Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p4f_Sbtf8C8Jyjrm5tDOgFPBd24.roa
File:                     p4f_Sbtf8C8Jyjrm5tDOgFPBd24.roa (raw, json)
Hash identifier:          jxgb7eQQClBiHUFI5f+NYdXedUDzKyWqjlgcbAh74bw=
Subject key identifier:   A7:87:FF:49:BB:5F:F0:2F:09:CA:3A:E6:E6:D0:CE:80:53:C1:77:6E
Certificate issuer:       /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial:       0183545394D351C70828AFC74D0158419026
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p4f_Sbtf8C8Jyjrm5tDOgFPBd24.roa
Signing time:             Mon 19 Sep 2022 05:58:27 +0000
ROA not before:           Mon 19 Sep 2022 05:58:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203229
IP address blocks:        193.162.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:54:53:94:d3:51:c7:08:28:af:c7:4d:01:58:41:90:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
        Validity
            Not Before: Sep 19 05:58:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a787ff49bb5ff02f09ca3ae6e6d0ce8053c1776e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:a6:af:96:4b:d7:19:50:a9:5d:99:8d:38:
                    9d:f2:f1:3d:d6:bc:25:db:89:02:53:80:36:78:db:
                    ae:c7:b8:c2:15:12:04:bb:82:cb:78:e9:4d:25:0a:
                    65:76:d6:f1:9d:73:49:93:a7:b9:61:76:56:4c:82:
                    d7:c3:ed:ce:dc:ab:46:7d:b9:07:e6:bb:49:cd:40:
                    61:74:87:c0:1b:45:d8:a4:ef:29:09:f6:b4:56:9a:
                    dc:35:7c:c7:b4:fb:5d:dd:3c:4a:a4:cd:ee:60:ff:
                    65:ac:53:f2:4a:d2:48:11:dd:40:4e:3c:ef:d7:85:
                    23:d4:95:6e:66:af:23:83:3b:b4:09:bd:77:b2:1a:
                    ed:26:94:a4:96:c7:1c:29:05:d4:07:04:49:3a:67:
                    9e:cc:0f:65:29:f9:6b:d5:ce:12:5f:ec:44:b4:09:
                    f3:9f:ec:8f:fa:53:d7:2b:16:08:e0:19:5b:16:f7:
                    ee:81:1e:98:16:39:14:e3:dc:ff:7a:17:b5:97:35:
                    d7:68:02:2c:f9:4e:97:b1:12:f3:08:24:95:c3:c0:
                    f5:1f:27:b1:70:19:db:fa:c8:d1:bd:dc:f0:76:51:
                    cd:ad:06:36:15:de:dc:f7:ec:85:bf:52:78:cf:37:
                    e6:12:96:5f:5b:d2:e7:27:9e:2a:13:12:dc:ff:14:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:87:FF:49:BB:5F:F0:2F:09:CA:3A:E6:E6:D0:CE:80:53:C1:77:6E
            X509v3 Authority Key Identifier:
                keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p4f_Sbtf8C8Jyjrm5tDOgFPBd24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2d:8d:95:d2:43:ca:52:35:ba:14:ed:57:e5:5a:15:21:20:
         7a:75:b3:e2:df:13:09:61:ad:4a:06:8c:ac:68:62:2f:9b:a1:
         39:fc:06:43:66:44:68:12:a7:da:4f:b4:99:eb:1b:71:aa:57:
         03:44:b1:4e:76:22:ba:07:0b:18:c0:d7:a7:a5:21:2b:e6:ac:
         cc:ef:1b:e7:db:c5:df:2b:2a:4d:c1:2e:12:fc:17:1f:23:fc:
         d2:e4:ca:6b:8a:ec:6c:1a:55:c4:23:71:53:39:32:b2:0c:70:
         38:63:09:ac:06:81:3a:0c:ce:f5:a9:c0:f8:0e:cf:4c:3a:f5:
         d9:fd:bd:eb:4f:40:d1:dd:b6:bc:ea:2b:4c:c0:d5:73:3e:63:
         a0:74:24:66:32:9c:4d:cd:9d:fb:07:45:f7:96:90:f3:81:05:
         74:68:f0:de:ed:b9:3f:1d:e5:9a:20:78:9e:22:ab:95:9a:f7:
         4f:55:d0:c6:97:03:f7:ba:3e:68:38:ba:86:b9:11:3f:2c:1b:
         d5:27:d7:e2:ad:74:ca:a6:71:63:c5:7b:9e:50:ad:e4:82:27:
         cc:af:0e:96:d6:a1:b6:df:0b:70:a1:50:af:ec:8d:55:f9:91:
         e4:82:ff:8e:e1:f7:d5:26:84:11:4b:2c:94:7d:c8:f7:83:71:
         22:b7:c3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:30 2024 by rpki-client on console-fra.rpki-client.org