Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/hiLQA0mZfq15re6MuhIFUeu_Cu4.roa
File:                     hiLQA0mZfq15re6MuhIFUeu_Cu4.roa (raw, json)
Hash identifier:          fvbuA5f2NrZJJ20ZJ9PY0cLQ9auJRPP2uZmrlUfvQDY=
Subject key identifier:   86:22:D0:03:49:99:7E:AD:79:AD:EE:8C:BA:12:05:51:EB:BF:0A:EE
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       030D5598
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/hiLQA0mZfq15re6MuhIFUeu_Cu4.roa
Signing time:             Sat 01 Jan 2022 13:57:10 +0000
ROA not before:           Sat 01 Jan 2022 13:57:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399746
IP address blocks:        83.147.36.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51205528 (0x30d5598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 13:57:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8622d00349997ead79adee8cba120551ebbf0aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:56:98:d4:ed:07:4a:0d:98:4b:e1:b1:20:
                    ab:26:04:a2:78:77:3a:83:19:ba:c3:db:77:e2:29:
                    1d:51:6e:d5:63:83:28:0a:6f:d7:2d:65:84:0b:79:
                    84:f0:98:b3:57:8b:82:3a:77:9a:b6:df:5c:82:f0:
                    f4:6e:5a:7c:21:08:38:09:cb:ba:f5:22:94:ae:0b:
                    a1:0a:3f:3c:cf:87:88:fd:7e:c6:45:ca:6c:de:b5:
                    d4:76:20:25:62:07:da:50:e0:5b:dd:5a:ea:6a:f0:
                    24:38:95:d5:23:d6:d8:f6:66:b1:03:bd:93:cd:b2:
                    e7:67:ae:67:f3:8a:f5:ae:ae:50:18:27:82:71:30:
                    40:64:80:4e:eb:83:01:cb:18:ad:29:50:43:7b:87:
                    fc:34:64:6c:bd:c2:16:f5:54:ce:e5:5c:55:2f:68:
                    92:77:45:9b:95:e0:f6:c0:e8:9a:90:6b:1b:35:05:
                    a6:77:f5:35:8a:a1:ad:6c:f0:96:73:bf:e4:38:f4:
                    f4:6e:46:71:11:4b:ce:3d:32:b0:d6:e3:c4:9e:8b:
                    6a:2d:42:89:8d:ff:c7:ed:0f:dc:68:06:c0:6c:59:
                    95:b8:c3:4f:76:9f:69:ea:4e:56:10:93:89:12:65:
                    3b:a4:ac:30:d7:d7:57:8a:73:f3:7c:e4:09:fe:2c:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:22:D0:03:49:99:7E:AD:79:AD:EE:8C:BA:12:05:51:EB:BF:0A:EE
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/hiLQA0mZfq15re6MuhIFUeu_Cu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:19:07:f9:41:c6:ed:25:b7:bf:ab:3a:ea:f1:5b:23:0f:ac:
         40:69:b0:e1:36:d9:c2:b7:cb:25:a3:81:c2:18:db:c4:35:73:
         ef:82:d7:3c:bc:27:b2:af:d2:4a:a3:f7:a3:25:89:3d:b2:4f:
         aa:fe:c2:0f:fa:e0:6f:25:20:91:71:6b:2c:1f:54:8b:9e:86:
         33:6b:2e:a5:a9:10:e7:19:bf:69:0e:72:ea:1c:f4:9b:ce:8b:
         fb:e9:cd:3d:8d:bf:fd:18:4b:9f:8b:60:80:4b:9a:62:72:85:
         ca:8b:ed:2f:fc:0c:f5:78:50:10:c5:f0:c7:fb:c8:61:23:b2:
         e6:b1:21:ef:95:4a:aa:b0:d7:c2:9e:f0:64:b6:1c:4d:c3:e8:
         c0:41:6a:58:61:04:a2:86:8d:dd:53:63:4f:f7:24:46:41:a8:
         69:78:40:1e:81:a8:95:d7:97:88:43:02:ce:89:9b:84:d2:b6:
         33:53:d0:9d:fa:80:b5:fe:8e:cd:b9:be:d6:ab:8f:51:48:ff:
         3c:33:a0:ed:bd:05:8e:b6:d1:ea:62:69:26:3f:39:29:dc:af:
         92:c8:74:02:5f:1c:9c:f7:06:de:14:2c:76:62:47:0d:2c:d3:
         d1:2b:de:cf:12:87:13:2c:c9:51:79:d9:83:4f:1d:d0:eb:31:
         31:fa:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org