Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4uaQo996VVqs9HdzMBnX_eyau-8.roa
File:                     4uaQo996VVqs9HdzMBnX_eyau-8.roa (raw, json)
Hash identifier:          wRs4rDD6zxPqalwYW6xkqYY/l4ZLm81zz/ktf9/N0DI=
Subject key identifier:   E2:E6:90:A3:DF:7A:55:5A:AC:F4:77:73:30:19:D7:FD:EC:9A:BB:EF
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       045CAF98
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4uaQo996VVqs9HdzMBnX_eyau-8.roa
Signing time:             Tue 10 May 2022 05:10:35 +0000
ROA not before:           Tue 10 May 2022 05:10:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        83.147.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73183128 (0x45caf98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: May 10 05:10:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2e690a3df7a555aacf477733019d7fdec9abbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:f6:87:f2:e5:6a:91:26:c7:ec:c6:58:9a:
                    19:b6:d2:40:02:66:98:a0:98:79:f7:b5:1b:a8:8f:
                    ef:1a:66:46:e6:c1:a9:78:bd:db:23:37:1c:c2:91:
                    37:43:9d:e6:94:1d:66:f9:63:c3:1e:da:3a:3c:c5:
                    38:ca:00:47:7a:07:7f:1c:fb:c7:5a:10:06:dd:0a:
                    94:95:6a:ec:ab:78:34:db:f8:fd:dc:34:d7:42:b2:
                    94:f8:31:ed:9a:b7:0f:36:7f:fa:07:dc:37:a9:5a:
                    19:60:d7:cc:4c:4f:6e:d4:fb:99:66:0e:6e:6c:8e:
                    6e:7b:bc:f2:7c:76:0b:0e:db:a9:4e:b3:87:f9:4d:
                    36:cb:15:6f:d8:07:3a:6c:ec:7b:54:90:92:96:74:
                    8d:74:b5:39:f9:34:31:36:ca:aa:93:58:c9:de:b3:
                    8c:4e:bc:04:b2:ca:ee:b8:21:3c:a5:52:a4:03:10:
                    8b:b3:34:58:a3:7c:b9:54:a2:ea:43:fd:22:dd:41:
                    08:7d:c8:3f:69:13:29:6b:59:fc:64:16:4f:57:21:
                    55:c4:98:b0:3b:80:77:0f:41:b2:ba:4a:d3:67:5e:
                    ae:3c:62:0f:f9:50:b6:0b:44:7e:1b:97:78:4c:66:
                    3b:62:e0:06:ef:a0:01:75:0e:bb:b0:84:1c:0f:a3:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:90:A3:DF:7A:55:5A:AC:F4:77:73:30:19:D7:FD:EC:9A:BB:EF
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4uaQo996VVqs9HdzMBnX_eyau-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:b7:a6:06:78:9c:96:62:e5:99:12:df:53:5e:77:6d:3d:f0:
         c0:aa:3f:f3:57:29:85:db:a2:31:1a:5c:94:1b:07:47:de:f3:
         d7:ce:4c:f9:e0:df:92:be:aa:eb:79:33:62:0f:a9:0e:45:e1:
         32:94:40:74:22:a2:87:94:14:24:38:14:be:44:7a:0c:5d:2a:
         42:a8:a2:75:3f:04:25:a9:1a:c5:9f:bf:c6:f0:82:36:80:87:
         6a:f0:44:f9:56:22:2f:00:2c:35:5f:cb:42:ae:f9:39:e3:53:
         46:c4:08:b7:8f:b6:0e:1b:b1:90:aa:9c:fc:ab:6d:75:c3:9f:
         9e:4d:15:51:0b:33:0d:53:a1:33:ae:30:f7:5a:6b:3e:5e:4c:
         e5:30:d0:8b:92:ad:b8:1d:46:64:91:66:02:be:ee:6e:96:ba:
         5f:fb:76:5f:93:57:cb:85:fb:84:8d:b3:57:74:b7:8a:65:ee:
         7a:73:5c:69:84:52:40:99:a6:52:55:28:d7:90:eb:1b:d2:00:
         b2:74:c2:6c:3a:ab:2b:4a:72:c0:d9:18:ba:b0:de:0a:6b:7f:
         ff:85:69:7b:20:8c:b3:64:7c:81:fe:f5:42:23:c9:e0:a8:6b:
         7f:c4:11:d1:8f:64:1c:02:50:08:fd:7c:5a:01:3f:7e:85:78:
         95:d9:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org