Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6TpXjRXu2Z_Ephc6LeFroqyO65I.roa
File:                     6TpXjRXu2Z_Ephc6LeFroqyO65I.roa (raw, json)
Hash identifier:          H4MkUNrIJnK38yCAu5pfaLFnGkDWLPJMNVAIcJCI8Pw=
Subject key identifier:   E9:3A:57:8D:15:EE:D9:9F:C4:A6:17:3A:2D:E1:6B:A2:AC:8E:EB:92
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       049A8409
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6TpXjRXu2Z_Ephc6LeFroqyO65I.roa
Signing time:             Thu 02 Jun 2022 04:29:20 +0000
ROA not before:           Thu 02 Jun 2022 04:29:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3320
IP address blocks:        83.147.40.0/22 maxlen: 24
                          83.147.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77235209 (0x49a8409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jun  2 04:29:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e93a578d15eed99fc4a6173a2de16ba2ac8eeb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:fd:3a:e4:8f:9b:10:da:b3:1a:ee:97:6a:
                    c8:3e:e2:b8:8c:d7:ea:4c:52:6f:a6:e3:94:ed:ce:
                    70:0c:76:b5:98:b3:31:31:cf:78:15:84:7b:51:d1:
                    f8:01:5b:a7:ee:da:6c:7c:ba:22:62:3d:87:83:b2:
                    ae:ca:b1:d3:f6:ad:23:f2:2c:e2:f0:11:cf:8b:24:
                    9d:80:6d:ef:9a:af:6b:45:89:d3:dd:76:f6:88:2e:
                    fd:59:7f:55:19:bd:f5:4d:6e:75:da:08:93:57:32:
                    1b:a4:0c:15:d6:67:d7:a1:a2:c2:1b:f0:82:fa:ac:
                    4d:14:bb:bd:93:4d:4a:0f:fb:2b:69:ce:ea:6d:44:
                    85:4f:72:17:ca:c9:48:25:50:1d:5b:3e:ec:f1:91:
                    b4:ca:e7:c1:9c:59:30:ff:f8:fb:a7:f8:fc:ef:e7:
                    73:78:18:b4:c5:fb:3d:44:36:63:73:95:8f:68:b3:
                    73:cb:c6:fb:e7:01:d5:68:be:bb:e9:39:38:21:90:
                    51:88:52:d3:14:9a:27:9e:3d:29:24:0b:39:16:7c:
                    f4:87:dc:e2:86:1e:56:3a:9d:67:02:99:69:f1:86:
                    c9:83:9d:a9:81:76:bc:6d:1d:3f:01:e8:a4:1a:dd:
                    72:9b:3e:38:44:50:62:f7:af:db:41:95:a0:66:a2:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3A:57:8D:15:EE:D9:9F:C4:A6:17:3A:2D:E1:6B:A2:AC:8E:EB:92
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6TpXjRXu2Z_Ephc6LeFroqyO65I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.40.0/22
                  83.147.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:33:ca:0a:ea:47:8b:cf:d5:56:a0:e9:59:35:81:fd:12:0c:
         e5:45:b5:c1:6f:5c:a9:ce:c4:e7:9b:d7:5f:7c:c8:b2:5a:e1:
         84:bc:e8:36:1a:54:f2:99:b6:85:46:b6:4a:82:43:0c:64:36:
         4b:f4:b1:09:24:a3:6f:27:a5:84:e5:61:ab:cb:31:93:ff:c8:
         74:6f:22:35:6f:93:22:a7:be:fb:5d:bd:90:00:fd:fc:26:fe:
         04:47:87:3c:ff:7a:34:31:ef:aa:97:45:07:10:c4:39:8d:d4:
         59:6a:e9:51:2c:e2:55:a0:db:75:c0:33:bb:76:16:90:9a:ea:
         36:f1:f5:1b:51:e9:23:09:9b:12:ba:42:46:24:4a:b0:3c:77:
         0f:11:3d:53:37:a9:e8:46:a5:b8:58:88:58:21:59:6b:41:bb:
         05:45:ad:81:eb:a7:e7:aa:2c:54:32:e6:d8:93:19:33:c5:26:
         5e:59:29:0a:df:c2:37:40:b2:a2:96:98:f0:b5:26:f2:13:53:
         6c:99:c5:c1:6c:61:23:b4:9c:36:53:60:3d:01:8e:00:49:e1:
         3c:2a:ba:55:1f:8f:3a:d7:47:37:0c:db:7b:d8:44:0c:4d:4d:
         1d:a1:0c:9c:36:7b:da:3e:33:8a:e2:f3:bb:58:91:e7:f9:33:
         df:80:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org