Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/U7q1h9FJu9PUJRI7lM5Taunf9YI.roa
File:                     U7q1h9FJu9PUJRI7lM5Taunf9YI.roa (raw, json)
Hash identifier:          eVZi3bETNgcoYXqAjGVnOdTYoDTfwjaDoB/PoP8XZIA=
Subject key identifier:   53:BA:B5:87:D1:49:BB:D3:D4:25:12:3B:94:CE:53:6A:E9:DF:F5:82
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       07DC9B06
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/U7q1h9FJu9PUJRI7lM5Taunf9YI.roa
Signing time:             Tue 12 Apr 2022 08:48:08 +0000
ROA not before:           Tue 12 Apr 2022 08:48:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47943
IP address blocks:        193.19.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131898118 (0x7dc9b06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Apr 12 08:48:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53bab587d149bbd3d425123b94ce536ae9dff582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:58:96:0a:2b:9b:38:24:45:db:17:e3:9f:
                    be:6a:c5:cc:ee:fb:1d:1c:3a:fa:fa:ed:1d:cb:c1:
                    1e:68:44:7b:83:de:84:da:7a:87:c0:8b:38:ee:1d:
                    8a:91:58:cf:9b:1d:8b:3a:ce:68:8e:9a:d5:f0:2f:
                    a5:4b:92:71:b3:1e:e5:ca:33:1d:c7:42:d7:ba:c9:
                    19:61:53:54:ad:75:48:5c:0a:e2:79:c6:95:f8:13:
                    90:81:56:ef:2e:31:84:3b:ea:18:06:5c:95:8f:b0:
                    a5:72:20:31:47:ec:e4:ae:75:18:21:0c:1c:39:57:
                    bb:29:5c:1c:3d:e9:6e:5a:79:c5:e8:c3:56:c6:f2:
                    d6:bb:56:cb:66:20:4e:e1:76:ca:cd:a4:03:53:88:
                    db:68:24:de:ab:03:bf:c1:53:45:e6:1f:e4:c9:19:
                    10:af:fe:6f:79:b0:57:fc:88:18:f3:49:b4:54:92:
                    7c:06:70:22:f8:96:00:50:32:b7:81:6d:b6:66:28:
                    73:9b:67:18:b4:60:1a:e3:d4:44:f1:3c:8a:6b:c6:
                    a8:ad:90:9b:4f:22:93:b9:c0:4b:c2:74:5b:05:02:
                    10:c1:77:41:3d:0f:ca:cf:b1:5b:22:31:9a:6f:ed:
                    82:67:69:d7:dd:2f:e9:55:eb:c7:00:4c:9c:c3:6f:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BA:B5:87:D1:49:BB:D3:D4:25:12:3B:94:CE:53:6A:E9:DF:F5:82
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/U7q1h9FJu9PUJRI7lM5Taunf9YI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:3d:2e:4a:be:ef:85:5b:dc:6b:de:f5:2c:dd:4e:c9:ae:94:
         3a:6f:b3:52:34:68:05:3f:ee:8b:e0:2d:9a:cd:6c:57:bd:0f:
         43:23:1b:ef:ff:1e:ae:f4:4c:b3:e3:a0:b2:b6:9e:0f:b9:f1:
         a2:2c:31:5b:79:99:9e:c9:8b:40:7d:1c:7b:22:3f:66:7b:97:
         ab:96:f8:15:2d:a5:47:eb:ef:a7:ae:81:9a:82:f6:66:30:b7:
         83:d9:01:86:51:ce:50:e2:3f:18:8d:47:ce:55:c2:b6:e5:0c:
         57:fe:a4:e2:30:2c:ef:7f:b4:8d:8d:11:28:57:94:45:1e:99:
         0a:c0:cb:ee:51:12:3b:cc:59:ee:13:ba:4d:cb:e7:e4:c2:33:
         4e:85:67:71:22:bd:4d:9d:6b:b3:4b:19:5f:26:98:2a:3e:ac:
         91:4f:6c:f6:92:4f:e2:2d:ef:c9:1e:72:79:e7:b5:2a:2b:6f:
         ff:5a:f1:ac:64:bf:41:d4:bc:6e:48:19:48:6c:36:f9:3a:87:
         e9:59:d1:55:8c:a8:6f:62:2e:92:1e:80:4d:99:f4:fa:6d:d5:
         b6:69:6e:05:78:69:e7:08:43:8e:fc:bb:bf:4a:a4:d6:ba:50:
         77:72:9d:19:b5:31:97:11:a7:c8:ec:db:22:eb:b7:7a:19:47:
         c6:b5:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:49 2024 by rpki-client on console-ams.rpki-client.org