Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WZnrO2CHX_Cg3vA6YlBxxE4EeSU.roa
File:                     WZnrO2CHX_Cg3vA6YlBxxE4EeSU.roa (raw, json)
Hash identifier:          zF6phGyaw2hotFeXMOpkvdCakoyUvmS2h11WHDqLu+w=
Subject key identifier:   59:99:EB:3B:60:87:5F:F0:A0:DE:F0:3A:62:50:71:C4:4E:04:79:25
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0307D431
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WZnrO2CHX_Cg3vA6YlBxxE4EeSU.roa
Signing time:             Sat 01 Jan 2022 13:57:07 +0000
ROA not before:           Sat 01 Jan 2022 13:57:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60602
IP address blocks:        83.147.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50844721 (0x307d431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 13:57:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5999eb3b60875ff0a0def03a625071c44e047925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:a6:9c:c0:a7:5c:36:b4:00:cc:5d:83:30:
                    66:df:02:39:b7:53:85:2c:78:a9:32:81:d0:a2:88:
                    66:ab:80:aa:b9:b6:91:08:de:ce:06:2a:e8:08:00:
                    72:b1:9f:18:dc:7b:db:c6:96:d3:08:25:1e:40:37:
                    97:82:5c:a5:63:44:e4:f0:4e:18:94:b9:1c:cc:7b:
                    74:1a:00:24:34:21:02:06:bf:40:9b:76:cb:8c:6f:
                    ec:ca:c9:9f:5e:eb:92:92:c3:ae:88:ea:f8:0f:9f:
                    db:64:32:cf:c7:3c:90:83:d9:eb:a8:9b:1d:3e:e9:
                    55:20:db:b2:03:a5:df:30:8d:6c:1f:87:ee:22:3a:
                    c0:c8:f7:71:d2:5b:d8:e0:63:52:a7:de:c3:77:2f:
                    80:1d:7d:8d:fb:78:50:86:4a:ec:45:9c:9b:a2:f5:
                    35:1a:0c:0b:e0:83:6c:b6:c5:11:37:06:12:df:df:
                    dd:09:cb:01:e5:ca:b2:8e:58:db:22:3d:8a:82:c0:
                    4d:33:47:53:99:cf:a2:77:e6:d6:6d:c2:67:cf:e6:
                    1f:c3:34:93:4e:a0:ad:e9:bf:4f:f9:27:39:ea:73:
                    cc:59:d0:28:c2:5a:d7:cf:89:ce:32:ff:58:e2:83:
                    20:04:42:46:dd:5d:6b:a2:01:f3:27:65:fb:08:48:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:EB:3B:60:87:5F:F0:A0:DE:F0:3A:62:50:71:C4:4E:04:79:25
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/WZnrO2CHX_Cg3vA6YlBxxE4EeSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:09:f4:0f:4d:ce:de:51:24:05:99:f1:bc:47:28:42:44:
         e9:e1:f4:33:16:e4:69:f6:92:fa:2b:d6:43:ce:cc:43:5c:49:
         31:76:82:b0:a1:c7:3a:53:b7:1e:d4:bf:7f:3b:34:3f:c9:02:
         7e:db:00:0d:00:6a:39:89:af:3d:a8:7c:a5:c7:c0:bc:f4:d7:
         31:0f:2f:dd:a4:f6:c2:80:91:8f:75:ed:16:ea:0c:66:eb:35:
         44:29:fe:dc:f5:bf:46:1a:b7:8e:df:99:72:e1:ed:da:38:b5:
         82:4a:64:90:55:31:5f:51:d3:01:dd:b6:c9:ba:5b:ba:e7:8a:
         fa:1c:da:29:d2:f5:80:44:13:5d:40:e2:3f:29:9f:a8:6c:10:
         1e:b1:e3:c1:4e:4b:98:98:e1:7f:13:86:52:84:8a:7d:6b:59:
         9e:eb:0e:6d:c5:42:4d:5d:6e:fe:3e:51:69:e8:e6:d9:8b:52:
         0f:eb:18:ac:58:37:49:c5:71:24:91:7e:af:1b:81:dc:c3:c7:
         cf:7d:76:37:78:08:84:5e:10:31:c8:bb:8d:29:93:16:9f:d9:
         d7:0d:be:5c:8d:51:53:45:a1:41:fb:7a:ce:8e:f3:e8:42:5b:
         53:cf:89:b0:08:7d:50:9f:11:e2:ee:73:8e:0a:c2:e8:19:44:
         b7:f4:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org