Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/lLvv-5TbiyYZ2bdYo2IUnPJmWZ0.roa
File:                     lLvv-5TbiyYZ2bdYo2IUnPJmWZ0.roa (raw, json)
Hash identifier:          7TrErMiB4IG2vCnVAdOIE8HTZ3y8Ek5G1j5YqG6nDso=
Subject key identifier:   94:BB:EF:FB:94:DB:8B:26:19:D9:B7:58:A3:62:14:9C:F2:66:59:9D
Certificate issuer:       /CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
Certificate serial:       10CB0DC4
Authority key identifier: 86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/lLvv-5TbiyYZ2bdYo2IUnPJmWZ0.roa
Signing time:             Sat 01 Jan 2022 02:58:53 +0000
ROA not before:           Sat 01 Jan 2022 02:58:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51368
IP address blocks:        193.104.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281742788 (0x10cb0dc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
        Validity
            Not Before: Jan  1 02:58:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94bbeffb94db8b2619d9b758a362149cf266599d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:27:9f:9e:73:34:a2:3c:7d:65:d3:e9:e6:3b:
                    69:1d:3e:e7:f3:07:65:50:7d:9b:61:08:50:0f:8a:
                    43:2c:d1:5b:96:8d:fd:71:14:28:a9:9b:8a:f6:0c:
                    86:ee:8a:17:bd:ee:cd:1f:0a:3e:09:82:19:07:b5:
                    ae:4c:98:d4:c2:29:c3:55:df:86:9d:3c:8e:57:81:
                    9a:40:69:07:b9:96:e4:3b:8c:44:34:c3:a3:b8:6c:
                    e1:b7:ed:fb:54:60:7f:ea:f4:4c:f9:ad:36:4b:70:
                    15:76:e6:ea:20:38:89:98:a1:13:f1:07:15:d1:e8:
                    8c:82:b0:f1:35:87:8d:07:1b:f7:9b:39:a4:0c:56:
                    71:9f:73:ac:a0:4c:64:24:c5:da:3a:bc:e0:76:64:
                    36:48:77:d1:3c:a9:55:a9:3c:26:8e:6b:f9:2d:d3:
                    94:ec:fd:75:49:9d:7d:f1:7b:52:f7:d4:dc:31:22:
                    41:a3:ac:b4:fd:1c:c4:0f:1d:dd:14:47:ec:cf:71:
                    fb:40:9e:0f:c9:55:d0:07:2c:bb:de:a3:6c:d6:3a:
                    df:cc:7b:72:52:72:6a:f4:dd:3d:41:22:94:cd:aa:
                    d5:da:6a:ee:37:aa:7c:c0:bf:de:84:eb:be:03:8b:
                    1c:bc:1a:60:e6:3c:85:ee:83:8a:71:4c:03:66:59:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BB:EF:FB:94:DB:8B:26:19:D9:B7:58:A3:62:14:9C:F2:66:59:9D
            X509v3 Authority Key Identifier:
                keyid:86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/lLvv-5TbiyYZ2bdYo2IUnPJmWZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/hn3QWtctwi--owKfzukOb7BjiQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3a:34:4e:36:d9:4e:42:7b:e7:9f:63:a6:8c:10:33:46:5f:
         2f:39:bc:27:c9:b0:7b:0b:65:f0:4f:7e:49:86:19:fd:b4:7b:
         04:bd:dd:9e:99:db:05:39:e6:55:41:f5:4c:5f:fa:77:7e:d7:
         a7:67:96:d7:1f:87:c5:f6:ac:23:a3:91:ee:52:a5:1e:7c:f2:
         51:d0:9a:2b:67:f1:70:b2:d6:43:dd:4d:b0:be:ae:86:cb:86:
         fc:e8:e5:f9:e1:7e:88:7c:a0:c3:d6:4b:54:f9:07:d3:11:ec:
         3f:fb:e7:2d:93:7a:ed:79:88:a2:df:44:cc:58:8f:5f:69:0b:
         cf:b1:a0:f9:49:31:bd:d0:79:b4:e4:72:0c:64:1e:df:0a:64:
         6d:75:2d:7c:0b:f0:7b:2c:44:65:12:fd:39:4f:73:91:97:f6:
         24:27:9a:bc:e0:dc:d6:2c:16:e5:e6:c9:fa:89:7e:b8:a7:ba:
         47:98:a1:84:8e:ea:da:38:05:4e:2b:ed:ad:cc:14:3c:80:e6:
         6e:05:ef:b2:fd:e4:59:ae:27:0e:88:9f:e0:a0:42:b9:3c:43:
         10:8a:fe:34:4a:8a:f1:7c:d0:65:31:d8:11:83:ea:50:5f:40:
         16:87:f3:b8:09:a5:9d:88:fc:2b:2b:37:55:bb:a8:b7:bc:f7:
         7e:9f:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:46 2024 by rpki-client on console-ams.rpki-client.org