Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa
File:                     XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa (raw, json)
Hash identifier:          tLl9Bdjb3I18g63MTogKKHZD3IFN6VfHVlcWSpnexqU=
Subject key identifier:   5D:34:36:90:A0:D5:AC:C6:46:74:5A:44:F3:69:17:38:54:18:24:90
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01835F5997C46EDE39CCE0F3ACE224FCFD4E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa
Signing time:             Wed 21 Sep 2022 09:20:50 +0000
ROA not before:           Wed 21 Sep 2022 09:20:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44378
IP address blocks:        93.92.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5f:59:97:c4:6e:de:39:cc:e0:f3:ac:e2:24:fc:fd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Sep 21 09:20:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d343690a0d5acc646745a44f369173854182490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:b0:c3:73:cd:b4:af:89:44:0a:d9:73:ef:
                    b1:0e:1a:c2:e2:90:e5:04:be:fa:89:9d:5b:83:cf:
                    da:4a:14:23:f6:33:4c:32:cc:40:c2:73:ea:78:d2:
                    e6:4f:62:33:9e:bd:d3:4d:a6:0c:4b:2f:04:17:01:
                    1e:2f:7b:c6:ca:14:5b:43:ba:c5:6a:8e:e5:b5:b7:
                    63:0a:5d:8e:f9:15:99:fb:50:69:7a:ac:b2:3a:a7:
                    0f:21:a2:9b:df:5c:04:98:0f:e0:dd:8b:8c:d8:99:
                    98:df:dd:4b:37:58:ac:22:4a:ba:9f:e0:7d:67:4c:
                    22:ef:91:c2:bb:02:5a:de:a1:e4:3c:4f:54:58:c8:
                    a7:b9:c8:1f:70:b0:52:dd:b0:dc:be:0e:b4:36:f3:
                    2a:bc:ac:84:24:32:65:84:93:89:54:11:c5:1a:86:
                    59:e5:ab:9e:65:c1:07:76:df:07:f6:07:c8:f4:3a:
                    ef:18:91:93:77:8a:d6:a7:4b:12:fb:78:90:49:ba:
                    7d:7b:9b:42:55:c4:f1:bc:5a:66:72:f4:d8:22:80:
                    49:b9:24:9d:a8:85:b2:a1:6b:75:0b:aa:4c:09:68:
                    9a:91:61:cc:83:79:5f:01:94:e3:23:56:da:53:15:
                    67:a9:f8:fe:69:38:d3:75:3d:24:d6:ec:7e:0a:6d:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:34:36:90:A0:D5:AC:C6:46:74:5A:44:F3:69:17:38:54:18:24:90
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XTQ2kKDVrMZGdFpE82kXOFQYJJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:28:99:72:3d:f4:4b:27:78:ba:9e:ee:21:59:64:23:00:5f:
         7a:65:89:d0:1a:78:0d:20:9f:5f:28:6f:1d:73:28:9b:c4:f3:
         bf:aa:0c:c5:64:15:e7:01:05:46:d6:9f:6a:a0:ed:70:ec:96:
         4a:ba:6f:9d:a5:1c:c5:fb:2a:57:c8:7d:ea:90:25:9a:46:ee:
         1f:3a:ac:fd:7e:23:c5:bd:e8:95:b4:83:a9:f0:48:10:90:12:
         40:a8:85:fc:bb:78:0f:a5:53:8e:e9:ed:66:93:17:93:10:5f:
         5f:bc:15:36:86:a8:6c:4d:b5:ab:a8:8f:d5:e5:76:4b:8c:23:
         a7:c5:7c:1b:cb:46:dc:7c:f7:1d:50:36:61:48:a2:b5:25:e0:
         c1:a5:c6:a3:89:b2:2b:5a:c2:e5:a1:d6:d8:43:f6:01:12:1b:
         73:c4:69:1a:e7:29:64:e1:a6:64:b4:68:eb:5e:c6:37:c8:65:
         a0:53:f1:58:0e:f8:46:c4:c3:9f:b8:aa:16:3b:bc:12:63:d3:
         fd:67:9a:83:f9:40:33:e9:11:f1:83:18:70:e4:bb:45:8a:06:
         96:3e:1e:2c:3d:9f:bc:00:4b:7f:16:22:e8:49:91:10:0d:77:
         73:3c:f9:33:eb:18:9b:ee:b0:6b:ec:95:60:47:e5:07:c2:da:
         3e:e0:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org