Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/RmtYVuztiEyLRnlHMmyJdQ76uXY.roa
File:                     RmtYVuztiEyLRnlHMmyJdQ76uXY.roa (raw, json)
Hash identifier:          ypGeJgkqjh7iAwYwZqGfEdfslkpVohA7FW0NXI0CdeQ=
Subject key identifier:   46:6B:58:56:EC:ED:88:4C:8B:46:79:47:32:6C:89:75:0E:FA:B9:76
Certificate issuer:       /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial:       01BBF0
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/RmtYVuztiEyLRnlHMmyJdQ76uXY.roa
Signing time:             Mon 02 May 2022 07:24:37 +0000
ROA not before:           Mon 02 May 2022 07:24:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57646
IP address blocks:        193.142.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113648 (0x1bbf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
        Validity
            Not Before: May  2 07:24:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=466b5856eced884c8b467947326c89750efab976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:38:54:da:b6:08:5e:9d:f5:a0:57:3f:4d:
                    e4:eb:6e:39:b2:78:22:9d:76:fd:ac:0d:cc:c5:37:
                    57:58:89:8b:d7:10:df:33:7e:61:7c:94:45:93:18:
                    59:e2:f1:3e:cf:d0:70:3a:80:a3:23:b5:c1:6f:9c:
                    0a:20:3e:89:46:1f:24:95:d2:a0:96:41:a2:1f:2a:
                    4c:bd:89:6a:1b:2e:58:21:23:df:1f:d0:11:53:df:
                    68:7f:df:d5:0f:d3:38:e1:0d:ed:6d:a2:1d:aa:50:
                    b5:12:42:e9:b1:07:d6:62:de:ce:35:cd:e8:c6:21:
                    37:da:b1:3a:6a:da:aa:d5:45:47:75:11:4a:d0:bd:
                    1f:3d:9f:bb:90:4f:cc:80:38:36:ff:63:c8:77:3f:
                    8c:fb:9d:ff:08:3e:40:9a:70:e4:10:e4:36:58:7e:
                    79:e1:63:8c:a4:1b:c5:06:6b:81:20:f8:31:28:64:
                    59:3c:95:f1:8e:d4:e6:dd:c6:7e:8c:a0:8c:d6:ab:
                    db:d5:f7:70:83:ee:a0:fc:c1:82:8c:01:c6:53:eb:
                    b5:c4:48:1e:e6:de:6e:4d:77:0b:e5:68:55:ee:45:
                    97:45:4b:2a:3e:c1:67:18:8b:ae:ec:6e:1f:96:22:
                    14:40:c1:3c:01:da:6c:83:14:86:41:5a:ae:6d:06:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6B:58:56:EC:ED:88:4C:8B:46:79:47:32:6C:89:75:0E:FA:B9:76
            X509v3 Authority Key Identifier:
                keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/RmtYVuztiEyLRnlHMmyJdQ76uXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:4e:89:64:07:9f:23:16:e9:67:81:c6:88:81:b0:35:58:a3:
         58:25:8f:92:88:bc:6a:be:52:62:61:82:e7:29:1c:cf:0d:67:
         38:5a:bc:4c:f8:b4:3f:a9:b9:a4:7b:3c:0a:a8:e8:62:90:6f:
         39:49:51:e1:a4:a7:f0:ce:d9:0c:31:64:9c:63:97:23:c2:54:
         9d:10:e8:d5:bd:ea:ec:9d:63:67:93:4c:65:9a:af:f3:b2:29:
         86:39:a4:e8:7d:94:3f:6c:a8:96:3d:83:45:05:b9:62:1d:a7:
         59:86:a9:8d:3b:8e:f8:17:8f:af:39:d1:41:a8:f4:30:7f:91:
         ff:12:5e:03:0d:80:53:45:c3:21:0e:63:3d:b5:3b:be:61:8f:
         ce:03:a0:98:9c:c7:89:5c:6e:98:e1:06:3b:9f:8f:40:db:00:
         53:94:dd:27:19:21:bf:b0:6a:8c:ac:5c:db:c4:a3:ad:6a:0f:
         52:3c:1e:07:e3:a6:08:f8:fe:f4:1d:5b:df:a5:8c:14:83:90:
         7a:bc:a2:93:45:37:78:a0:d4:77:52:93:1f:1e:55:af:a1:6c:
         12:1a:c0:3a:ce:b8:60:b7:db:fb:04:b7:62:83:0c:cd:39:57:
         a0:59:16:bd:5f:51:84:9d:12:2a:6e:00:dc:6e:cb:f2:9c:f3:
         fa:37:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:53 2024 by rpki-client on console-ams.rpki-client.org