Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/6Cb9gQeejkWCksIDcTwUDrRt8Gw.roa
File:                     6Cb9gQeejkWCksIDcTwUDrRt8Gw.roa (raw, json)
Hash identifier:          +1R2Q+0c+RSmPKpv6mQ4cMG+J/Jnl8D9pbeicEX8GPc=
Subject key identifier:   E8:26:FD:81:07:9E:8E:45:82:92:C2:03:71:3C:14:0E:B4:6D:F0:6C
Certificate issuer:       /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial:       018562547B14D480E190D546BEEAC9C4DC16
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/6Cb9gQeejkWCksIDcTwUDrRt8Gw.roa
Signing time:             Fri 30 Dec 2022 09:19:41 +0000
ROA not before:           Fri 30 Dec 2022 09:19:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20906
IP address blocks:        193.108.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:54:7b:14:d4:80:e1:90:d5:46:be:ea:c9:c4:dc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
        Validity
            Not Before: Dec 30 09:19:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e826fd81079e8e458292c203713c140eb46df06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:2c:a6:12:f6:62:16:97:85:d8:75:0e:e5:
                    b8:5e:a2:1a:5d:98:ac:f9:1b:3f:d3:64:46:cb:f7:
                    f0:b3:ca:8e:a5:11:f2:d5:fa:b3:1d:74:90:43:be:
                    fa:ed:02:be:9c:c8:8f:2e:02:99:a4:c4:90:1b:f3:
                    9f:15:c1:ef:63:85:9e:1c:3e:c2:4a:8c:c3:a9:15:
                    fd:45:d6:a1:4e:ea:73:bb:59:9f:34:00:30:51:bf:
                    67:da:33:2f:a7:63:f9:64:04:4e:54:23:e6:13:84:
                    f6:cf:d7:26:be:d5:d6:41:9d:c1:4f:f1:f4:c8:0d:
                    e2:4a:7a:f6:9b:52:c4:7d:d1:c8:11:39:0e:71:ab:
                    65:e2:b0:42:22:a0:a0:b3:9d:a7:1a:c9:14:43:34:
                    76:31:3b:8e:b5:5c:d2:ce:d5:9f:92:0e:f3:ae:5e:
                    60:bb:7b:30:c3:13:ce:b0:a7:1c:0c:92:b7:59:9f:
                    67:c0:a8:e9:cd:2b:83:74:87:5f:d3:9d:fc:dd:b0:
                    35:db:9c:10:c8:c0:c3:fe:ca:cb:d3:b8:df:4c:39:
                    d7:2f:28:12:12:c6:dc:e9:19:b2:2a:08:5b:00:10:
                    63:88:a4:1f:31:16:66:dc:d5:a8:a0:2f:6a:16:54:
                    d7:79:13:5d:0b:7d:d8:4e:ed:3f:dc:60:38:73:60:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:26:FD:81:07:9E:8E:45:82:92:C2:03:71:3C:14:0E:B4:6D:F0:6C
            X509v3 Authority Key Identifier:
                keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/6Cb9gQeejkWCksIDcTwUDrRt8Gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:56:da:45:ee:e5:81:26:fa:db:b6:36:d7:f4:7c:c4:d9:61:
         7c:c1:06:fd:2b:18:05:fc:66:a6:da:d5:5d:89:b2:cb:66:bc:
         29:ba:54:55:3e:07:f5:50:d7:e7:20:9c:56:90:3c:6f:ad:85:
         f0:cf:1b:ee:f1:b0:91:be:14:ad:e1:71:d7:9f:98:76:c0:2b:
         d9:21:45:6a:a1:ae:8f:b1:5e:6e:e5:7d:f8:b8:cc:0a:1a:e6:
         16:cc:8b:94:41:4b:2a:b8:33:fa:a1:bb:7c:63:01:72:c3:44:
         2e:5a:2e:4d:3a:9d:b2:46:7c:80:00:3a:82:31:ea:1d:d3:5e:
         d2:65:dd:89:24:c2:10:2b:a6:7b:60:b1:b7:67:60:c9:eb:ed:
         b9:da:d0:6a:1d:85:3d:2a:34:64:d4:85:d6:12:70:a1:cb:4f:
         ca:c1:f6:4a:29:5c:13:11:5d:be:a0:de:c8:5f:08:3c:8a:5f:
         30:bd:bb:56:4d:33:cd:31:85:63:24:a0:46:e1:09:b5:9c:50:
         9b:a9:d5:97:15:9b:b2:08:6e:64:bf:74:38:de:e2:e1:2c:1d:
         77:2a:2d:97:7a:17:a3:6f:ad:1d:58:83:e5:09:26:42:b7:73:
         a9:4e:4d:eb:6f:80:55:c8:29:9e:b4:6a:f5:40:9f:73:16:d2:
         62:a8:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:14 2024 by rpki-client on console-ams.rpki-client.org