Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9TvO7m8f0aI-pZMm4jJrFXfJGZw.roa
File:                     9TvO7m8f0aI-pZMm4jJrFXfJGZw.roa (raw, json)
Hash identifier:          igpOA2Ji+eVmxRLu/pn2Q3Md/2L6URuaPxgDaCalaSU=
Subject key identifier:   F5:3B:CE:EE:6F:1F:D1:A2:3E:A5:93:26:E2:32:6B:15:77:C9:19:9C
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0309F96D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9TvO7m8f0aI-pZMm4jJrFXfJGZw.roa
Signing time:             Sat 01 Jan 2022 13:57:08 +0000
ROA not before:           Sat 01 Jan 2022 13:57:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        83.147.28.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50985325 (0x309f96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 13:57:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f53bceee6f1fd1a23ea59326e2326b1577c9199c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:9f:b8:1d:4f:a3:51:3f:28:39:b6:b6:12:
                    29:99:04:77:e4:ee:27:dc:c3:ee:0b:01:74:5a:cc:
                    d9:ae:32:58:11:17:fe:18:ac:cf:15:e6:78:e5:2d:
                    12:6a:d1:c1:fb:29:f3:3a:7c:64:20:f8:63:ba:bd:
                    4b:ad:8c:ba:b3:f9:bd:db:6e:ac:24:9b:da:bd:35:
                    88:16:0f:7b:77:a5:31:a1:11:4f:9c:a4:57:29:b1:
                    c6:57:f2:28:8d:bd:76:5c:03:32:bb:52:bf:6c:6f:
                    1f:ab:ba:c7:51:e9:ca:3d:0f:1c:48:bf:ee:3e:c5:
                    88:50:71:8d:ff:a6:f4:b8:5a:d0:10:c1:5b:be:a1:
                    97:59:b0:e7:18:b5:1a:a5:a3:00:29:79:94:d7:51:
                    8d:86:b5:e2:cd:b2:de:e3:bb:2f:f3:0a:22:ee:c5:
                    72:98:ce:09:dc:0b:68:02:62:56:52:ba:0d:19:5f:
                    98:e5:98:3e:2f:29:f5:8a:a9:81:e8:95:95:40:01:
                    2d:e7:42:b4:f8:27:4d:91:b6:dd:7d:da:63:c9:aa:
                    0b:e2:08:a1:55:91:5c:32:00:2a:93:b5:ba:41:6a:
                    c7:28:f0:3b:90:d1:b8:76:59:03:cc:b2:58:27:0e:
                    03:6c:79:1b:f9:81:ef:43:2c:e0:46:d9:f5:e1:9a:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:CE:EE:6F:1F:D1:A2:3E:A5:93:26:E2:32:6B:15:77:C9:19:9C
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9TvO7m8f0aI-pZMm4jJrFXfJGZw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:06:31:29:5e:6c:1d:5a:88:0a:89:c4:bb:ce:38:58:67:bd:
         02:95:61:75:0c:f1:21:32:9e:45:ab:be:46:19:b4:ed:54:45:
         0a:8e:d6:5f:d5:75:51:97:51:19:cd:1a:8c:f5:e0:b3:e5:c5:
         b8:f8:29:2c:77:46:c8:2f:98:f6:a8:cb:14:f4:b2:6a:6d:b6:
         4f:29:4e:af:09:24:ae:1c:00:43:fb:2f:6c:dc:40:dd:97:7e:
         ff:92:7e:f1:2f:fc:7b:13:b9:92:1a:43:54:a2:65:0c:d6:d9:
         fc:7a:c5:ab:2d:47:6f:0c:3a:23:4f:57:5a:2e:ff:62:a6:56:
         0d:ca:48:5a:be:d5:a8:69:96:6e:98:ca:af:5f:41:00:e4:2a:
         63:2c:cd:a6:f7:f7:71:51:6e:58:c0:3b:bd:40:86:ab:bf:eb:
         9e:c1:f2:3e:1c:18:65:f1:25:52:6f:a4:ee:67:7e:bb:4b:e1:
         22:83:3d:11:6b:bc:97:50:a9:aa:58:76:86:b1:0d:54:78:f9:
         4b:80:25:78:0c:fb:cf:2a:47:e6:ec:f5:d7:83:2e:0b:52:d7:
         d1:f1:e9:95:8a:6c:8a:18:d7:ea:55:19:20:d7:a6:99:38:f1:
         3f:0c:1f:74:0a:86:3d:72:4e:56:aa:06:9f:55:9e:b7:4f:14:
         02:9d:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org