Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UHqB74QcrIuTkI9L1fQlwr8Cpbg.roa
File:                     UHqB74QcrIuTkI9L1fQlwr8Cpbg.roa (raw, json)
Hash identifier:          60WvKnw7UpWMFK5podCxNyV8pVej7E9k2zKdotNGdGE=
Subject key identifier:   50:7A:81:EF:84:1C:AC:8B:93:90:8F:4B:D5:F4:25:C2:BF:02:A5:B8
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       031FAD61
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UHqB74QcrIuTkI9L1fQlwr8Cpbg.roa
Signing time:             Fri 07 Jan 2022 12:18:29 +0000
ROA not before:           Fri 07 Jan 2022 12:18:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        83.147.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52407649 (0x31fad61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  7 12:18:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=507a81ef841cac8b93908f4bd5f425c2bf02a5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:ae:48:a2:5c:ac:81:a5:c9:cb:1a:b3:74:
                    bc:15:95:0a:76:66:ac:99:89:44:64:a3:00:41:9e:
                    e8:34:9b:a8:f2:ac:49:9a:fb:9e:61:0d:8f:ae:91:
                    3e:7c:33:44:b0:c7:bf:08:44:83:f2:16:04:0c:e8:
                    76:a2:c5:8c:70:cf:99:d8:f2:ba:2f:64:10:76:9a:
                    cb:14:ee:d7:a4:d7:c7:bb:38:48:3b:36:8b:07:98:
                    20:76:4b:e8:b1:5c:42:70:4d:0e:d9:cb:9f:41:32:
                    5c:6d:6f:65:7f:5d:34:34:5c:c6:b6:05:7b:86:90:
                    40:54:30:3c:3f:6d:3e:8d:eb:e1:03:dc:87:d9:cf:
                    25:4d:43:5e:bc:61:5c:89:13:5c:61:4c:0f:13:ba:
                    89:32:6b:3d:e7:df:9d:23:07:d2:ae:a3:f9:fc:22:
                    9f:05:c0:da:8c:a1:93:8f:1f:2e:a5:a0:ee:a9:3d:
                    5e:bb:6c:43:b6:d4:45:c0:3a:4a:6e:e2:ba:1c:b4:
                    90:a0:2d:92:70:b5:99:f0:0c:bd:27:ef:02:4e:ba:
                    96:fc:6d:87:6c:e8:1d:6f:4c:33:d3:67:ef:60:1c:
                    06:7d:26:75:b0:c6:4c:cd:f6:1b:4b:10:3a:8f:02:
                    ac:47:96:82:fb:f5:2c:47:6e:c3:a3:1a:9a:01:08:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7A:81:EF:84:1C:AC:8B:93:90:8F:4B:D5:F4:25:C2:BF:02:A5:B8
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UHqB74QcrIuTkI9L1fQlwr8Cpbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:7a:81:41:3f:da:d7:e8:0a:12:25:70:9c:c7:8b:b8:6a:b9:
         56:e1:4c:56:94:d0:c6:30:8a:a1:4b:bc:a1:81:bb:f8:a8:95:
         24:64:13:ba:a6:22:02:e9:e1:53:04:c8:b5:2a:a3:79:d2:36:
         4e:c8:52:d2:c9:a3:e1:4a:9b:3a:f4:4b:d9:69:d2:6b:15:70:
         2f:0c:4b:4c:14:61:ff:f7:8d:70:90:51:4b:08:3f:c4:02:3c:
         97:f2:b9:64:b0:aa:50:79:52:41:08:d1:33:08:fe:6b:28:2e:
         07:f1:fd:f8:2f:e2:5e:ec:f8:82:95:77:e4:e0:9b:80:6e:ec:
         b7:e7:26:d9:f7:cb:21:e2:36:8d:1b:15:14:1d:0e:47:8e:67:
         70:75:18:6b:3d:b5:71:88:80:2b:a6:35:e3:2c:d5:a0:cb:d3:
         5b:f3:4d:a0:89:5e:a8:05:d9:76:f0:6a:17:bc:8c:94:00:a0:
         4b:a5:15:f7:bc:68:1e:30:88:11:65:13:5e:34:73:9a:ca:1a:
         8c:3a:06:ca:11:fc:2f:0b:b0:d4:b5:8d:62:8c:43:13:48:d9:
         b0:36:92:74:d4:74:81:91:ec:98:bd:6b:32:d3:e8:47:f5:6c:
         ce:b5:87:6c:9f:af:28:d0:3c:e3:3a:ff:16:f2:65:49:bf:eb:
         90:77:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org