Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/1-MvANb7qIwi9J5kP_txqagMSfDU.roa
File:                     1-MvANb7qIwi9J5kP_txqagMSfDU.roa (raw, json)
Hash identifier:          DCDmzynwIjXb6wYkqDtGIIDC2ZEB06/+1tHdSx5u8Bk=
Subject key identifier:   F8:CB:C0:35:BE:EA:23:08:BD:27:99:0F:FE:DC:6A:6A:03:12:7C:35
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       385D0F6C
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/1-MvANb7qIwi9J5kP_txqagMSfDU.roa
Signing time:             Sat 01 Jan 2022 02:02:02 +0000
ROA not before:           Sat 01 Jan 2022 02:02:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        93.191.217.0/24 maxlen: 24
                          93.191.219.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945622892 (0x385d0f6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Jan  1 02:02:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8cbc035beea2308bd27990ffedc6a6a03127c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:d0:7a:3e:48:89:db:c8:da:31:51:98:9f:
                    11:a9:06:d5:d6:0e:6d:33:bb:0a:6e:71:02:38:3c:
                    23:eb:bf:09:f9:fa:92:b9:5a:40:3f:86:fb:44:73:
                    95:40:6a:b0:8c:fb:6d:3d:38:8c:63:cd:cf:ad:53:
                    9c:f5:bf:53:6f:3e:66:28:21:cd:26:cf:98:1d:60:
                    34:04:75:a6:4c:4d:c2:7a:94:28:aa:af:33:49:d5:
                    64:f1:14:4d:fc:f0:e4:a4:30:60:9b:41:7a:5f:c3:
                    d6:24:a1:ef:f6:46:0b:97:82:eb:22:b8:bf:a8:2b:
                    70:3c:7c:2f:7d:78:eb:9f:16:02:44:e2:8c:ec:14:
                    70:6c:ec:9d:9b:f6:2f:1d:0f:30:d1:d7:3f:3e:14:
                    5f:48:e7:a4:db:fd:a1:0e:36:ac:0c:74:de:7d:0d:
                    89:e6:c2:7a:17:67:a2:4a:b5:c4:21:da:e9:de:46:
                    16:83:72:ff:08:60:62:2e:7b:3a:3c:9a:7d:58:48:
                    ea:78:ce:a0:9f:74:79:6e:23:a9:ee:2b:9d:46:70:
                    09:4d:0a:89:a0:2d:0a:20:04:d0:c5:08:dd:7d:af:
                    8d:5c:f9:1a:27:32:81:78:d0:38:b6:4e:1a:e0:8d:
                    dd:da:6c:f5:09:0e:6e:cb:33:77:2e:26:0e:20:76:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CB:C0:35:BE:EA:23:08:BD:27:99:0F:FE:DC:6A:6A:03:12:7C:35
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/1-MvANb7qIwi9J5kP_txqagMSfDU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.217.0/24
                  93.191.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:37:f7:7d:24:a6:20:81:8c:e5:e1:d2:80:ce:0c:2a:8a:ae:
         3d:a5:67:60:e7:59:7f:ba:50:7e:87:4e:b2:66:c3:63:66:aa:
         48:13:cf:07:1b:f4:99:5e:64:4e:41:68:12:68:46:ab:f9:64:
         2e:4f:54:40:f8:c1:ff:2f:9d:d3:0f:a8:15:8c:27:65:c1:d1:
         45:ef:3a:de:42:90:b0:22:3f:bc:4e:42:80:2f:be:fe:6d:61:
         2a:59:8b:56:e0:e4:96:20:7b:02:da:da:8f:c2:6e:5e:07:4f:
         6a:35:8a:b9:c2:20:46:d7:d6:50:3d:27:ee:9a:bd:61:16:77:
         72:26:05:df:1c:46:97:3b:f8:53:09:e5:ae:c2:3d:88:15:36:
         85:89:8b:92:66:a4:2c:c1:fd:e6:9d:07:64:b7:b1:39:58:21:
         90:0b:b3:e4:52:af:28:b6:b2:59:49:48:72:0f:c7:1a:d5:91:
         e9:b3:b7:9a:ff:08:03:a5:77:16:68:f3:89:f8:8e:f7:38:0e:
         b7:96:bc:9c:ed:eb:bb:d9:fd:35:b9:47:65:cf:f5:ab:2c:00:
         47:cd:9a:60:64:e8:f0:ff:5a:c5:b3:f3:41:79:42:fd:fe:a5:
         83:8c:5c:9c:08:f3:12:66:db:11:e6:84:f8:ad:7f:ae:29:34:
         b4:07:a0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org