Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/s6CVIxGtaPKnzrD-xU0uu2hcIJU.roa
File:                     s6CVIxGtaPKnzrD-xU0uu2hcIJU.roa (raw, json)
Hash identifier:          aM0zOoqzTiJgQlDy7JgGmNLyo3lojD6S66+ba9/3dt4=
Subject key identifier:   B3:A0:95:23:11:AD:68:F2:A7:CE:B0:FE:C5:4D:2E:BB:68:5C:20:95
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       03EB8280
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/s6CVIxGtaPKnzrD-xU0uu2hcIJU.roa
Signing time:             Tue 29 Mar 2022 05:01:21 +0000
ROA not before:           Tue 29 Mar 2022 05:01:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        83.147.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65766016 (0x3eb8280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Mar 29 05:01:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3a0952311ad68f2a7ceb0fec54d2ebb685c2095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:18:b1:fa:ca:82:35:ee:a7:0f:62:62:8c:
                    05:df:b0:cd:05:89:43:ae:97:c3:c8:2f:55:fa:69:
                    f6:e3:90:12:c0:39:91:9e:ba:9c:9e:9c:23:77:94:
                    b3:97:f8:e8:6a:3d:f7:ba:b0:4a:55:a2:4a:0c:1a:
                    90:6a:78:42:50:8c:85:ad:cd:68:47:8d:cd:09:00:
                    2c:e1:96:d9:7a:d0:95:92:52:dd:97:e1:5a:df:87:
                    56:e6:48:a9:87:92:a3:93:41:cc:f1:4a:28:dd:2e:
                    75:c3:cc:1f:37:b0:80:a3:16:01:35:b0:8c:fa:18:
                    e8:61:1d:9e:86:7d:a6:0b:b6:df:da:83:5d:aa:97:
                    4a:86:13:2d:d0:cb:9f:fa:67:70:19:21:a5:22:f5:
                    20:02:6b:2a:46:d4:8b:4a:de:e6:cb:54:d5:6e:6d:
                    39:44:9d:2e:45:12:c9:36:66:2a:ea:3f:4d:ab:15:
                    40:70:75:d2:f6:94:ff:9c:81:13:90:fb:3d:49:5f:
                    9e:4a:b5:f6:8f:de:25:31:2f:37:81:28:c4:b6:42:
                    13:bd:29:05:c0:d5:fe:12:a1:5a:ca:63:de:3a:e0:
                    b8:0c:64:18:b2:33:f2:cc:d2:ce:fd:73:e0:2d:a8:
                    28:98:d8:f1:f8:88:2e:87:c5:e3:11:ff:c2:eb:02:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A0:95:23:11:AD:68:F2:A7:CE:B0:FE:C5:4D:2E:BB:68:5C:20:95
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/s6CVIxGtaPKnzrD-xU0uu2hcIJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:41:d7:5a:7f:2f:5c:8f:46:a7:b0:c0:a4:98:34:61:df:67:
         1a:bf:24:2d:94:88:24:ef:0a:31:f0:5c:17:73:a2:f5:87:7f:
         3e:94:7d:0e:5d:1c:f8:08:b6:9b:8f:07:1e:57:b6:c9:12:f9:
         e4:1c:0e:35:3e:2f:b0:c6:ec:31:66:e7:ba:1b:3e:d9:93:a0:
         fe:f1:82:22:41:89:ef:e3:ab:74:23:c6:3a:8b:81:b8:fc:a5:
         75:8c:9f:e7:29:69:27:43:90:26:1d:48:d1:5f:12:bc:cc:23:
         ba:ff:45:08:6e:ec:6b:72:c2:f5:c4:91:56:a8:c9:61:6a:7a:
         f5:d2:f5:b3:fc:54:1c:d8:ca:c5:b5:06:00:aa:d2:97:33:b3:
         2d:c2:72:ad:91:09:c0:89:e8:aa:49:a4:b3:89:dd:3f:44:04:
         a6:52:da:6f:bc:50:4a:e0:d3:86:3e:ee:bd:b5:a8:de:a9:eb:
         41:5b:42:8b:bc:1e:6e:ec:90:5f:c2:23:f2:57:43:fe:d5:1a:
         b0:17:14:60:a4:af:a2:2c:af:cf:88:27:8c:42:4e:d3:31:5e:
         df:3b:8d:51:e8:9b:72:f3:ed:54:6f:77:1e:7c:5c:37:eb:f8:
         d7:e6:67:27:ae:ed:43:82:68:81:a1:90:4d:2a:f9:ac:7e:4b:
         ce:70:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org