Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/3PmRv-SsD-jfdiAeShq9w8iT9us.roa
File:                     3PmRv-SsD-jfdiAeShq9w8iT9us.roa (raw, json)
Hash identifier:          PkYonTxRrmi59VtPzEpQ8P93DaF+7uUJkEFUiYRoY5s=
Subject key identifier:   DC:F9:91:BF:E4:AC:0F:E8:DF:76:20:1E:4A:1A:BD:C3:C8:93:F6:EB
Certificate issuer:       /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial:       0EBAADFA
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/3PmRv-SsD-jfdiAeShq9w8iT9us.roa
Signing time:             Fri 27 May 2022 06:43:13 +0000
ROA not before:           Fri 27 May 2022 06:43:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39830
IP address blocks:        83.173.124.0/23 maxlen: 24
                          83.173.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247115258 (0xebaadfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
        Validity
            Not Before: May 27 06:43:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcf991bfe4ac0fe8df76201e4a1abdc3c893f6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:58:6e:57:1b:6b:16:6f:de:4f:b0:99:79:
                    af:77:d0:4a:41:fa:38:e9:12:89:89:5e:b4:b8:0d:
                    30:51:5d:c9:92:c0:1a:01:54:1e:8d:1f:96:77:b9:
                    c1:2a:0e:ae:13:bd:21:34:9a:23:b3:9f:07:54:04:
                    1b:9f:91:bb:32:27:6c:bf:7c:19:ab:aa:f3:58:6c:
                    68:a3:e6:ba:2a:34:a4:0e:1d:bd:5b:79:51:0f:f2:
                    ce:3c:76:89:38:ab:28:d4:7f:3e:e8:6e:63:eb:02:
                    2c:fd:3e:28:d4:10:6c:fc:cf:8c:5e:03:92:ad:02:
                    81:39:03:37:90:b9:18:44:9c:2e:2c:f7:b6:1e:6e:
                    5c:a4:49:d4:53:13:24:65:ab:92:01:76:b6:d3:7c:
                    42:4b:a4:42:93:ab:74:56:df:23:af:a6:44:99:33:
                    a4:dc:d5:01:45:55:ed:50:fb:49:1e:f5:96:35:d4:
                    5a:a0:55:40:bf:66:e5:3a:af:18:01:bb:1f:b1:ea:
                    6f:c4:c6:55:9a:41:b4:ee:be:4e:9a:a8:87:8b:29:
                    67:f5:b8:3a:9e:a9:02:bf:51:69:d5:e0:63:48:bf:
                    09:1a:83:5d:4e:39:e5:71:b8:de:44:e9:90:41:99:
                    ec:e0:20:c7:12:65:9e:a3:30:82:ec:27:66:28:fa:
                    7f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F9:91:BF:E4:AC:0F:E8:DF:76:20:1E:4A:1A:BD:C3:C8:93:F6:EB
            X509v3 Authority Key Identifier:
                keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/3PmRv-SsD-jfdiAeShq9w8iT9us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.173.124.0-83.173.126.255

    Signature Algorithm: sha256WithRSAEncryption
         40:39:b2:c3:9c:9c:7e:68:2c:b1:e7:a6:51:67:e1:05:b1:d5:
         b4:f0:2d:7a:5f:1e:0f:7b:61:b2:5f:ad:28:58:c1:52:b4:51:
         02:56:a5:13:03:d1:e6:42:2c:d7:07:62:57:d3:08:92:94:74:
         2c:db:a2:f1:1c:f1:02:3d:d6:26:90:c0:81:e1:f1:6a:ac:91:
         7c:56:a6:f5:bf:54:f5:e4:c8:39:77:85:70:c0:cc:63:55:67:
         bf:41:26:43:28:0a:0a:e9:98:83:fb:56:8e:3e:da:8a:9d:a0:
         c3:8e:28:27:64:b4:72:a7:9f:ed:85:34:d6:df:21:8c:24:5b:
         83:ad:d4:d7:b3:44:84:08:bf:72:26:ed:87:28:0e:65:9e:b2:
         9d:8e:fe:3d:cc:39:10:a8:ee:80:d9:04:7a:dc:7b:4d:a9:87:
         52:ed:8d:82:a8:c6:4d:6d:a1:86:6a:3f:3c:01:15:c5:5a:4f:
         95:c6:f5:83:01:4e:7b:7a:b9:d8:8a:d5:77:ac:3f:ef:0c:4c:
         24:90:93:df:ea:2b:32:70:9f:dd:e9:de:bf:8c:59:c7:1a:23:
         fb:e0:a8:58:8f:90:2e:1e:5b:87:a0:7d:17:75:a2:27:31:39:
         7b:ce:04:83:3d:5c:a9:d4:18:04:dd:b5:af:eb:ab:1a:77:59:
         f0:05:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:52 2024 by rpki-client on console-fra.rpki-client.org