Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/V4e93ZlOFFriXMbs2f45nKVSoZA.roa
File:                     V4e93ZlOFFriXMbs2f45nKVSoZA.roa (raw, json)
Hash identifier:          dT1ul+z7Usq9WruhI8/+VK+1ywN3q0uKQxQCHr8h8vI=
Subject key identifier:   57:87:BD:DD:99:4E:14:5A:E2:5C:C6:EC:D9:FE:39:9C:A5:52:A1:90
Certificate issuer:       /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial:       05A0B489
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/V4e93ZlOFFriXMbs2f45nKVSoZA.roa
Signing time:             Sat 01 Jan 2022 01:59:04 +0000
ROA not before:           Sat 01 Jan 2022 01:59:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        91.102.232.0/21 maxlen: 24
                          91.102.239.0/24 maxlen: 24
                          91.102.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94418057 (0x5a0b489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
        Validity
            Not Before: Jan  1 01:59:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5787bddd994e145ae25cc6ecd9fe399ca552a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:a6:23:b1:72:bb:83:cc:87:23:64:0c:38:
                    1c:63:94:40:ce:55:b7:5e:fe:b7:21:97:1b:11:d7:
                    0a:e5:e8:82:44:4b:9b:18:5b:b1:0d:50:4a:1e:ba:
                    98:53:d7:68:7a:28:95:79:1c:66:17:21:15:fb:2a:
                    91:14:96:7b:2e:66:69:2c:85:2a:1e:8f:fe:0f:cd:
                    87:34:70:36:c1:58:3d:27:59:ba:53:f6:4a:1e:a6:
                    55:9e:eb:31:00:cd:e8:12:72:73:5c:d3:0b:81:f6:
                    87:32:19:12:2a:31:d7:18:7c:da:ca:70:c9:50:b8:
                    c2:af:d6:c6:8f:6f:c3:52:44:5f:ad:3d:df:df:8f:
                    e8:9e:11:63:22:a3:35:8f:be:c0:2a:4e:a3:b0:b6:
                    09:b8:53:2f:cc:57:28:ff:2f:4c:b6:e9:f2:b7:1d:
                    cd:57:5b:f8:ec:36:eb:89:94:a6:cf:5f:40:cd:02:
                    a4:79:ea:f7:ea:af:65:aa:68:63:27:a2:59:cd:76:
                    91:67:f6:5d:11:3d:93:4c:f2:43:b3:4a:ed:59:cd:
                    9f:23:60:1d:ac:57:69:0f:0c:3f:b5:93:4c:2a:3e:
                    db:2a:2a:fa:ec:e5:88:25:41:46:84:4a:fb:4c:7e:
                    8b:ec:12:cb:99:32:05:14:bd:97:c8:02:45:74:38:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:87:BD:DD:99:4E:14:5A:E2:5C:C6:EC:D9:FE:39:9C:A5:52:A1:90
            X509v3 Authority Key Identifier:
                keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/V4e93ZlOFFriXMbs2f45nKVSoZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.102.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:3b:88:db:8b:19:81:b1:eb:8a:da:31:e2:6f:61:2b:70:e3:
         9e:33:20:18:fc:b8:a5:99:f7:74:69:4d:e8:45:76:ab:81:d8:
         8c:d4:99:6e:5c:fe:2e:13:c0:50:f5:56:26:a4:42:33:4e:45:
         99:67:35:71:eb:04:ec:fe:10:0f:88:23:06:90:72:8a:19:c5:
         ad:58:b1:d9:cc:c7:12:7b:a9:97:ba:f4:e1:da:c1:73:37:b7:
         ac:51:da:4b:39:5c:ad:ee:87:0c:a3:b2:67:de:40:b1:de:64:
         c6:e0:91:b5:6a:7a:aa:28:a5:d9:95:59:45:47:42:0b:51:d1:
         d5:2e:99:01:dc:f7:f3:95:40:14:df:83:11:79:80:07:18:d1:
         c1:e3:1c:53:2a:de:95:ee:f7:f0:86:82:bc:c0:ca:cc:ca:e5:
         a9:ac:47:6d:21:e0:4b:4a:fa:fc:40:dc:15:d1:2f:89:39:47:
         9e:a5:ee:02:a6:46:38:ae:66:62:ad:26:66:8b:8f:91:ef:4c:
         eb:b6:3b:db:32:b9:fb:7b:3c:8f:cc:9f:8b:28:88:6f:8a:f0:
         69:e1:a1:c4:1c:cf:26:5d:d3:9c:72:f7:ee:b5:2c:c2:3a:80:
         5e:8b:9d:bb:ba:8e:82:3b:16:60:ce:9a:ed:09:30:7a:69:cd:
         8f:47:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:20 2024 by rpki-client on console-ams.rpki-client.org