Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/fB5KrMPa_VauMvwZ_jueRJn3d84.roa
File:                     fB5KrMPa_VauMvwZ_jueRJn3d84.roa (raw, json)
Hash identifier:          Wozfz1FUbo3r9r0dAllg/cSmqTPC3v9EQka09Qod3h8=
Subject key identifier:   7C:1E:4A:AC:C3:DA:FD:56:AE:32:FC:19:FE:3B:9E:44:99:F7:77:CE
Certificate issuer:       /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial:       080FFE22
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/fB5KrMPa_VauMvwZ_jueRJn3d84.roa
Signing time:             Sat 01 Jan 2022 06:57:49 +0000
ROA not before:           Sat 01 Jan 2022 06:57:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42724
IP address blocks:        93.177.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135265826 (0x80ffe22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
        Validity
            Not Before: Jan  1 06:57:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c1e4aacc3dafd56ae32fc19fe3b9e4499f777ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d8:29:e0:63:d5:10:4b:de:b8:54:e0:57:c2:
                    4d:13:71:ad:da:66:52:2b:61:79:66:31:eb:d0:46:
                    5e:5f:db:11:0b:13:09:39:f1:ab:40:7d:9f:f2:7a:
                    e7:4d:f1:11:5f:0d:8a:53:fc:27:98:38:66:03:aa:
                    7f:e5:66:c9:89:e0:5e:87:08:68:71:35:13:2d:dd:
                    23:46:66:8c:48:7e:6b:ef:7e:85:1b:97:ef:dc:db:
                    5d:56:cb:d0:3c:13:19:74:0c:26:80:0d:c1:3e:c1:
                    79:20:2c:46:42:d3:4a:4a:8a:95:aa:27:e2:f8:9d:
                    ff:b9:01:0c:8a:88:08:1e:04:85:d1:c9:5f:de:d3:
                    a0:69:ab:f7:05:93:25:bc:94:f6:4b:b8:85:01:a3:
                    28:e0:c7:ab:18:30:e3:2f:2b:d4:0b:53:51:a8:73:
                    82:3b:ee:aa:70:5a:ce:22:dd:9c:fb:52:97:d5:de:
                    c3:22:b7:3c:10:10:ba:37:67:35:ce:45:ef:dc:34:
                    9d:70:68:c8:c8:43:16:0e:9a:32:24:4d:72:2f:3d:
                    4d:bd:92:97:3b:5f:37:53:de:90:d6:f8:54:ba:93:
                    d7:20:5a:06:51:c9:af:85:60:82:9b:73:07:9f:bf:
                    b5:eb:87:ed:b0:3f:b3:30:b9:76:b7:2e:3d:5a:14:
                    70:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1E:4A:AC:C3:DA:FD:56:AE:32:FC:19:FE:3B:9E:44:99:F7:77:CE
            X509v3 Authority Key Identifier:
                keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/fB5KrMPa_VauMvwZ_jueRJn3d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:c7:b7:c4:49:9f:ad:b1:4c:49:c1:d6:85:95:83:e8:1d:
         4f:ca:a4:50:97:a4:ff:e1:5b:e4:72:1f:ef:c8:cb:fe:48:69:
         11:29:d8:62:92:7a:62:be:16:aa:d5:3e:cd:49:dc:ac:1f:dd:
         17:63:54:ce:36:09:b5:a6:21:30:60:d7:d3:3f:89:88:a1:20:
         a7:9a:fa:41:3f:7d:c0:db:35:fe:10:c7:17:63:79:fb:03:aa:
         66:15:02:0b:57:60:bf:e2:f2:78:a1:45:f7:95:9f:da:65:28:
         f0:6f:6c:23:7e:63:3b:d6:19:df:70:57:4d:af:52:6c:0a:37:
         c8:3e:08:95:80:b1:d0:51:d4:59:ea:f8:52:c7:db:55:01:46:
         3d:f9:b3:9a:0d:02:26:09:f0:5f:b7:8e:45:01:a7:13:0a:b1:
         82:32:af:6a:2d:43:a4:56:75:4c:d6:42:1d:ac:1d:3b:3e:a7:
         03:90:08:6a:f3:74:52:52:f6:c8:81:e4:9e:6d:6c:05:d4:d9:
         3b:0a:e7:03:0d:d8:67:e5:61:5a:24:58:61:f4:ee:3b:c0:2d:
         d1:88:2b:39:e7:01:62:4a:eb:e5:0f:be:bd:6b:99:ec:40:fc:
         32:cb:4a:11:ab:17:77:ef:4d:4e:08:5f:78:47:77:c2:40:eb:
         2c:ea:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org