Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UnxBlJuONlsdxOcvajHCnl8UhqY.roa
File:                     UnxBlJuONlsdxOcvajHCnl8UhqY.roa (raw, json)
Hash identifier:          dYasqZAFSeKWilcFAND2MArflXWmhuk6VBYi0WYPPT4=
Subject key identifier:   52:7C:41:94:9B:8E:36:5B:1D:C4:E7:2F:6A:31:C2:9E:5F:14:86:A6
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0183E79121E9E988168468BD78F423624177
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UnxBlJuONlsdxOcvajHCnl8UhqY.roa
Signing time:             Mon 17 Oct 2022 20:09:51 +0000
ROA not before:           Mon 17 Oct 2022 20:09:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55286
IP address blocks:        93.92.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e7:91:21:e9:e9:88:16:84:68:bd:78:f4:23:62:41:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Oct 17 20:09:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=527c41949b8e365b1dc4e72f6a31c29e5f1486a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:3c:79:65:36:3d:91:cb:34:15:c3:be:b9:
                    77:5e:c5:4c:18:53:b4:56:e2:5c:80:bc:ab:5f:80:
                    42:31:26:46:1c:5a:08:c8:40:75:4e:9f:9a:4e:da:
                    d5:e5:42:15:29:a1:dd:5f:d9:b6:c0:ab:41:e9:e0:
                    fd:ac:72:b9:71:d4:d8:fe:8e:68:43:ae:7f:2e:a4:
                    b6:58:71:0e:fc:98:78:fd:b6:11:03:f9:da:17:3f:
                    7b:a1:48:f0:3c:a1:22:d7:3a:68:8c:97:5a:1e:d3:
                    24:46:9b:0b:cc:0b:2b:bf:fb:d8:a6:f1:92:8a:c8:
                    f8:08:50:b5:c8:a8:6e:c9:a8:f7:88:9d:4c:8c:90:
                    a3:c7:61:d9:c7:69:cb:26:21:2e:df:a2:0b:0a:0c:
                    68:94:75:47:5e:77:e2:43:c9:8e:d2:96:e3:59:84:
                    75:b5:fa:69:78:0e:33:2c:2b:39:48:82:71:3f:71:
                    33:e8:7c:57:2f:24:61:ab:52:d6:67:2a:de:a6:f6:
                    de:22:f2:38:73:3f:39:f2:48:53:e2:33:4b:ae:b8:
                    94:98:3d:dd:98:55:70:7c:93:a2:58:01:47:99:5d:
                    b9:cd:09:e7:70:94:d8:c9:69:58:d5:79:84:96:48:
                    95:e6:d3:5e:51:6f:50:b2:33:a5:3f:e8:06:29:44:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:41:94:9B:8E:36:5B:1D:C4:E7:2F:6A:31:C2:9E:5F:14:86:A6
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UnxBlJuONlsdxOcvajHCnl8UhqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:db:93:0e:05:1d:d7:04:20:dd:22:67:fe:7b:12:c5:20:d5:
         c3:f7:dc:2b:a7:df:f0:88:5f:99:83:a0:45:36:41:64:c7:2a:
         35:8e:ca:83:f6:f8:11:c0:74:a4:30:00:2a:f9:95:47:28:f0:
         c0:37:e4:3d:ec:88:48:35:6b:8f:da:83:e4:b9:5b:02:09:5b:
         d5:90:ea:7b:5c:51:e1:b5:48:4a:b3:65:13:29:4a:8a:b0:83:
         45:f0:af:f1:af:58:5c:7d:83:c3:44:63:37:82:de:d4:69:f7:
         e5:b7:c0:22:f2:08:fb:d6:3e:c3:81:1c:ee:9e:1a:b0:bd:f0:
         69:56:2b:5c:6b:53:be:18:af:41:57:c0:ce:5d:b9:ad:96:17:
         80:03:2d:ac:a9:77:a2:9b:2d:a0:e2:df:2d:17:59:a4:32:b7:
         b2:cb:bb:c0:dd:dc:31:59:41:e9:95:12:2c:bb:96:8f:26:94:
         2c:e6:d5:3f:8f:47:d2:a7:89:56:f4:82:92:50:b4:ad:bc:58:
         77:ff:3e:90:d9:70:23:0f:99:9e:78:5f:21:ff:26:83:4f:70:
         81:d6:72:d9:3f:20:03:97:81:02:a2:47:9d:22:c8:d1:ac:56:
         b7:bb:d4:e3:bf:3f:9e:b1:52:55:b3:4c:27:c3:76:eb:3d:fb:
         c0:84:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org