Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/NVPh5D8T0GHBF4Mg5hhriTRMO88.roa
File:                     NVPh5D8T0GHBF4Mg5hhriTRMO88.roa (raw, json)
Hash identifier:          dYc2ncegPXLiSXNWM7Q4CdNy7HHSQHpwtlLQ/9b5V8c=
Subject key identifier:   35:53:E1:E4:3F:13:D0:61:C1:17:83:20:E6:18:6B:89:34:4C:3B:CF
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       034F63F9
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/NVPh5D8T0GHBF4Mg5hhriTRMO88.roa
Signing time:             Wed 26 Jan 2022 09:19:43 +0000
ROA not before:           Wed 26 Jan 2022 09:19:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133973
IP address blocks:        83.147.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55534585 (0x34f63f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan 26 09:19:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3553e1e43f13d061c1178320e6186b89344c3bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:bc:99:94:e6:f7:d5:f4:d2:0f:54:27:bc:
                    78:88:77:05:02:de:c4:3c:be:7f:14:93:39:83:4d:
                    4c:35:94:a4:22:c5:c5:a7:15:5a:68:56:43:90:39:
                    34:91:40:ac:aa:27:80:f3:54:a6:74:7e:77:f4:8f:
                    ac:25:a7:91:fb:b5:54:68:72:bc:94:62:16:24:40:
                    53:6a:8f:dd:16:2d:45:9d:19:7f:95:96:24:5b:2b:
                    b9:e5:52:11:4f:80:39:f4:5d:ae:24:bd:f7:30:e2:
                    c8:c9:14:72:f0:d2:64:18:ab:a6:c0:67:90:99:67:
                    58:60:96:91:1f:b6:13:0f:69:e4:50:66:63:79:68:
                    1d:81:6d:30:80:a6:be:2e:f1:58:f5:f5:0e:c1:d7:
                    1c:4d:6c:8a:8d:8e:93:30:d1:26:39:0b:e2:10:e6:
                    02:cc:42:7b:47:ba:a1:a9:43:cd:5f:15:02:91:ab:
                    87:eb:35:e1:f0:c7:62:71:40:f7:7f:04:b5:dd:c6:
                    56:bd:31:e2:b0:9b:6b:ba:7f:97:14:a6:07:30:b7:
                    b5:a3:0a:4e:64:35:0e:12:ce:6b:ca:14:1a:ad:31:
                    c1:22:ce:f8:96:a5:04:24:38:6e:57:22:db:3e:9e:
                    97:ee:51:4d:7e:7b:a3:05:e2:b6:94:20:80:4b:9d:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:E1:E4:3F:13:D0:61:C1:17:83:20:E6:18:6B:89:34:4C:3B:CF
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/NVPh5D8T0GHBF4Mg5hhriTRMO88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:96:dd:df:90:70:68:1a:4b:7b:c2:2f:99:8d:96:d6:b4:
         bd:3c:df:21:d9:cf:7a:76:76:dc:94:87:ea:67:b3:38:e7:74:
         2d:8b:2e:8f:c9:71:7b:ee:be:71:9e:18:db:f8:ee:aa:14:7f:
         94:33:4e:47:b4:50:84:43:59:91:6b:04:f7:54:0a:49:a2:a2:
         b1:00:41:b2:01:6c:fd:36:36:55:b0:74:8f:34:7c:67:b8:5b:
         3e:83:00:d2:5e:ed:bb:f0:de:6d:7f:62:ea:f1:74:95:60:43:
         0a:92:a2:a9:fc:6e:a6:ba:95:15:7b:c3:ba:45:37:d9:a3:1f:
         d2:58:80:05:4b:99:9d:bc:4f:4f:63:e9:22:58:54:0c:cb:7e:
         09:f6:ba:1b:7f:d7:e9:e7:14:09:4c:b7:48:ee:28:2c:19:81:
         28:75:c2:8e:ea:62:9e:20:ba:32:5b:e1:60:8f:fe:fc:f5:43:
         67:4b:ca:8e:06:95:4b:a3:f0:2a:93:0f:37:f0:eb:f7:7e:08:
         2b:54:eb:a9:a1:96:b0:90:5d:9f:0e:27:01:a8:22:e1:e8:c8:
         9d:da:40:dd:d6:b7:24:11:c0:49:02:d6:85:54:e9:1c:bc:fa:
         3f:0a:ef:f0:9d:42:41:00:81:75:f7:38:d5:a6:38:b4:c3:cc:
         3f:23:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org