Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ah3piGefTovmpelrFGOIHxSMOH4.roa
File:                     Ah3piGefTovmpelrFGOIHxSMOH4.roa (raw, json)
Hash identifier:          ljZRTZA4zM0l58RL48qg0dSptisaOu7Rw0+ObgpExyo=
Subject key identifier:   02:1D:E9:88:67:9F:4E:8B:E6:A5:E9:6B:14:63:88:1F:14:8C:38:7E
Certificate issuer:       /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial:       16D33CA1
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ah3piGefTovmpelrFGOIHxSMOH4.roa
Signing time:             Sat 01 Jan 2022 02:51:25 +0000
ROA not before:           Sat 01 Jan 2022 02:51:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206337
IP address blocks:        188.93.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382942369 (0x16d33ca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
        Validity
            Not Before: Jan  1 02:51:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=021de988679f4e8be6a5e96b1463881f148c387e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:43:b3:dd:8a:d8:76:ad:dc:a1:5e:fb:95:
                    a2:21:df:b6:ef:05:10:70:9b:04:9b:7a:38:25:7a:
                    cc:de:55:8c:98:45:66:1d:15:19:f6:d2:27:24:f4:
                    a2:e1:ba:ff:08:01:14:a1:03:1b:41:d3:11:a5:9a:
                    18:4b:89:61:84:11:60:30:5f:01:af:c3:c2:09:fc:
                    5a:d6:73:60:7b:9e:16:e2:fd:12:c0:e2:c3:6d:11:
                    bd:99:3a:73:0d:50:5a:06:00:ac:34:ca:a3:d0:86:
                    03:18:02:22:0d:11:f1:51:60:8a:59:ac:c4:42:bd:
                    3a:18:bf:fc:f4:c7:c5:b5:c4:ea:cd:0c:da:f4:37:
                    0f:65:41:5a:6b:86:89:76:2a:15:95:09:1a:72:c4:
                    32:25:74:11:cc:af:80:48:c3:35:97:fa:f9:2e:00:
                    c0:27:58:6b:d6:30:a2:18:ab:df:17:8a:cb:7c:99:
                    50:b5:76:16:7b:a7:c8:51:74:91:b5:ac:03:20:d6:
                    9c:5a:76:69:b1:77:b9:67:16:53:72:4b:5f:4d:8b:
                    4b:d2:b6:95:6f:e0:71:ed:b9:ad:9b:9e:63:46:69:
                    1a:97:f9:36:58:1b:d8:85:77:c0:34:84:03:a6:8f:
                    27:f5:03:92:fa:d2:e8:5b:97:73:3b:52:2d:a2:b1:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:E9:88:67:9F:4E:8B:E6:A5:E9:6B:14:63:88:1F:14:8C:38:7E
            X509v3 Authority Key Identifier:
                keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ah3piGefTovmpelrFGOIHxSMOH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:29:c5:6a:ce:bb:a8:52:19:36:0c:e5:fa:23:1d:59:b7:
         f0:c9:95:7e:7c:42:e2:da:6d:26:fc:b6:3a:7a:14:98:c7:2b:
         3d:ec:40:6d:bf:9c:9d:85:56:38:05:ad:e4:59:ed:34:da:4b:
         75:6c:e7:20:68:53:88:55:d0:ef:3b:3e:32:fd:7c:d4:d4:6f:
         01:40:81:ce:03:b2:14:dd:09:a1:f6:44:61:d9:6d:ed:56:a9:
         5f:46:48:a7:5f:02:7e:19:a0:f9:9e:18:99:1b:68:5d:33:44:
         4d:fd:05:6b:07:c5:95:b1:7c:22:3e:66:c3:c0:a3:76:67:9f:
         a6:4c:b2:ba:88:b3:79:56:2d:57:29:91:61:b0:4a:5d:aa:8b:
         ba:52:ff:f6:0f:66:a6:2e:9e:91:5c:09:8c:6a:2b:96:13:37:
         e4:83:48:71:28:35:f0:e0:f3:5d:88:5b:63:82:e1:da:3d:4b:
         13:db:13:cd:21:3e:1c:96:07:c8:a4:cc:d9:35:e8:73:1d:3f:
         70:e0:2a:ee:ac:73:80:9e:5d:14:97:a2:16:fc:af:6e:4a:dc:
         92:25:5f:ec:e9:d4:9e:63:5e:7c:f1:4c:0a:9c:29:d8:b4:71:
         b8:5f:3d:04:e1:ef:84:ea:35:02:a4:74:4b:ec:8e:8a:09:27:
         64:36:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org