Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5WrUkY-9wkfnPiVs4OD-bxfQoec.roa
File:                     5WrUkY-9wkfnPiVs4OD-bxfQoec.roa (raw, json)
Hash identifier:          qSo4wY7Oflt1DBrBC62L2/hlUxFCucUy+CDyu3Kj3Lg=
Subject key identifier:   E5:6A:D4:91:8F:BD:C2:47:E7:3E:25:6C:E0:E0:FE:6F:17:D0:A1:E7
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       049BC99D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5WrUkY-9wkfnPiVs4OD-bxfQoec.roa
Signing time:             Thu 02 Jun 2022 04:29:21 +0000
ROA not before:           Thu 02 Jun 2022 04:29:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        83.147.4.0/22 maxlen: 24
                          83.147.8.0/22 maxlen: 24
                          83.147.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77318557 (0x49bc99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jun  2 04:29:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e56ad4918fbdc247e73e256ce0e0fe6f17d0a1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:04:d4:b8:39:0b:1e:70:16:17:d1:29:64:
                    19:a3:e1:97:68:2d:09:ac:b9:4e:37:4b:19:70:e2:
                    08:0d:d3:47:34:1c:0b:62:ce:19:de:cc:e1:82:b3:
                    14:26:b4:0f:e1:0c:fd:67:ab:54:84:74:50:b6:8d:
                    c3:e6:f0:61:9c:ec:35:cf:82:34:9e:90:18:19:f8:
                    76:eb:3a:f6:02:eb:e6:aa:68:3e:96:57:d3:d4:65:
                    87:2c:d0:7d:c7:42:7f:fe:e3:3d:20:50:5c:65:90:
                    95:b1:9b:ad:25:af:f7:f1:dc:04:76:b7:4d:67:fc:
                    99:b3:12:ab:46:d4:dd:2d:ce:39:d7:b7:9b:80:72:
                    01:18:4f:a5:e9:b5:fd:a6:63:ab:0a:64:fd:3e:f0:
                    79:f7:34:3d:5c:ec:5b:6f:f7:57:23:34:c7:8b:ed:
                    c7:c4:dd:d4:ed:36:2a:3c:62:49:cc:09:f7:ed:86:
                    bd:de:49:f3:d8:17:f4:32:8f:38:f6:12:10:db:37:
                    73:d3:f1:1a:44:9c:67:f2:1a:f5:20:9c:eb:89:a7:
                    f1:7e:f2:b4:73:00:5f:2a:de:da:6e:a3:7a:6a:76:
                    c4:9c:ad:bc:fe:4b:48:2f:84:2d:84:3a:97:7e:42:
                    43:c8:df:ca:40:2f:1a:4f:7f:80:13:3c:57:ac:37:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:D4:91:8F:BD:C2:47:E7:3E:25:6C:E0:E0:FE:6F:17:D0:A1:E7
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/5WrUkY-9wkfnPiVs4OD-bxfQoec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.4.0-83.147.11.255
                  83.147.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:a6:60:5c:68:3c:77:25:43:a1:4a:55:1c:1a:c6:ac:f9:
         f4:58:09:fb:ac:e9:e4:a2:10:bc:dc:5d:d5:15:2c:49:53:fa:
         2d:a9:03:6d:c8:b4:80:0e:b6:59:55:c1:1c:9d:95:a5:8f:06:
         03:05:d7:22:f2:d1:93:6d:e5:ff:5f:8a:b1:8c:79:71:37:5a:
         55:29:01:cb:57:0d:75:64:78:50:3f:b3:39:81:2d:28:e0:89:
         3d:d1:f5:29:05:4a:92:45:0a:b3:63:f7:af:56:bd:57:61:86:
         2a:ec:f7:b0:e1:a3:54:fe:1d:c5:43:89:47:ac:dc:08:a9:e3:
         f2:51:83:a2:12:d2:63:00:4e:eb:61:d6:97:e8:8b:24:7a:7a:
         89:b6:6f:d3:a1:2b:8c:a9:f2:3e:f4:4b:d3:11:7e:92:60:6c:
         f1:e4:49:03:e4:ab:cc:3b:b8:04:81:48:2a:a6:bd:41:ce:66:
         82:8c:09:03:f8:5f:2a:c4:10:82:28:a1:af:e3:50:0a:fc:9f:
         7b:74:81:fe:12:27:2b:51:83:e0:4b:d0:6e:c1:ae:7d:f1:5d:
         5f:5c:b9:fe:fe:7b:74:fb:2f:f0:6b:a4:44:ed:c7:d2:b2:c4:
         23:61:9b:02:0c:44:6c:54:0f:1e:ff:ea:e3:01:9a:58:0a:32:
         14:5c:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org