Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/qqWBRSc1V8w4v4mHed721A-ki1s.roa
File:                     qqWBRSc1V8w4v4mHed721A-ki1s.roa (raw, json)
Hash identifier:          T8mjLV+mLObUFqAgY6rmF5u88/4wcfCd+dnMs3mu274=
Subject key identifier:   AA:A5:81:45:27:35:57:CC:38:BF:89:87:79:DE:F6:D4:0F:A4:8B:5B
Certificate issuer:       /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial:       014DDD8A
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/qqWBRSc1V8w4v4mHed721A-ki1s.roa
Signing time:             Sat 01 Jan 2022 13:01:45 +0000
ROA not before:           Sat 01 Jan 2022 13:01:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21441
IP address blocks:        193.109.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21880202 (0x14ddd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
        Validity
            Not Before: Jan  1 13:01:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aaa58145273557cc38bf898779def6d40fa48b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:e5:89:54:d9:e8:5a:ec:b0:72:2b:9b:4c:
                    d8:db:af:41:1a:db:41:77:b6:5c:83:fb:14:df:42:
                    3e:5a:0f:e6:03:f9:f5:cf:e2:ce:0a:ad:3c:80:1f:
                    b5:fc:f2:dd:e3:c5:23:35:ba:03:c9:3b:76:28:be:
                    1f:5e:66:c5:c1:0d:a9:79:1b:54:11:cf:2f:2d:50:
                    0f:d8:27:68:34:cd:66:d1:e8:23:d0:d4:68:bf:8e:
                    72:2f:64:5d:a4:cd:d6:82:c0:67:61:5d:25:1d:c8:
                    65:e2:87:b9:f3:ec:d2:3e:63:31:43:d6:61:80:3a:
                    68:68:7d:2a:3a:4a:9f:cd:82:48:89:db:07:e4:54:
                    69:74:1f:79:38:27:f0:c8:47:87:f8:3b:a0:03:b5:
                    7e:ba:7d:c5:9a:81:88:ad:32:53:7b:25:9f:5e:96:
                    10:83:a0:24:d8:64:40:12:fb:cb:bd:c1:1d:67:79:
                    9e:41:36:b0:45:c3:3f:f2:85:bd:15:5b:97:84:70:
                    84:2b:1e:11:56:af:cb:ad:ba:98:d3:22:56:9e:42:
                    bb:90:6c:12:56:6b:e2:93:74:32:b6:6b:9f:18:0f:
                    07:7d:a5:9c:06:55:71:06:8e:2c:1f:3e:4a:34:ca:
                    20:a3:ce:c4:de:2f:2e:ac:e3:a9:a5:62:ce:77:2a:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A5:81:45:27:35:57:CC:38:BF:89:87:79:DE:F6:D4:0F:A4:8B:5B
            X509v3 Authority Key Identifier:
                keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/qqWBRSc1V8w4v4mHed721A-ki1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ac:de:a0:17:c5:15:09:bd:4e:6c:a4:dc:51:4d:b1:cb:1e:
         31:2e:5f:fe:ce:d3:d5:8f:7c:c9:bb:67:96:27:48:93:35:cd:
         77:c6:3b:76:ae:15:7f:9b:1c:ca:19:bd:65:bf:d0:7e:ed:3c:
         99:42:66:15:c3:01:dc:f6:55:3f:ae:c4:f4:f9:4b:40:de:07:
         72:33:7d:38:f3:d7:e5:d3:e5:4c:87:3f:b4:86:32:9a:93:6b:
         a6:9e:52:48:77:df:85:c4:97:df:51:8d:a7:41:31:f1:b5:6e:
         bd:01:9e:e1:b4:c1:ac:5f:90:02:13:54:19:83:e7:e8:a9:65:
         fd:8e:7e:c9:48:48:c1:13:7e:f9:08:d0:db:7f:e3:0f:eb:51:
         9b:28:3c:e8:e6:81:6f:fb:2c:43:f6:15:52:1e:9d:c4:f5:eb:
         88:68:82:3d:eb:9e:68:43:0e:3d:a6:38:bb:82:f5:ee:67:95:
         2d:94:24:cb:ec:df:90:de:9b:58:cb:79:22:d9:56:f9:a6:28:
         d3:bf:7a:97:da:e6:bc:4b:47:4c:cd:c6:e8:58:a5:70:cd:15:
         ec:0b:b7:35:19:7c:63:10:22:be:a8:c0:83:93:0b:b9:82:4b:
         a9:26:30:e7:33:3f:91:90:5a:9a:9f:4b:9c:7f:f9:ee:5f:9a:
         b7:99:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:47 2024 by rpki-client on console-ams.rpki-client.org