Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M-jjbRLkjLJyMH5LM92_lKECk0s.roa
File:                     M-jjbRLkjLJyMH5LM92_lKECk0s.roa (raw, json)
Hash identifier:          Y654YDrDED8HmFn3PkUlUX4HrPNNKJux3QkjBABLnHU=
Subject key identifier:   33:E8:E3:6D:12:E4:8C:B2:72:30:7E:4B:33:DD:BF:94:A1:02:93:4B
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       09B165CC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M-jjbRLkjLJyMH5LM92_lKECk0s.roa
Signing time:             Thu 19 May 2022 07:03:17 +0000
ROA not before:           Thu 19 May 2022 07:03:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13075
IP address blocks:        83.149.13.0/24 maxlen: 24
                          83.149.14.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162620876 (0x9b165cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: May 19 07:03:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33e8e36d12e48cb272307e4b33ddbf94a102934b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:fd:aa:63:07:9f:f6:11:47:31:56:a5:cf:
                    b5:6e:f6:97:2b:9c:0e:f3:62:a7:c4:e9:0d:b4:f2:
                    02:c3:9b:2b:de:2a:ae:4b:2d:ff:c8:74:ef:59:6e:
                    0a:0b:d8:51:b2:28:98:3f:01:a3:0d:ae:fb:dc:b6:
                    78:bf:6f:03:5f:ab:19:3e:a9:42:15:0c:b5:96:ba:
                    84:71:01:72:94:07:75:0a:45:cd:04:b0:cd:e0:e1:
                    7c:91:16:17:2f:73:55:10:9c:81:ee:85:84:7a:4c:
                    06:fd:84:c6:e8:f7:98:90:7b:d9:7c:db:c6:1a:b8:
                    70:1c:4c:41:fe:1e:b9:fb:00:cc:45:81:c8:8b:4c:
                    fc:ae:d0:e8:f0:d6:83:17:74:e3:3e:da:84:9a:ec:
                    ad:01:22:3f:e2:d8:4b:71:3f:75:66:85:a8:87:36:
                    65:4f:c2:6f:b2:cd:93:8d:61:36:14:09:a3:86:0e:
                    da:25:7f:79:ce:c5:2b:a2:ea:a9:91:bd:2e:d4:29:
                    51:8d:bc:fd:c9:d6:a0:4b:66:37:8a:85:14:fd:48:
                    e3:29:28:c7:29:4c:e9:5a:3e:92:59:e8:64:b6:ff:
                    bd:4c:1f:60:e7:d7:9a:6c:f6:db:f8:a7:f0:2a:d6:
                    58:96:cb:87:63:20:1a:c7:99:e1:0f:e4:96:45:bc:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E8:E3:6D:12:E4:8C:B2:72:30:7E:4B:33:DD:BF:94:A1:02:93:4B
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M-jjbRLkjLJyMH5LM92_lKECk0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.149.13.0-83.149.14.255

    Signature Algorithm: sha256WithRSAEncryption
         35:a8:00:a7:ad:d4:eb:98:22:c1:e0:44:db:fe:e2:67:52:d9:
         cf:08:fd:19:2d:1f:f4:3a:13:bb:14:3e:f3:6e:06:e3:4e:47:
         a1:4f:1f:a7:85:4a:c3:59:17:5a:47:9b:30:cf:eb:06:44:2e:
         e3:95:62:13:12:92:19:7e:c6:66:47:c4:74:39:28:0f:66:08:
         45:e8:26:67:20:ab:b6:96:c1:a6:ea:5b:cc:80:d7:11:a9:88:
         b4:90:6e:dd:e4:80:c8:b8:1c:95:f9:5a:fe:63:c5:77:e8:de:
         2e:90:b2:6e:07:88:fd:46:07:2f:5a:f8:b1:fe:62:24:99:88:
         14:68:3e:08:42:65:dd:9f:d6:26:48:7e:1a:24:e3:b0:85:aa:
         55:c5:9c:b5:aa:b8:d4:77:62:1f:66:d2:66:af:b5:5f:fa:16:
         65:3a:ed:71:1e:f0:1b:2f:22:1f:79:f3:5b:f8:19:d7:fa:f2:
         71:a4:43:f7:1f:fa:aa:df:a7:37:5c:0b:8b:8c:1e:3f:1e:4c:
         05:33:29:51:94:32:b4:44:c3:06:25:f6:99:92:08:db:f9:b3:
         10:1a:d6:50:ba:34:1c:29:ec:5c:59:78:d5:01:46:3f:53:f8:
         40:84:8e:54:e9:dc:03:44:94:12:29:5f:14:44:03:a6:01:cf:
         24:70:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:02 2025 by rpki-client