Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RXEyRGSGTHwEFIR0JbDVJdl9kKI.roa
File:                     RXEyRGSGTHwEFIR0JbDVJdl9kKI.roa (raw, json)
Hash identifier:          CeDrKm4yAmJ++yU/KhTdQSFhRGJdi4MYIdWUSMHpJiM=
Subject key identifier:   45:71:32:44:64:86:4C:7C:04:14:84:74:25:B0:D5:25:D9:7D:90:A2
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0392241C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RXEyRGSGTHwEFIR0JbDVJdl9kKI.roa
Signing time:             Thu 24 Feb 2022 04:18:40 +0000
ROA not before:           Thu 24 Feb 2022 04:18:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        83.147.0.0/22 maxlen: 24
                          83.147.36.0/22 maxlen: 24
                          83.147.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59909148 (0x392241c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Feb 24 04:18:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4571324464864c7c0414847425b0d525d97d90a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:6c:c0:d6:f6:35:c3:b9:da:97:3c:2c:48:
                    42:60:62:7d:bc:70:5f:11:1b:94:c7:3b:97:0e:65:
                    a3:9a:dc:c8:59:53:80:e7:8c:84:30:fd:a7:05:dc:
                    82:5e:24:ee:42:94:61:1a:41:cd:3b:05:73:53:2a:
                    60:9e:f4:6c:41:1b:93:21:8d:04:8d:0a:d9:b9:10:
                    f5:29:10:48:b5:db:81:c5:b0:dc:ba:84:bd:a2:a8:
                    4e:3c:50:5f:03:aa:8d:d3:e4:a6:69:dd:b2:ad:7e:
                    49:b0:be:25:91:7b:f3:91:94:30:69:e0:c4:48:25:
                    f1:36:71:ef:18:1f:fa:a9:ca:51:d3:7d:a4:1c:d5:
                    fc:05:cb:28:6d:fa:c2:a1:bf:b8:6f:d9:f6:d7:7a:
                    9e:9d:a9:97:1e:89:de:dd:0d:b3:0b:d1:2c:4f:66:
                    26:89:2b:67:86:2e:51:f0:50:32:70:a5:cd:04:48:
                    9e:09:00:91:85:2f:35:ad:b4:a8:5a:e1:83:38:c7:
                    e2:56:74:b7:f2:1d:7f:6e:04:d5:4c:e0:cb:bd:a6:
                    06:88:01:6f:81:28:1a:67:6a:5b:a6:df:e3:1d:ea:
                    f6:7d:32:40:90:47:18:43:7b:c7:44:1c:10:cf:81:
                    36:b7:35:b8:e0:9c:51:d1:04:17:5e:f6:ab:74:92:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:32:44:64:86:4C:7C:04:14:84:74:25:B0:D5:25:D9:7D:90:A2
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RXEyRGSGTHwEFIR0JbDVJdl9kKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.0.0/22
                  83.147.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:b8:0e:f3:3c:33:12:45:b9:97:7a:17:89:7d:1c:d4:e0:56:
         fa:84:d4:3f:c8:49:07:5b:44:1e:7e:38:b8:31:3c:40:35:66:
         cf:6d:f6:40:2f:bf:a8:57:d0:5b:46:d3:40:a3:d5:2c:08:39:
         21:4f:73:c9:cf:75:1c:78:bd:63:b1:94:15:6c:fe:a4:f5:c0:
         bd:f5:b4:60:53:08:f0:d3:88:44:af:6f:83:aa:bc:84:04:b5:
         49:e0:55:81:95:8a:e3:80:37:7a:60:ac:5d:a5:40:71:c3:eb:
         4d:03:a0:d5:a1:40:75:f4:36:83:d5:70:c5:ea:9e:51:64:df:
         35:7b:59:3c:7a:3a:ec:b7:82:94:38:e7:59:dc:ce:9e:46:9b:
         79:97:70:3a:39:a7:e1:dc:f5:28:c0:01:0c:2b:cf:a3:fb:16:
         9d:a4:0d:5a:05:53:9d:58:46:f7:f2:6a:ee:3e:5b:22:49:d9:
         2d:3d:46:61:ed:07:fa:cb:db:63:db:fb:57:a0:b6:8b:d7:e5:
         7b:97:7e:fc:21:6c:27:07:78:80:12:71:0c:ee:ce:27:df:e3:
         08:5a:9a:2f:00:19:f7:6d:a1:20:dc:e0:9f:62:37:03:00:1b:
         3e:e7:ec:e5:55:17:50:22:12:04:d8:62:50:d6:f5:90:93:b3:
         7a:ab:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org