Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/qALIByrF8GKtQh4AniE6DY9_uhU.roa
File:                     qALIByrF8GKtQh4AniE6DY9_uhU.roa (raw, json)
Hash identifier:          EDLGL2JAwpgtpmruYY3/agUsNV1RkpYNs5CwyIUSBM8=
Subject key identifier:   A8:02:C8:07:2A:C5:F0:62:AD:42:1E:00:9E:21:3A:0D:8F:7F:BA:15
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0307B81D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/qALIByrF8GKtQh4AniE6DY9_uhU.roa
Signing time:             Sat 01 Jan 2022 13:57:07 +0000
ROA not before:           Sat 01 Jan 2022 13:57:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57844
IP address blocks:        83.147.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50837533 (0x307b81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 13:57:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a802c8072ac5f062ad421e009e213a0d8f7fba15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:e9:34:6e:14:94:c5:9d:40:72:44:c8:12:
                    57:dd:68:cf:64:cb:84:b8:06:75:83:c7:7f:12:62:
                    bb:5f:43:18:4a:0a:3f:7f:d3:50:b2:8c:09:d1:29:
                    a6:2e:0f:17:9a:5f:8f:d3:9a:f3:27:e1:a0:a7:87:
                    d8:68:a0:d8:01:f4:84:7d:c5:bf:65:73:ac:5f:ed:
                    61:8c:e2:1a:e8:f2:9b:31:78:45:20:38:3e:78:07:
                    da:c8:5e:de:2f:72:2a:5b:86:a9:e1:0e:a1:27:e1:
                    a0:f1:b4:c7:dd:09:53:cb:2b:8b:6e:69:3b:db:6c:
                    92:74:9f:14:06:35:e2:2f:05:fd:58:4e:7c:2b:de:
                    e6:2e:bf:af:43:e0:4e:84:af:c7:c6:3d:3f:a5:8d:
                    7b:49:52:8b:94:56:14:87:19:8e:c3:eb:38:5d:e5:
                    49:33:31:37:5d:b2:25:85:71:18:bc:3d:4a:1e:97:
                    07:42:86:42:40:04:12:bb:ba:1f:4c:85:e6:3e:f5:
                    19:15:60:d9:d1:62:a3:41:35:c7:b2:17:d9:de:11:
                    37:6b:72:11:6c:1b:e9:d6:0c:f6:f0:bc:3b:e0:37:
                    91:b9:0c:0d:21:d5:52:2e:73:d9:fc:c5:31:99:d5:
                    67:69:f1:ea:51:28:7a:76:da:fa:7e:63:b4:77:28:
                    df:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:02:C8:07:2A:C5:F0:62:AD:42:1E:00:9E:21:3A:0D:8F:7F:BA:15
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/qALIByrF8GKtQh4AniE6DY9_uhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6f:6f:76:ac:d9:1b:9f:2f:41:ee:45:9e:ca:73:03:41:34:
         16:79:e0:08:12:50:7e:16:cf:e7:da:ff:a3:6a:d7:84:ea:31:
         c1:64:d7:0a:85:a3:6d:32:80:c2:a1:41:3b:00:6a:88:44:75:
         6e:58:b6:4e:04:ca:fd:fc:b0:0a:02:af:e4:5f:4f:4c:01:bf:
         1a:6f:08:cf:51:73:fa:4d:ad:9e:eb:d9:9e:df:a1:36:f8:70:
         fe:c4:d9:e8:22:a9:54:4f:71:99:c8:7c:08:33:ae:0f:6f:9d:
         38:06:19:eb:15:37:e9:7b:94:cd:01:61:e6:be:8a:45:ba:4b:
         20:ea:45:1f:33:7c:ad:c4:c1:44:df:be:0a:d7:bf:a2:1a:a7:
         38:13:b8:bc:b2:1b:4b:1d:45:5c:2f:45:1e:8b:c9:53:1f:26:
         0d:bf:62:24:b7:66:5e:4b:4f:ec:1f:44:52:60:9a:fa:61:ed:
         21:60:97:17:aa:cb:fc:b3:4b:3c:4e:6b:3d:d1:e5:0a:ee:7d:
         6c:9f:eb:34:c5:b0:0f:c1:d4:f8:fd:e6:9c:63:8b:76:3a:a8:
         fe:e5:47:ad:a6:56:c2:bf:31:84:c3:ba:6c:d4:16:4c:2c:9c:
         3a:a8:88:fb:f2:b0:4e:5e:03:30:a8:34:5a:9d:b1:5a:d6:af:
         da:84:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org