Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/JGGj-V0ba-xArBDZvAr9oX0tbn0.roa
File:                     JGGj-V0ba-xArBDZvAr9oX0tbn0.roa (raw, json)
Hash identifier:          EamlVGv6DNRnR7JxJTishBGU2vGLPvCOVdYWu+1ZeyQ=
Subject key identifier:   24:61:A3:F9:5D:1B:6B:EC:40:AC:10:D9:BC:0A:FD:A1:7D:2D:6E:7D
Certificate issuer:       /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial:       07450C53
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/JGGj-V0ba-xArBDZvAr9oX0tbn0.roa
Signing time:             Sat 01 Jan 2022 14:00:17 +0000
ROA not before:           Sat 01 Jan 2022 14:00:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207083
IP address blocks:        193.142.146.0/24 maxlen: 24
                          193.142.59.0/24 maxlen: 24
                          2a0f:ca80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121965651 (0x7450c53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
        Validity
            Not Before: Jan  1 14:00:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2461a3f95d1b6bec40ac10d9bc0afda17d2d6e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:7f:e8:cf:1b:e2:89:75:e2:35:bc:1d:21:
                    e4:81:56:f1:60:85:e5:5a:1f:7a:f9:32:45:97:b8:
                    0e:f9:93:56:31:9a:fd:5c:2d:42:4b:d5:5a:05:9c:
                    f5:ad:61:00:13:21:8d:ae:bd:b5:35:21:59:19:93:
                    cc:61:45:31:54:8b:80:c8:38:75:c9:01:09:dd:de:
                    74:c1:7b:2f:85:41:a7:fb:3e:f6:49:dd:81:97:d6:
                    7e:b3:32:e8:16:66:71:c9:b1:6f:11:47:0d:48:d1:
                    91:5b:bc:ae:dc:1c:02:60:28:6a:2c:20:83:db:46:
                    cd:e1:4f:f8:5a:8b:ff:a0:97:86:2e:14:19:9d:d6:
                    b9:34:2b:a6:bd:6e:05:25:b5:9b:ea:ad:53:b0:88:
                    15:5a:a3:77:a4:db:b7:c2:e1:60:fd:81:d1:19:07:
                    62:2d:85:37:20:ec:d7:7f:9e:85:a2:0f:f9:b1:07:
                    f9:b9:c4:62:7b:b2:8c:64:d7:2e:53:8c:2e:6d:87:
                    18:1c:41:a9:9d:e1:28:79:30:83:21:26:4c:d3:f8:
                    0b:a8:e1:e6:34:2d:db:cc:86:34:db:2e:19:49:0c:
                    e7:36:95:a2:62:6c:76:f5:d0:86:9a:90:26:73:b6:
                    06:b2:49:1a:89:00:a5:e3:4c:67:e8:3f:71:33:86:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:61:A3:F9:5D:1B:6B:EC:40:AC:10:D9:BC:0A:FD:A1:7D:2D:6E:7D
            X509v3 Authority Key Identifier:
                keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/JGGj-V0ba-xArBDZvAr9oX0tbn0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.59.0/24
                  193.142.146.0/24
                IPv6:
                  2a0f:ca80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:89:b9:96:0a:4f:f5:d5:48:5b:98:3b:41:fc:06:1f:e1:
         99:93:a0:06:0a:98:1e:6d:9b:33:1a:c7:3a:2a:aa:94:60:c0:
         a8:26:64:80:56:eb:84:de:fa:4a:92:ec:8f:0b:28:13:7e:93:
         de:eb:aa:be:0a:e3:da:15:c2:31:80:25:1c:dd:80:9b:1d:14:
         f9:bd:3e:c6:22:02:1f:c7:fc:96:dc:a5:4d:ac:bc:fd:10:f5:
         d0:e7:fd:fe:6b:41:0c:60:30:1b:f1:50:1f:4c:b5:00:b6:8b:
         ee:1a:ba:33:06:7b:b8:4b:3d:21:d3:32:bb:0f:2d:16:20:24:
         50:10:4a:df:43:63:9b:0e:62:54:2e:25:3d:47:7e:88:67:79:
         3f:f6:16:6b:bd:e8:ee:72:eb:31:df:fb:bb:bf:e6:49:63:a4:
         34:d6:58:28:d4:a9:d6:74:c0:93:6d:95:36:a0:f7:b5:f6:d7:
         8b:4b:8b:e4:66:46:8a:49:33:77:8a:32:40:8b:03:2e:93:df:
         72:11:5a:e3:d2:b3:8d:8a:3b:49:99:5d:0a:b2:4f:7e:79:68:
         b6:9c:13:e2:9d:3f:a6:53:86:6b:99:58:ab:46:52:32:7a:6a:
         78:e1:ae:55:68:a1:1e:bc:be:e6:42:98:89:af:3a:3a:18:55:
         b2:3c:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:55 2024 by rpki-client on console-fra.rpki-client.org