Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8ArRvByJLAjNCUHclX3Qdebzs-4.roa
File:                     8ArRvByJLAjNCUHclX3Qdebzs-4.roa (raw, json)
Hash identifier:          29OIs9r0BFs8IpOCE6BzqHaFquFXhiAX0jV0QJxWVBM=
Subject key identifier:   F0:0A:D1:BC:1C:89:2C:08:CD:09:41:DC:95:7D:D0:75:E6:F3:B3:EE
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0182860FDF85A1F8D46F8DCC4401B35610D7
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8ArRvByJLAjNCUHclX3Qdebzs-4.roa
Signing time:             Wed 10 Aug 2022 04:42:43 +0000
ROA not before:           Wed 10 Aug 2022 04:42:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        83.147.20.0/24 maxlen: 24
                          83.147.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:86:0f:df:85:a1:f8:d4:6f:8d:cc:44:01:b3:56:10:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Aug 10 04:42:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f00ad1bc1c892c08cd0941dc957dd075e6f3b3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:68:77:ba:29:c7:72:f7:ca:b2:88:5c:2b:
                    ec:76:85:3a:2c:52:44:82:7d:e3:70:c4:ec:3f:db:
                    ff:a2:49:9f:2c:1a:7f:29:58:65:18:a0:d1:a0:c0:
                    26:a4:7e:7f:1f:2a:ee:7f:bd:db:6e:c8:cf:ad:84:
                    b3:de:ad:0a:da:fb:68:b3:e5:50:30:aa:c6:58:37:
                    06:eb:a3:06:df:c9:0c:14:70:5d:40:79:66:28:00:
                    16:f8:1a:15:2b:17:96:b8:8a:d5:21:a6:67:a9:b6:
                    b9:45:6a:6f:be:a3:de:39:6f:b6:60:77:73:b8:9e:
                    8b:49:b5:0d:d4:11:cf:0d:a3:b0:1c:07:5e:47:3a:
                    aa:c3:84:18:22:0b:2b:92:fd:7c:5b:1e:77:54:55:
                    18:e5:36:9d:7f:76:d8:34:3a:f6:55:74:2c:76:8b:
                    80:e3:74:31:2f:0b:32:0c:f9:7f:aa:9d:cf:08:a3:
                    a5:10:df:61:bc:18:20:d2:7d:96:19:55:96:57:d5:
                    a4:2d:07:52:42:94:ce:97:f5:91:c4:05:e0:ed:bb:
                    2f:4d:b4:cd:05:8c:6a:92:45:4f:7f:b3:87:35:c0:
                    1a:06:9c:24:73:c6:43:c0:fd:8b:28:16:65:72:4c:
                    e4:03:42:50:8f:10:f6:ac:f5:07:2d:17:13:27:d4:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0A:D1:BC:1C:89:2C:08:CD:09:41:DC:95:7D:D0:75:E6:F3:B3:EE
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8ArRvByJLAjNCUHclX3Qdebzs-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:60:43:7e:2c:e4:e2:82:6c:a7:90:08:00:4e:45:b0:33:a8:
         be:ee:aa:81:81:9c:57:33:b0:00:80:e9:28:6f:9b:86:cf:6e:
         9a:e7:a5:29:ad:c5:1f:84:85:b9:15:e0:2d:89:a8:20:09:2c:
         fe:f3:33:79:9d:f0:17:4d:be:ec:61:d5:99:66:23:3a:7f:33:
         07:7d:65:79:8a:b1:1c:f9:93:31:ea:5f:83:20:c1:47:0b:c2:
         78:86:54:04:e7:32:dd:15:46:f3:5e:52:b8:59:2d:22:b5:7f:
         6e:0d:03:4a:4c:0d:2c:af:72:e7:3a:93:9d:1d:20:ae:86:58:
         8e:e4:cd:08:dc:6b:49:9e:50:c4:36:5c:52:ae:15:20:e8:74:
         ee:c7:c3:df:ad:de:02:5a:c9:e5:ac:5b:1e:37:86:6b:23:93:
         af:a9:bf:57:94:88:63:00:07:26:f6:0b:1d:46:2e:c6:76:47:
         fd:8d:5e:44:39:d0:00:21:7e:c7:96:2d:51:fe:b6:d2:cd:eb:
         63:fa:03:48:f5:f9:7e:34:d1:0b:2a:6a:b0:03:e8:49:72:52:
         9f:c6:31:0b:4d:b5:e9:d0:d2:37:56:72:83:7c:21:93:31:26:
         8a:46:42:2d:9f:e8:7c:8c:42:72:c9:32:8e:48:80:25:e3:3d:
         da:fa:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org