39:b4:d5:b7:1b:e5:65:61:3e:cf:ae:82:
         26:0c:fa:a2:d1:6f:d2:c4:8a:68:52:73:b4:8d:d9:72:70:ce:
         47:b6:cd:fc:5d:78:68:aa:06:7e:b4:e7:95:41:ca:b0:73:f3:
         f8:12:58:46:3b:3d:2e:7d:d9:2b:a0:c1:9d:37:83:e5:0f:49:
         9c:62:fe:bb:0e:dd:59:68:25:03:d9:43:f3:a8:62:92:e5:aa:
         00:48:0e:1b:cf:a6:0c:c0:2d:90:c1:9e:f0:b2:7e:b0:c1:06:
         92:3d:d1:1e:e6:9a:e9:14:53:cc:0e:c8:7f:81:f6:1e:c6:d8:
         c1:27:16:e0:c0:d0:7a:b6:8b:17:48:02:01:4b:74:30:93:fd:
         91:df:92:94:78:8d:45:db:68:4f:89:7f:b7:5b:e4:a9:01:cd:
         70:0d:43:ff:94:13:d0:ac:d6:d3:f9:52:c5:6d:e1:6b:91:c3:
         b8:78:1d:b4:98:25:9f:ac:8e:c9:2a:93:a0:f1:9e:a7:b8:53:
         89:30:9b:51:10:64:67:33:f5:d6:ba:fe:f0:b3:7b:c8:bc:50:
         39:b6:ba:1f:8b:5b:7f:ea:86:c7:07:04:35:b6:22:c1:3e:79:
         b9:8f:bb:e9:dd:8e:aa:f7:b5:66:e4:85:a8:0c:a7:7c:12:66:
         42:3f:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:44 2024 by rpki-client on console-fra.rpki-client.org