Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/L5fEI7gzS5pyHJ82MJAYIajRV_c.roa
File:                     L5fEI7gzS5pyHJ82MJAYIajRV_c.roa (raw, json)
Hash identifier:          F/8cIycA17Fw76DU0rzIKZrHlSlNucw0FdKbUHHXHNo=
Subject key identifier:   2F:97:C4:23:B8:33:4B:9A:72:1C:9F:36:30:90:18:21:A8:D1:57:F7
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       33943C
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/L5fEI7gzS5pyHJ82MJAYIajRV_c.roa
Signing time:             Wed 20 Apr 2022 21:48:20 +0000
ROA not before:           Wed 20 Apr 2022 21:48:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210030
IP address blocks:        193.26.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3380284 (0x33943c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: Apr 20 21:48:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f97c423b8334b9a721c9f3630901821a8d157f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:3a:c1:83:60:52:b8:c1:ce:94:1a:e6:6a:
                    05:14:9f:9a:15:e6:c4:f2:c1:18:2d:66:4f:e5:7e:
                    df:23:16:a6:df:a5:52:60:50:6b:a5:81:ab:71:0a:
                    99:a1:b8:98:9a:cb:fc:63:89:28:da:0e:4c:96:14:
                    36:4e:11:1d:df:6a:f5:32:fc:ca:44:ea:19:1f:40:
                    dd:c3:ec:18:5e:29:46:6d:cc:9e:fd:37:34:a7:ad:
                    64:25:18:30:ab:82:b0:24:aa:38:8d:5e:8e:10:de:
                    87:0b:7c:a0:41:36:63:25:94:a7:67:69:9f:b9:05:
                    bc:d5:f7:b6:b2:60:b6:9c:4b:1f:a6:25:30:4f:ab:
                    f9:60:ed:d8:db:83:88:0c:be:cc:2f:6f:08:ce:65:
                    4c:6e:03:ec:24:69:49:1f:30:37:88:0d:5e:75:c3:
                    c8:e3:3e:5f:a1:3a:bb:08:2f:e1:60:38:d7:72:43:
                    6f:e7:67:1f:c4:f0:39:e9:5a:35:fb:b8:ca:d8:a1:
                    2f:79:ac:0c:d2:ab:8c:19:da:bd:e3:be:5d:ba:f2:
                    0b:94:06:fd:d0:07:bd:98:15:ad:88:ce:92:67:9c:
                    39:10:3e:0d:2e:07:75:d0:91:fa:2b:74:92:e3:cf:
                    0b:06:86:dc:b2:2d:ae:55:52:02:94:c7:c1:fb:43:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:97:C4:23:B8:33:4B:9A:72:1C:9F:36:30:90:18:21:A8:D1:57:F7
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/L5fEI7gzS5pyHJ82MJAYIajRV_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d6:49:c2:e9:09:f2:4a:0f:a6:45:54:be:88:71:9e:08:65:
         c6:34:36:5f:88:f7:32:4a:1f:f5:f3:33:e4:a6:8e:2a:b0:c7:
         3f:95:26:40:79:6d:2e:e3:c7:3a:36:8f:89:2b:27:fd:62:79:
         72:5f:22:e0:4c:88:f8:b8:8a:5e:07:b2:32:44:bf:99:37:8d:
         56:4b:cd:a6:07:e8:ab:7e:5a:7e:66:ba:3e:b4:4c:78:35:c7:
         bb:a6:c2:d2:1c:c6:54:26:a9:6d:cf:07:7d:0a:8f:11:18:27:
         d8:ed:42:6b:8c:15:e4:e6:de:fe:09:41:f9:0a:fb:d8:19:e1:
         39:54:d3:8d:3b:f3:00:37:12:98:cc:1e:c3:17:d6:a0:ed:ce:
         2c:9d:d7:00:4b:0b:f2:d3:a7:6b:93:50:24:93:ab:2f:a4:f4:
         3a:b0:03:19:5d:54:61:7d:ce:82:f7:62:29:b9:43:99:f2:4a:
         7c:84:b0:37:fc:de:b2:23:0d:9f:ae:78:4b:7a:c9:f5:00:d6:
         19:48:14:f2:2d:6f:d3:49:f9:f8:5f:a5:a4:f9:19:66:67:d0:
         fc:6a:a7:c3:72:22:5b:e4:78:ee:ee:d1:5c:b0:f5:2c:c7:7a:
         a0:2e:20:5e:7e:03:34:4d:02:d8:46:55:80:8d:ef:f2:4d:a2:
         fd:9c:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:12 2024 by rpki-client on console-ams.rpki-client.org