Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/tjvpMHNr3vG2ajbNV-OztXTCS-8.roa
File:                     tjvpMHNr3vG2ajbNV-OztXTCS-8.roa (raw, json)
Hash identifier:          pMZIDmlfdlml4nHhgDKhJXVgjFXb6QBBf8ujlwsSnz4=
Subject key identifier:   B6:3B:E9:30:73:6B:DE:F1:B6:6A:36:CD:57:E3:B3:B5:74:C2:4B:EF
Certificate issuer:       /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial:       0184E4CC5ACEDCD142E935ABADC5D8BAE08F
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/tjvpMHNr3vG2ajbNV-OztXTCS-8.roa
Signing time:             Tue 06 Dec 2022 00:18:28 +0000
ROA not before:           Tue 06 Dec 2022 00:18:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8467
IP address blocks:        185.83.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e4:cc:5a:ce:dc:d1:42:e9:35:ab:ad:c5:d8:ba:e0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
        Validity
            Not Before: Dec  6 00:18:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b63be930736bdef1b66a36cd57e3b3b574c24bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:92:fd:54:1e:62:da:d6:d9:db:2d:ae:2e:
                    73:a0:2f:45:ab:5e:02:7d:10:09:f2:f6:eb:ef:d2:
                    f2:96:9e:af:33:5d:55:18:6c:c8:29:53:3c:20:ef:
                    ad:d3:c8:65:71:be:3a:4a:f0:5c:1c:3e:41:94:ca:
                    0a:e3:56:19:25:b7:35:4d:9f:8c:69:26:c2:f7:ac:
                    fe:f7:39:9a:79:b1:6b:21:66:a0:72:b4:8f:1c:62:
                    3e:d2:1a:4a:f1:d2:f0:f3:dc:16:b1:12:ee:d6:87:
                    1f:a0:05:5a:8d:1e:ec:ab:5a:85:01:8b:f5:07:30:
                    92:10:fd:0a:ce:ff:d3:ba:b3:21:96:46:bd:a4:04:
                    44:14:24:bd:1c:01:b7:1b:3d:17:cf:79:f7:a1:04:
                    10:d7:28:69:b5:85:54:d6:84:77:90:d2:d3:84:2f:
                    36:37:57:59:c3:91:96:f6:98:64:d9:29:29:11:3f:
                    db:4e:9a:24:2e:1a:51:8e:2a:97:03:d1:a6:6a:d2:
                    d6:b1:7c:4a:64:6d:d0:eb:3c:40:ec:ad:36:db:18:
                    43:62:11:92:2e:e0:4b:15:4e:7b:94:d4:ae:7f:53:
                    f7:53:12:58:33:af:08:15:38:c3:5a:bb:3f:c3:54:
                    98:e8:5a:2b:32:c9:3a:d8:69:36:43:f3:4a:64:3b:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:E9:30:73:6B:DE:F1:B6:6A:36:CD:57:E3:B3:B5:74:C2:4B:EF
            X509v3 Authority Key Identifier:
                keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/tjvpMHNr3vG2ajbNV-OztXTCS-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:06:3b:f3:a9:88:9f:38:cc:d2:dd:a0:b0:ee:de:81:31:
         fe:0e:5c:5b:d2:37:a4:71:15:be:c6:d0:06:72:45:e3:ae:86:
         36:d9:de:8a:b6:f0:17:e9:b6:f8:8e:57:6e:22:52:d3:ad:89:
         05:2e:59:86:44:87:2a:4e:e8:2c:9b:86:f9:f0:43:0f:ff:aa:
         a3:50:61:f3:8a:36:31:2d:ec:42:5a:90:2f:18:80:db:29:83:
         f0:56:f0:96:2f:25:5f:8a:44:57:33:02:57:f9:81:24:d5:d8:
         a7:7b:21:6a:47:af:bd:85:e1:e4:86:34:18:fa:f4:54:df:95:
         00:e5:cc:6a:71:57:02:2b:6e:a0:d4:54:34:15:11:50:bb:cc:
         b1:d7:69:04:0e:17:09:75:88:15:ef:a4:26:3b:98:19:66:f8:
         68:97:e1:33:5e:b9:69:fa:23:71:9b:0a:24:52:e6:c8:85:d4:
         1a:42:4b:6a:24:47:c0:16:63:90:4f:5a:2c:6c:0c:ab:3a:ab:
         b4:44:85:fb:1a:99:bd:e2:9b:c4:28:b5:5f:a6:ec:d5:b8:e6:
         d6:0c:45:20:05:ca:22:5a:40:8d:99:c7:8e:10:b0:af:d7:4d:
         95:75:0c:6a:ef:1e:ff:34:9b:eb:0e:96:cf:92:3b:04:b2:27:
         3f:03:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:23 2024 by rpki-client on console-ams.rpki-client.org