Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8GLaEg7aLqzxsdceITouOlBDCj0.roa
File:                     8GLaEg7aLqzxsdceITouOlBDCj0.roa (raw, json)
Hash identifier:          cyrG/bO96VUCWZQpUMuX+bClItOM6UDJNhmU9uOIdDY=
Subject key identifier:   F0:62:DA:12:0E:DA:2E:AC:F1:B1:D7:1E:21:3A:2E:3A:50:43:0A:3D
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       041CD6A1
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8GLaEg7aLqzxsdceITouOlBDCj0.roa
Signing time:             Fri 15 Apr 2022 08:39:42 +0000
ROA not before:           Fri 15 Apr 2022 08:39:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205220
IP address blocks:        83.147.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68998817 (0x41cd6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Apr 15 08:39:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f062da120eda2eacf1b1d71e213a2e3a50430a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:ba:1d:dc:60:ee:44:ab:c8:1d:ce:c7:17:
                    58:1b:7a:cb:d2:4e:a4:95:9e:87:99:87:4c:e3:ea:
                    a3:e1:bb:e8:cd:e8:80:04:40:17:d7:06:6c:d9:c4:
                    d9:78:ec:4b:d7:9f:2f:20:75:f8:8d:d3:d8:1a:12:
                    cf:e2:3a:fd:30:a0:6d:c1:09:82:6e:43:cd:27:49:
                    da:0a:a7:3b:2b:10:99:36:05:a9:08:5f:6e:34:ed:
                    41:50:fa:37:6b:6e:4d:f5:0a:8b:fb:d1:02:e8:38:
                    0e:58:75:3c:38:ec:5c:ca:a2:4c:eb:62:14:6f:b6:
                    4e:89:78:24:14:a3:58:ac:26:b1:cf:ba:22:00:5e:
                    40:3e:26:2b:e9:bc:88:49:d5:08:b7:a5:e6:b1:50:
                    19:fe:75:fc:67:68:d1:bc:36:f3:f1:5d:fb:19:10:
                    76:a3:60:50:19:77:e0:9f:cb:a2:ba:bd:7e:98:65:
                    7b:61:fd:bb:50:9d:08:e3:3e:89:ae:da:84:e0:b9:
                    8d:8f:65:d7:b8:ef:9a:cd:66:d9:b3:c1:0e:fa:90:
                    11:9f:7d:3e:44:e7:fd:66:9b:6a:d3:9a:f4:27:d7:
                    1e:ba:9f:c2:7e:d6:0f:b0:54:f9:0c:93:f8:8f:6e:
                    36:de:76:98:74:6f:d8:88:e5:c1:47:82:6f:6c:20:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:62:DA:12:0E:DA:2E:AC:F1:B1:D7:1E:21:3A:2E:3A:50:43:0A:3D
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/8GLaEg7aLqzxsdceITouOlBDCj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:96:6c:f4:68:04:12:5f:39:8d:5a:fe:50:47:c5:24:05:5d:
         eb:2b:70:a9:b3:a8:5a:d4:09:a2:24:4e:28:f6:0a:d0:e4:ed:
         9c:0c:26:b4:8a:76:8c:7f:76:f1:fe:18:9c:46:ac:06:79:ef:
         8c:5e:c3:92:10:43:9c:32:81:8d:c7:ab:d0:43:59:5c:76:f5:
         0b:2f:42:4c:18:15:58:f5:cf:5a:cd:b4:93:a5:07:dc:84:9d:
         38:22:a2:b4:10:68:91:48:41:55:b2:2e:06:b2:e8:de:53:9e:
         a9:6b:1f:a4:02:f3:68:db:b4:49:bd:70:fa:72:6c:21:f8:a0:
         46:06:e4:63:0f:76:38:35:7b:e0:0e:a6:3a:77:49:e7:90:75:
         01:de:7f:78:50:f4:47:aa:a7:81:f9:f2:ba:1c:e8:62:2a:d4:
         35:bf:67:f7:8e:6b:ff:20:78:8e:d5:68:34:97:01:fd:b8:98:
         21:8c:f8:74:d7:fb:9f:43:d8:1b:74:9b:6b:db:03:3b:57:2f:
         2a:4b:3c:07:70:ff:e1:1c:4f:50:2c:bf:52:eb:67:cb:0b:88:
         4d:da:ef:7d:ba:e7:59:ca:8a:ae:9e:b9:8e:0e:7c:17:e6:8d:
         53:fd:e8:70:7f:c8:08:c7:8c:3d:dd:b1:d9:db:66:84:b4:57:
         94:64:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org