Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/PSYGEVT9k5ZjBrTJkb-B6EzOY6k.roa
File:                     PSYGEVT9k5ZjBrTJkb-B6EzOY6k.roa (raw, json)
Hash identifier:          V+NOssPb0dYIpinXuGW3DTweLPBeV1Wfc+K/5F+kZ0A=
Subject key identifier:   3D:26:06:11:54:FD:93:96:63:06:B4:C9:91:BF:81:E8:4C:CE:63:A9
Certificate issuer:       /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial:       0182CBA3A60573CF739A9511616C747397F1
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/PSYGEVT9k5ZjBrTJkb-B6EzOY6k.roa
Signing time:             Tue 23 Aug 2022 16:57:55 +0000
ROA not before:           Tue 23 Aug 2022 16:57:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44547
IP address blocks:        93.177.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cb:a3:a6:05:73:cf:73:9a:95:11:61:6c:74:73:97:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
        Validity
            Not Before: Aug 23 16:57:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d26061154fd93966306b4c991bf81e84cce63a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:1e:5a:93:bc:e5:e9:1e:5e:34:67:ce:7f:
                    16:9e:d3:a4:6d:d9:2b:92:4a:30:5b:84:29:b8:bb:
                    5e:a1:4c:ce:c2:c8:7d:39:37:02:3a:d3:73:18:a5:
                    12:1a:d0:69:7e:46:52:72:10:56:94:e1:44:35:c0:
                    1e:aa:c0:63:58:21:ca:98:83:b8:be:05:e8:bd:1f:
                    47:1f:6f:bd:68:dd:25:4b:05:25:75:a4:b8:ef:9b:
                    ef:47:f9:2f:f3:70:21:2e:f3:c5:34:86:2a:52:6e:
                    41:fb:bf:b3:f6:00:46:87:7b:5b:e9:e0:2c:45:32:
                    11:d2:b7:63:fb:91:2c:7c:54:df:ea:60:a3:6c:23:
                    aa:d6:94:f5:9a:fa:0c:fe:a6:d8:1f:3c:50:3b:49:
                    bf:e9:f8:28:45:be:90:36:06:a8:de:22:15:8e:7c:
                    1e:3a:f8:ad:1e:37:06:9e:21:58:fa:0b:97:1d:9f:
                    bd:f1:c9:e7:60:1b:78:8f:a0:69:dc:c9:ac:8e:14:
                    ae:97:9f:3e:ce:4d:7e:36:91:3c:c2:ee:69:05:c5:
                    1e:8c:56:f9:e1:0a:0d:a2:4a:da:1e:5b:e6:6c:dc:
                    ff:b9:b2:2a:54:7f:16:fe:4e:57:10:7d:14:f0:7d:
                    4d:1a:c8:0a:eb:d7:1a:7d:a0:33:80:84:43:2f:c6:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:06:11:54:FD:93:96:63:06:B4:C9:91:BF:81:E8:4C:CE:63:A9
            X509v3 Authority Key Identifier:
                keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/PSYGEVT9k5ZjBrTJkb-B6EzOY6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:93:12:f4:55:88:7b:2f:db:60:57:25:16:37:a7:79:82:44:
         8b:0d:ad:9d:48:d4:96:66:33:3a:e2:87:1e:8d:70:74:3b:d9:
         38:3d:6f:80:4a:42:c2:c9:78:91:88:20:39:a5:fd:c2:21:d6:
         0e:e9:2f:c4:6d:25:85:a6:a2:c0:cc:42:91:96:9a:50:35:51:
         32:04:9b:9a:0e:04:d9:3a:a7:8f:06:de:ee:8a:38:cf:cd:45:
         b4:67:c4:99:d5:b1:ec:c0:28:ac:1c:33:fc:4f:85:07:f0:aa:
         c3:a6:e6:e6:e5:14:72:09:c6:f1:23:a8:ec:1e:31:da:32:99:
         28:7c:f3:87:85:73:f4:b7:b9:0c:19:50:29:1f:f3:e0:80:74:
         9c:56:89:69:2d:a8:f6:99:4d:76:ae:b1:7e:5e:2a:a9:0f:88:
         02:6a:f2:05:1c:69:c6:b8:c5:fa:a6:b8:8f:06:d0:ec:6c:54:
         7e:a9:dd:1e:76:86:96:29:32:34:d1:6a:7a:73:54:96:a2:1d:
         8b:b3:3d:4d:6a:ab:b9:7a:13:10:b2:c5:5d:18:d8:7a:7e:70:
         13:85:8d:d2:1d:52:bd:9c:62:9a:6b:05:86:fa:c9:8f:8c:a7:
         57:a5:32:4b:3f:fa:79:15:0b:e9:e1:12:27:b7:b2:7c:86:48:
         75:d7:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org