Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Yqnp21QtrKGPkRBCgkpRuszk-iE.roa
File:                     Yqnp21QtrKGPkRBCgkpRuszk-iE.roa (raw, json)
Hash identifier:          7jhJoS4ThX1epF5sscZslgnqSOVkSa+QalreRl8Yr40=
Subject key identifier:   62:A9:E9:DB:54:2D:AC:A1:8F:91:10:42:82:4A:51:BA:CC:E4:FA:21
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       8BEC17
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Yqnp21QtrKGPkRBCgkpRuszk-iE.roa
Signing time:             Fri 08 Apr 2022 09:06:38 +0000
ROA not before:           Fri 08 Apr 2022 09:06:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        193.42.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9169943 (0x8bec17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Apr  8 09:06:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62a9e9db542daca18f911042824a51bacce4fa21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:e6:04:74:6a:41:8d:18:52:62:b2:4b:e0:
                    86:9a:bf:57:c1:d7:67:8b:b2:db:77:5e:27:14:8d:
                    62:1c:89:d5:55:86:40:84:e8:aa:74:0e:9e:b2:03:
                    2d:29:58:1d:90:87:0f:c5:da:42:d0:0a:be:bb:c6:
                    61:44:93:bb:3a:55:4a:21:74:d8:8a:52:fb:1c:15:
                    d1:77:62:b2:6e:ea:d9:cb:1c:52:76:62:d1:a9:b8:
                    71:d5:1c:8d:83:8a:ea:89:72:f1:aa:e7:3b:f2:44:
                    90:1b:c1:ca:30:5c:c9:23:8c:f8:e8:41:6b:c3:82:
                    45:ff:3e:c7:c4:33:2a:f2:b9:19:54:cf:25:09:61:
                    9c:c4:ed:0f:b0:02:46:d0:00:51:17:02:fe:de:17:
                    e4:dc:c8:85:de:45:bd:41:94:cd:17:cd:ae:51:6c:
                    75:71:dc:08:79:d0:18:7a:c2:df:81:ba:8b:97:7b:
                    e9:54:da:ac:9b:d4:35:13:54:13:c3:bd:07:fc:43:
                    53:fb:4d:6f:2c:ac:ba:6d:93:a2:a7:a3:f0:b6:77:
                    e3:f5:99:f0:98:5a:de:7a:75:37:e6:4c:f9:a8:c6:
                    ea:8b:70:02:81:a7:6c:2e:f1:6f:44:db:af:5a:32:
                    a7:32:c9:7b:c5:85:fb:0c:d6:20:18:fd:74:a8:25:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A9:E9:DB:54:2D:AC:A1:8F:91:10:42:82:4A:51:BA:CC:E4:FA:21
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Yqnp21QtrKGPkRBCgkpRuszk-iE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:8b:3b:a9:c0:56:c0:d6:4c:04:dd:34:6a:4e:39:e1:e1:
         d8:29:86:67:a7:59:a8:e5:fd:54:e0:82:b2:05:1c:8b:7e:9a:
         71:d2:26:a6:06:3a:0c:13:6b:e5:b6:a9:25:3b:63:ae:53:98:
         3b:ff:5a:27:90:bf:68:74:fb:3a:46:ef:16:fd:d5:ca:69:e9:
         be:5f:1c:ea:31:80:58:51:13:d2:f9:4c:67:2d:c7:27:e1:b7:
         6a:14:86:dd:c5:96:88:2a:91:4d:13:52:0f:0e:20:5f:26:e1:
         7b:a6:ca:25:88:86:29:16:ef:2d:4d:67:4c:3d:27:ab:ec:2c:
         f5:d7:e3:05:2b:97:0b:82:4f:b3:cc:d6:9b:fd:3e:97:eb:68:
         c4:e4:c8:be:77:09:1a:38:d4:c9:2c:c5:47:48:24:3c:1c:7e:
         28:3b:73:86:19:09:71:15:06:0e:bd:48:e0:0e:14:b1:30:75:
         0e:c5:0e:56:4f:aa:39:41:11:66:3b:5f:03:a2:91:d8:84:67:
         39:ad:9c:bc:f9:4e:1b:48:71:9c:02:c2:c7:63:f7:47:f3:ad:
         d1:6d:39:21:ed:8d:58:0d:ae:a9:ef:11:40:1f:9e:13:04:cf:
         6d:85:5e:f9:7c:1c:0e:80:80:f8:06:12:f2:20:95:a3:05:d2:
         7e:0b:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org