Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/meQmYpdzFF3vqTiH4kW_DQdV9cU.roa
File:                     meQmYpdzFF3vqTiH4kW_DQdV9cU.roa (raw, json)
Hash identifier:          4ajvVh/orS/RCIi+jMIjsfcpXdP0xTFh9y1tPH/fEl4=
Subject key identifier:   99:E4:26:62:97:73:14:5D:EF:A9:38:87:E2:45:BF:0D:07:55:F5:C5
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       032FEAE4
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/meQmYpdzFF3vqTiH4kW_DQdV9cU.roa
Signing time:             Fri 14 Jan 2022 14:55:33 +0000
ROA not before:           Fri 14 Jan 2022 14:55:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54252
IP address blocks:        83.147.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53471972 (0x32feae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan 14 14:55:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=99e426629773145defa93887e245bf0d0755f5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:2e:6a:03:77:26:bf:49:6a:2e:67:4f:8d:
                    61:84:c3:dc:e1:af:4b:df:45:26:5e:ad:c3:0b:db:
                    1c:43:85:a9:3c:b1:94:19:2e:b9:61:f3:81:95:5f:
                    3c:ad:2f:59:08:52:a1:91:c7:28:57:25:a1:c0:2f:
                    d9:0a:ed:83:bb:09:25:c4:0c:3c:e9:a2:fb:cd:e6:
                    15:8a:ad:c8:e8:ef:92:2d:85:16:f5:3e:76:46:b7:
                    74:f7:12:39:dd:b0:b1:4c:d1:1e:83:0d:c3:9a:3e:
                    3f:8b:e0:d4:27:50:97:76:49:3b:c8:67:18:68:7f:
                    c9:ba:f6:f3:13:04:9d:06:77:32:4e:af:43:56:8b:
                    0c:21:01:81:0e:01:99:e7:c0:0b:61:ff:d1:43:23:
                    b7:3a:19:c5:90:c2:e9:79:3f:68:e5:ae:07:87:66:
                    bf:75:b8:54:5a:11:8c:ef:c1:30:6c:7c:50:33:b1:
                    3f:c3:ce:11:17:0d:de:48:0b:01:89:be:fb:b2:10:
                    dd:ea:65:55:af:8f:5b:d9:01:7a:b1:ed:ea:ed:63:
                    e5:b8:32:94:c3:bf:30:fe:ab:f6:ca:9f:22:e6:39:
                    98:21:99:71:f8:88:cf:ba:4b:ed:ee:bf:11:ba:26:
                    71:ce:61:18:4f:22:18:04:d0:a5:86:11:30:30:03:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E4:26:62:97:73:14:5D:EF:A9:38:87:E2:45:BF:0D:07:55:F5:C5
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/meQmYpdzFF3vqTiH4kW_DQdV9cU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:ae:55:17:2b:60:5f:98:f0:3f:e2:06:f8:4f:60:a6:26:01:
         f1:2d:db:f0:ae:18:c3:e8:8c:97:ff:e9:b0:6d:a0:ec:bb:ea:
         c0:83:68:e7:5a:12:07:06:6a:df:1a:37:77:3c:b7:fb:3e:b1:
         34:f2:03:18:1d:73:56:07:35:4f:31:47:50:ed:c3:03:f8:ed:
         86:b1:45:44:e6:cd:bb:cd:5a:00:c6:cf:4e:ec:f6:3c:a5:ac:
         e3:87:1a:02:20:e6:64:1c:1a:44:ce:f4:2c:2d:b3:95:58:fc:
         f6:8c:e2:a0:66:98:6b:aa:5a:4e:32:0b:5e:36:75:d5:b1:48:
         4a:7a:48:3f:4e:1b:06:75:ba:e8:db:7f:f6:a6:1f:53:49:19:
         df:09:41:fb:b9:5b:ac:bf:88:4c:39:5b:53:e3:c7:7e:75:d9:
         b9:76:8b:0d:0e:59:47:30:87:1b:f5:de:a3:6c:9d:80:78:db:
         af:1c:1c:a1:1d:25:b1:19:ee:f9:c7:15:a0:9b:4b:bd:ac:18:
         b0:80:4f:ac:27:f4:df:39:1e:b0:78:14:ec:50:dc:15:1f:78:
         9c:de:28:ee:81:1f:75:0d:99:10:31:bb:07:4c:0c:6b:a6:d0:
         b2:ed:62:9c:04:7b:a1:bb:07:b7:3f:fa:3c:b0:ac:a1:86:22:
         46:6f:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org