Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/EvjgvjEZ0NyLowbQONujK8iD41s.roa
File:                     EvjgvjEZ0NyLowbQONujK8iD41s.roa (raw, json)
Hash identifier:          DU8zzzwyyh52+yqtvnumCDhNmlPmKxq7OkFXGrOrqkM=
Subject key identifier:   12:F8:E0:BE:31:19:D0:DC:8B:A3:06:D0:38:DB:A3:2B:C8:83:E3:5B
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       018336EAA1B3000661A2F6954531755DAEEE
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/EvjgvjEZ0NyLowbQONujK8iD41s.roa
Signing time:             Tue 13 Sep 2022 12:54:49 +0000
ROA not before:           Tue 13 Sep 2022 12:54:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33844
IP address blocks:        193.232.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:36:ea:a1:b3:00:06:61:a2:f6:95:45:31:75:5d:ae:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Sep 13 12:54:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12f8e0be3119d0dc8ba306d038dba32bc883e35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:d5:14:b5:d2:c8:ff:a3:8c:41:d6:68:bd:
                    45:2d:e4:4d:11:7b:61:21:88:1b:44:61:da:27:b7:
                    49:bf:75:9c:91:0e:d9:25:e8:45:24:81:a4:6d:b2:
                    fe:0a:74:98:57:a1:cd:54:5e:8c:bc:61:dd:4c:44:
                    89:55:6d:5b:63:cc:90:3e:43:64:d6:17:b0:87:34:
                    7b:b6:83:d0:22:a6:14:5c:f9:3b:ff:55:43:e0:e9:
                    46:a6:0d:ba:03:fa:14:56:fd:da:f2:a4:f3:4b:90:
                    7c:3f:9a:51:4f:8a:4a:29:6d:75:34:58:88:4d:69:
                    a3:79:4d:7a:16:89:6d:7b:76:5e:45:65:89:be:ff:
                    2f:a6:ab:71:68:d7:44:67:09:3d:65:40:f6:e2:1b:
                    60:61:03:7e:2d:73:d9:2f:1d:c9:d4:ce:4f:32:79:
                    ee:44:1d:3f:7c:65:c5:34:64:d3:33:69:b5:bc:e5:
                    6d:d7:30:99:56:ba:49:d7:6a:76:b4:a4:6b:f3:2d:
                    86:91:a2:fa:4d:25:f4:11:09:1b:df:b9:3b:c2:a1:
                    c4:7c:3b:75:fe:75:d6:7f:be:28:6e:94:6d:61:56:
                    4b:9e:0e:26:34:61:66:9a:53:f7:f8:47:af:9a:c0:
                    19:d8:ef:79:58:89:e4:0d:5d:ce:e4:df:dd:48:4b:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F8:E0:BE:31:19:D0:DC:8B:A3:06:D0:38:DB:A3:2B:C8:83:E3:5B
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/EvjgvjEZ0NyLowbQONujK8iD41s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.232.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:0a:3c:11:1d:52:b7:b2:89:0a:07:9f:91:6e:02:14:c9:
         8c:fa:54:41:ca:17:9b:79:f4:0a:8d:23:11:8a:3e:78:95:0c:
         fa:10:e8:91:27:98:12:5e:8f:18:d8:af:3f:bf:8e:9e:25:b2:
         57:00:47:ca:f7:37:bc:74:3f:2e:07:4d:7e:96:05:6c:5c:2a:
         2e:45:0c:cc:bd:2e:5c:55:3d:03:7e:43:92:ee:45:bc:6f:c3:
         d4:3c:83:a5:ed:7b:19:8f:27:61:98:9f:8d:08:3c:4e:b4:73:
         6e:92:dd:7d:ee:9b:10:2c:78:41:d6:17:c1:3f:45:0f:57:ec:
         8a:64:d6:ea:b0:18:86:23:91:fb:04:d6:03:d4:43:e9:83:11:
         ac:53:3e:40:8a:18:3a:bd:60:67:6c:d9:82:cb:59:40:b3:64:
         c9:44:e7:29:48:3b:6b:af:1c:bc:9f:4c:e0:b5:3c:60:6a:e1:
         90:84:63:4c:53:a1:81:39:ad:13:d8:c5:89:d9:02:ca:52:c3:
         74:a7:6b:07:2a:14:89:d9:7c:32:7d:df:ee:e3:36:cb:92:d1:
         bb:10:d5:ee:cd:2f:48:b0:17:0c:a9:8b:1e:84:54:71:10:cb:
         63:c6:d5:d0:e6:48:fc:82:47:49:00:24:da:8f:51:a6:d2:84:
         27:7e:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org