Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/eqNRLwLMK8j0Y572YQ9Jgs4VRVU.roa
File:                     eqNRLwLMK8j0Y572YQ9Jgs4VRVU.roa (raw, json)
Hash identifier:          atc+rh3PGzoUfxqyLwJi+K/DIWDMUXl7FHUdVM2UzXU=
Subject key identifier:   7A:A3:51:2F:02:CC:2B:C8:F4:63:9E:F6:61:0F:49:82:CE:15:45:55
Certificate issuer:       /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial:       01864D
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/eqNRLwLMK8j0Y572YQ9Jgs4VRVU.roa
Signing time:             Fri 25 Feb 2022 08:06:41 +0000
ROA not before:           Fri 25 Feb 2022 08:06:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20509
IP address blocks:        193.178.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99917 (0x1864d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
        Validity
            Not Before: Feb 25 08:06:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7aa3512f02cc2bc8f4639ef6610f4982ce154555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:11:fc:ec:b9:14:cc:78:eb:14:8f:d9:74:
                    24:24:ea:5d:ec:fe:49:64:fe:6d:d6:b6:79:d2:c7:
                    3b:14:cb:a0:d8:6b:be:3c:1e:5f:45:ec:cb:01:50:
                    14:9a:ce:16:e9:95:fe:5d:b8:97:e3:e5:e7:51:b3:
                    9b:0f:80:1f:1b:3a:12:47:ce:a8:98:c2:6c:77:1a:
                    39:43:dc:18:d0:a4:e8:74:ed:8a:65:8d:98:09:7a:
                    31:be:02:d5:a1:8b:04:44:f3:eb:0e:a1:95:95:5b:
                    6a:59:cd:1c:ed:ee:80:87:d5:f0:0d:2a:d3:42:3c:
                    1c:d4:f2:0a:3e:6d:c7:8d:01:32:8c:4c:75:e7:f9:
                    82:f1:02:19:31:26:fe:04:20:66:fc:36:e2:b1:e8:
                    26:80:68:bf:07:67:97:59:e7:5f:d9:27:e8:bd:e8:
                    67:a3:84:15:ca:ea:7a:6b:11:cd:64:20:94:c2:6b:
                    05:90:7b:94:82:eb:35:f3:5e:ec:18:c2:ca:86:f4:
                    1b:49:70:51:ae:88:c6:84:a0:8a:ca:85:3c:e5:fc:
                    66:24:30:5a:b1:bc:38:f5:f1:24:11:22:3a:c1:41:
                    cc:ca:02:c6:da:b7:3b:a2:67:6f:22:22:6f:a9:27:
                    39:d7:3d:03:b4:b7:60:20:93:a9:85:eb:f9:86:35:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A3:51:2F:02:CC:2B:C8:F4:63:9E:F6:61:0F:49:82:CE:15:45:55
            X509v3 Authority Key Identifier:
                keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/eqNRLwLMK8j0Y572YQ9Jgs4VRVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:39:4e:f1:34:1d:7e:5e:5f:f1:e1:82:27:1a:4e:0b:37:e4:
         65:f9:5c:57:1e:09:29:d0:58:f9:4e:fd:bf:42:bd:34:58:2c:
         12:13:7e:1a:5e:20:e3:8e:5c:5c:6a:49:f8:72:de:28:ec:72:
         6e:82:7a:87:b9:26:30:fe:b4:00:d7:6b:19:91:58:e2:27:b9:
         1b:7e:bf:12:21:23:84:3f:fd:a8:56:b6:7a:1a:fc:49:00:d3:
         22:ea:28:5b:2e:fa:b6:f5:c6:25:eb:97:ce:f2:3c:89:b4:9a:
         c6:71:d8:cd:19:84:0d:a1:ea:31:c7:68:77:56:5f:ba:87:49:
         42:d4:7e:68:71:2b:ec:79:2f:4c:90:01:89:6f:1a:11:05:1d:
         5c:c7:09:53:3e:ad:c7:28:38:67:b5:d4:48:7c:3e:f0:97:47:
         21:9f:68:ad:03:f3:52:d2:43:bd:3e:0f:fa:39:ac:d3:71:e6:
         57:43:0f:8d:ed:f0:5f:f1:31:96:79:03:ce:e8:47:b2:f5:e9:
         16:9e:a2:5f:2b:52:cf:c1:c3:e5:1c:31:e9:5e:7b:80:c4:5f:
         4c:cf:e6:e2:f3:aa:bb:5f:91:d0:91:70:75:fc:92:a1:cc:c0:
         8d:e1:17:f9:08:9d:2b:00:66:42:41:45:42:38:2d:6b:3e:1a:
         b1:64:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org