Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/R3-PJsT4xC3JEfBsxQJg6wSWp84.roa
File:                     R3-PJsT4xC3JEfBsxQJg6wSWp84.roa (raw, json)
Hash identifier:          tNPUuOGlrJ7n7JOuq/lSAJlC8pll85YQqicEsddgrDo=
Subject key identifier:   47:7F:8F:26:C4:F8:C4:2D:C9:11:F0:6C:C5:02:60:EB:04:96:A7:CE
Certificate issuer:       /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial:       0187DF
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/R3-PJsT4xC3JEfBsxQJg6wSWp84.roa
Signing time:             Thu 30 Jun 2022 10:53:02 +0000
ROA not before:           Thu 30 Jun 2022 10:53:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        188.64.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100319 (0x187df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
        Validity
            Not Before: Jun 30 10:53:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=477f8f26c4f8c42dc911f06cc50260eb0496a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:39:ca:30:b6:91:06:2b:34:5e:a4:78:42:
                    dd:ec:29:83:5e:b0:a9:54:81:ec:c6:ff:fa:d7:63:
                    42:ce:64:9d:69:9d:d6:85:5b:12:70:96:25:42:88:
                    f4:74:5c:99:6d:8d:94:97:4f:40:62:e1:13:fd:70:
                    d9:f4:61:eb:94:73:a1:58:85:e8:78:79:1b:f9:0a:
                    16:82:0b:93:ee:51:de:59:2a:b1:47:d4:1c:64:2b:
                    15:04:e7:2d:20:eb:27:b0:cd:19:11:6f:af:fc:ba:
                    7b:52:cb:4b:ad:f1:4f:db:3d:69:eb:95:b6:cd:1d:
                    58:ff:35:d8:47:6e:e2:2a:12:0b:71:37:d5:31:b6:
                    bf:90:64:c5:2b:cf:d8:ec:58:13:57:3b:05:e4:cc:
                    39:bc:9a:9d:b5:a9:04:24:c2:54:f5:62:1b:e3:a1:
                    85:5a:11:f0:9a:36:82:bd:b2:3f:98:c8:c9:3f:b8:
                    26:ee:cb:c6:96:07:02:6e:e4:33:de:07:f9:07:e6:
                    39:33:aa:6f:1e:3c:9c:3a:4c:b5:d1:84:c5:d3:ff:
                    5b:fe:25:f8:bd:74:dd:4d:de:8b:df:1e:27:6c:2b:
                    ac:6b:91:11:02:2e:f2:87:84:c9:2e:29:1f:3d:07:
                    a3:be:24:b6:c4:8b:b1:a4:05:41:98:b7:49:49:8f:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7F:8F:26:C4:F8:C4:2D:C9:11:F0:6C:C5:02:60:EB:04:96:A7:CE
            X509v3 Authority Key Identifier:
                keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/R3-PJsT4xC3JEfBsxQJg6wSWp84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:d1:43:0d:b6:88:a8:59:83:53:a3:91:99:fc:a8:da:09:
         25:72:8e:8a:7d:67:1e:53:03:f1:92:23:05:fb:9b:b3:cd:a8:
         e2:d1:17:f8:00:b5:0c:e4:29:d4:47:f5:38:44:e8:5d:20:41:
         10:1a:bc:8a:35:63:56:f4:94:68:6c:29:9b:4f:6d:0b:c9:ff:
         da:56:84:c7:3e:84:48:e6:74:ac:3a:c1:e4:80:5c:d0:5c:2a:
         09:4f:1e:d7:ab:db:87:70:fd:e7:db:30:31:2c:a4:4e:39:01:
         c6:79:38:4d:74:bd:fa:63:09:90:d6:c7:75:8e:df:2f:ce:b5:
         71:de:0a:24:2e:8e:a1:57:24:ed:79:86:8d:77:90:70:1a:e8:
         65:f3:a5:0f:88:29:5a:6f:af:d9:2d:f1:cb:3b:81:dd:af:f4:
         dd:b6:bf:fd:7e:b3:b6:fa:42:0e:96:33:50:6f:fa:23:1c:5b:
         c1:87:aa:ab:3b:73:83:d4:b3:39:80:95:ab:3d:79:19:c5:7f:
         f3:75:54:7e:bf:c2:96:a0:06:e8:50:28:78:6b:25:6c:d0:b0:
         b4:b2:8e:a2:df:44:ca:47:b3:b1:31:48:e7:af:7c:15:a0:f2:
         cf:d4:c2:c2:ab:b9:4e:b5:0f:99:05:19:24:53:48:ed:8f:12:
         f0:8b:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:25 2024 by rpki-client on console-ams.rpki-client.org