Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/TqyKBkwxLo2GmBPRf7XoRheTBuI.roa
File:                     TqyKBkwxLo2GmBPRf7XoRheTBuI.roa (raw, json)
Hash identifier:          rUMTSGZOWJHdoBYqYRcyQfqbvMfBaBMpGVtzHbuiEjo=
Subject key identifier:   4E:AC:8A:06:4C:31:2E:8D:86:98:13:D1:7F:B5:E8:46:17:93:06:E2
Certificate issuer:       /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial:       D07D35
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/TqyKBkwxLo2GmBPRf7XoRheTBuI.roa
Signing time:             Sun 15 May 2022 00:43:41 +0000
ROA not before:           Sun 15 May 2022 00:43:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29684
IP address blocks:        92.43.168.0/23 maxlen: 23
                          92.43.168.0/24 maxlen: 24
                          92.43.169.0/24 maxlen: 24
                          92.43.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13663541 (0xd07d35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
        Validity
            Not Before: May 15 00:43:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4eac8a064c312e8d869813d17fb5e846179306e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:c5:cb:83:32:83:00:cf:f1:4b:15:34:01:
                    51:89:8f:f5:33:e5:36:1a:38:3b:1e:00:70:ab:be:
                    5f:a8:ca:d9:9c:d8:cb:a4:32:cf:b3:46:37:ec:a1:
                    80:c2:97:a0:a1:88:66:6d:2d:b9:52:10:86:a2:6a:
                    7d:ec:ea:b4:dc:af:2d:b3:3b:98:ad:f4:98:c9:c8:
                    ac:88:c1:b0:6b:5a:3f:3b:f9:bc:6f:0e:bf:77:17:
                    16:86:59:16:31:59:2f:7e:3e:98:6a:5c:5e:5a:4d:
                    1c:48:38:ee:b5:cb:4d:d1:b1:c1:84:a7:81:72:00:
                    40:d5:09:1a:cd:5c:28:6a:2c:62:57:36:7c:d1:81:
                    73:55:e6:b9:88:51:b3:b8:39:a3:80:1d:d5:bc:6f:
                    27:46:9a:ea:04:32:98:f7:2d:25:8d:75:36:37:9d:
                    33:69:19:02:29:69:1a:8a:c4:6e:2c:20:c0:bd:93:
                    12:f8:57:9a:0a:cd:ee:23:37:c9:af:d5:da:d5:bc:
                    4f:bc:d6:1a:90:6d:d5:8a:20:2f:93:c9:59:e7:44:
                    72:92:c5:72:8e:47:d2:20:e1:b6:05:51:7c:34:4c:
                    c1:b3:51:d6:80:8f:ba:16:0c:d6:e1:2e:15:0b:86:
                    ab:5d:b3:d3:35:18:18:68:49:14:dd:5d:0b:d7:7d:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:8A:06:4C:31:2E:8D:86:98:13:D1:7F:B5:E8:46:17:93:06:E2
            X509v3 Authority Key Identifier:
                keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/TqyKBkwxLo2GmBPRf7XoRheTBuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.43.168.0/23
                  92.43.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:c8:84:68:61:4f:b5:0e:8b:0f:23:c1:16:47:94:86:c8:
         1f:2b:59:30:16:8c:5f:cd:58:8d:e4:df:3d:50:72:30:f3:59:
         f5:e4:fe:f7:d3:f7:27:07:36:4e:6c:7a:ab:03:f0:84:3c:71:
         dd:ca:d1:0d:6a:7e:06:3c:12:b4:f4:b8:c2:66:45:79:1b:af:
         58:2f:72:37:0e:19:0a:b4:12:33:35:32:50:c9:e4:01:57:2c:
         0c:0a:9d:37:52:f2:ea:3c:1f:36:d9:0d:eb:86:06:6f:72:2b:
         98:5e:3e:85:fb:5d:11:09:45:5a:43:70:e5:2c:71:56:ec:74:
         ac:5c:0f:fe:61:a1:b5:09:20:ba:2d:c9:9e:0e:b6:6b:a1:4b:
         67:d4:a4:cd:75:67:a3:fb:f4:a5:29:a6:ee:2e:5b:77:56:a7:
         a8:0a:ba:9a:94:eb:21:b2:b6:2d:f5:fa:47:c2:0b:62:2a:22:
         5e:ad:89:44:95:ac:b0:5a:98:85:e8:37:8e:3a:2c:eb:89:25:
         1b:3a:13:a0:f4:7c:13:5b:e5:ae:fc:ae:7f:66:91:af:50:e8:
         11:8c:05:60:12:1c:02:b4:13:a3:d5:22:99:0e:77:02:4f:c3:
         df:bc:76:bd:8a:ff:d1:00:e6:35:67:5a:c7:63:95:df:0f:94:
         f8:a4:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:30 2024 by rpki-client on console-ams.rpki-client.org