Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/1WjvQViFMnbD0pLv2vCpyFKivEc.roa
File:                     1WjvQViFMnbD0pLv2vCpyFKivEc.roa (raw, json)
Hash identifier:          l8BpyPSJCs6wlFzW9Row5czGze8JS6Zn6pcITr53eYk=
Subject key identifier:   D5:68:EF:41:58:85:32:76:C3:D2:92:EF:DA:F0:A9:C8:52:A2:BC:47
Certificate issuer:       /CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Certificate serial:       01575C
Authority key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/1WjvQViFMnbD0pLv2vCpyFKivEc.roa
Signing time:             Tue 17 May 2022 13:45:28 +0000
ROA not before:           Tue 17 May 2022 13:45:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        193.33.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87900 (0x1575c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
        Validity
            Not Before: May 17 13:45:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d568ef4158853276c3d292efdaf0a9c852a2bc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:54:6c:36:25:b7:71:8b:07:b2:37:e5:7a:8a:
                    cb:1a:19:f2:7f:89:3c:5c:f6:dd:16:74:00:6b:48:
                    d5:51:7c:96:d9:15:7b:a2:6b:86:53:53:ca:5b:8e:
                    a4:f9:2e:9b:25:1f:d0:44:ca:c4:89:1b:dc:71:77:
                    bf:5d:47:3a:90:3c:8c:c9:a1:d3:c5:05:79:2b:93:
                    be:70:c9:b0:e5:2b:8d:b1:bf:bd:bf:69:0d:ee:1d:
                    07:3e:24:58:28:94:b9:5d:72:c3:b8:df:2f:60:98:
                    d9:9e:38:70:67:b2:06:fc:92:82:55:94:3a:b6:18:
                    d4:1e:21:5b:09:b7:60:27:1d:b2:7b:dd:54:16:37:
                    e9:99:b2:e9:6f:71:7e:c7:46:dc:0c:d3:97:b4:b9:
                    b8:6d:07:53:b5:dd:e9:d9:d6:8d:5f:b5:cc:8b:51:
                    b1:75:0b:f2:66:dd:8d:f1:44:c7:a4:56:e2:78:3e:
                    b7:64:ec:46:7b:18:f0:51:1a:d2:b4:58:21:e4:37:
                    fe:47:50:8b:32:d2:59:44:66:5d:97:d7:12:7e:26:
                    2e:d5:2b:53:79:1c:4b:29:6b:94:2a:77:0a:36:51:
                    38:ea:99:c0:f7:29:48:db:a2:47:38:41:aa:35:3c:
                    88:12:7f:5d:e6:6c:cd:03:a1:1e:1d:55:95:26:af:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:68:EF:41:58:85:32:76:C3:D2:92:EF:DA:F0:A9:C8:52:A2:BC:47
            X509v3 Authority Key Identifier:
                keyid:8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/1WjvQViFMnbD0pLv2vCpyFKivEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:19:e9:4d:7a:7a:ef:0e:0d:85:6a:1e:a5:7a:eb:27:6b:2c:
         d0:54:e3:6e:d5:92:99:b4:1f:bc:98:d2:24:38:3d:68:96:55:
         59:4f:ef:21:51:a8:08:54:42:ec:bf:56:81:78:8f:a6:a1:14:
         72:6d:9f:24:f5:9e:dd:38:23:63:2a:c5:87:c7:13:e5:08:64:
         d6:d9:9d:5a:ea:ae:7c:67:16:54:f4:67:2a:8e:81:16:0b:e9:
         49:c2:c5:ee:d2:21:cc:81:d7:76:4d:f9:86:36:dd:1b:fb:3a:
         88:f1:db:70:28:1e:78:89:f1:da:b5:18:06:d9:93:71:8d:75:
         77:25:bd:02:c0:77:8f:14:60:7e:1c:ba:15:dc:0a:61:c7:be:
         b9:1b:0d:c0:6e:17:93:43:22:ad:44:98:b3:f0:2b:f7:64:d3:
         ae:8b:06:06:71:c3:dc:f0:4d:1d:59:77:9c:23:b5:70:8f:42:
         41:af:fd:4e:9f:56:b7:b8:a9:9c:62:b8:5f:a6:57:95:7c:a9:
         17:a7:a8:50:61:19:6f:13:80:10:dd:a3:ae:50:42:08:9d:93:
         7d:24:50:16:70:15:2a:1f:c2:53:b7:39:a1:8d:5e:6b:7e:08:
         8b:45:3a:1b:14:b7:87:dd:e7:d3:05:a6:de:d0:cf:ee:75:9e:
         3b:68:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:26 2024 by rpki-client on console-fra.rpki-client.org