Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ge9R6l6NrVt51tSLkAxJKbQHcjQ.roa
File:                     Ge9R6l6NrVt51tSLkAxJKbQHcjQ.roa (raw, json)
Hash identifier:          550ATUhpyWJIqfR/56q3QEUH5TLbSUVJgCBt3KMs7ao=
Subject key identifier:   19:EF:51:EA:5E:8D:AD:5B:79:D6:D4:8B:90:0C:49:29:B4:07:72:34
Certificate issuer:       /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial:       16C70763
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ge9R6l6NrVt51tSLkAxJKbQHcjQ.roa
Signing time:             Sat 01 Jan 2022 02:51:18 +0000
ROA not before:           Sat 01 Jan 2022 02:51:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8409
IP address blocks:        188.93.104.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382142307 (0x16c70763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
        Validity
            Not Before: Jan  1 02:51:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19ef51ea5e8dad5b79d6d48b900c4929b4077234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:f5:a4:64:0f:b7:7c:20:86:91:0f:92:d7:
                    fb:7b:af:fc:1e:0a:8c:a6:f6:7b:0c:54:4d:0f:6c:
                    7f:1a:7b:e2:a4:e1:d6:4b:04:fb:7e:2f:fb:74:b4:
                    bf:72:df:98:2f:f4:e5:c5:d6:68:f6:cb:ca:26:f7:
                    a8:9b:8b:7d:7c:f3:da:59:53:01:61:05:c9:44:c8:
                    01:2d:63:28:b3:1c:62:f1:63:1d:fb:e8:d7:20:b5:
                    82:32:c4:a4:17:14:9e:ff:93:ad:ab:25:b2:96:48:
                    ca:50:7a:95:51:81:0d:56:ce:5d:56:19:3a:3a:f8:
                    c6:83:88:69:47:4e:8d:77:cd:43:d3:4a:be:f1:4d:
                    1d:74:b7:cc:d2:2d:2a:f0:2d:38:33:8a:1e:12:a1:
                    59:0e:36:63:35:6c:7a:9f:7d:8e:8f:2b:d1:1a:60:
                    96:b0:ab:82:11:ca:7c:03:c3:38:da:5e:96:64:df:
                    1a:be:7f:e0:67:05:0b:50:3b:ca:66:f4:b6:59:5a:
                    0d:81:6d:b9:17:04:b7:e3:ba:9f:70:6a:0d:58:0f:
                    7f:95:27:4a:be:4b:58:fd:03:13:e5:26:19:fa:3a:
                    75:df:ff:56:03:c4:e6:fd:9e:9b:1d:63:3a:59:43:
                    57:47:70:53:27:d4:df:c0:51:38:e0:24:09:ab:74:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EF:51:EA:5E:8D:AD:5B:79:D6:D4:8B:90:0C:49:29:B4:07:72:34
            X509v3 Authority Key Identifier:
                keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ge9R6l6NrVt51tSLkAxJKbQHcjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:e6:0d:28:90:b3:cb:70:05:c2:b1:56:f9:53:c4:b5:86:fa:
         21:9d:7d:39:7b:f0:dc:d5:d0:7b:1c:64:4f:d7:00:c1:6a:69:
         fb:31:3c:07:79:6f:90:fe:30:90:6d:ee:44:e5:7d:38:69:62:
         e6:e8:4f:4b:e1:e5:48:e2:da:87:78:b2:2f:29:1e:7c:74:cf:
         98:dc:f5:a9:b3:83:b5:78:ba:00:28:26:9b:4c:06:fe:cc:f1:
         61:c8:5c:1f:5e:9c:7a:43:6e:85:c2:a1:6c:ab:e9:f5:5f:f4:
         d5:41:cc:c3:1f:b5:a2:38:fe:f5:6d:84:51:17:61:31:5e:a7:
         23:ca:b6:aa:24:90:b6:f6:6f:b3:9b:7b:1f:dc:78:4b:d1:5f:
         d2:a7:f4:32:96:0f:69:7c:6f:54:5b:53:c8:38:e5:56:c4:f8:
         f8:ed:f3:b3:f1:f5:f1:ce:c4:cc:e6:2b:29:a0:86:b3:78:3f:
         c5:a0:8c:35:e5:8d:17:5b:22:d5:e8:0b:87:58:7a:5e:39:3c:
         bf:0f:a0:4b:9a:91:d4:4c:8b:f8:29:5e:8b:0a:bd:ab:c5:e6:
         0b:64:25:11:9f:d9:fe:3b:c8:56:dd:27:c2:6e:c3:46:b2:2d:
         f7:59:f8:91:f0:06:13:d4:ad:d9:59:c2:7b:ed:43:da:1a:ee:
         7e:2b:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org