Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/7HIcgUdtC3k6iyvci7BOpQhWKhU.roa
File:                     7HIcgUdtC3k6iyvci7BOpQhWKhU.roa (raw, json)
Hash identifier:          aWYbjkf3u5BPQ72MxANlAXnUHMDyxPOhi6BGZ3PIsok=
Subject key identifier:   EC:72:1C:81:47:6D:0B:79:3A:8B:2B:DC:8B:B0:4E:A5:08:56:2A:15
Certificate issuer:       /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial:       6062
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/7HIcgUdtC3k6iyvci7BOpQhWKhU.roa
Signing time:             Thu 28 Apr 2022 12:23:32 +0000
ROA not before:           Thu 28 Apr 2022 12:23:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6730
IP address blocks:        193.222.106.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24674 (0x6062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
        Validity
            Not Before: Apr 28 12:23:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec721c81476d0b793a8b2bdc8bb04ea508562a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:10:b5:96:a3:c6:6b:34:c3:25:00:70:73:
                    2b:03:fb:dd:92:31:15:88:45:8b:81:3e:c6:e4:01:
                    f3:85:42:ad:c4:2a:9f:a0:93:88:5d:53:81:2d:af:
                    80:66:54:a9:72:f1:e0:39:77:0d:91:17:78:a4:6d:
                    17:f6:ba:fb:da:50:c4:74:c0:1c:08:18:7f:b3:8c:
                    33:5b:78:34:a3:60:28:2f:af:15:7f:75:7d:f7:09:
                    7d:8f:6d:03:cb:b4:70:1c:eb:29:bd:34:d8:d7:14:
                    fd:80:c2:67:74:b0:78:d8:8b:00:b3:cc:35:f8:38:
                    c2:63:94:a2:ad:f7:9f:e1:a4:36:e9:c0:f5:a6:9d:
                    0d:91:54:81:6e:5f:23:30:10:b8:e9:8d:1e:4f:17:
                    94:35:10:05:29:68:e5:0b:33:ee:0a:e9:b9:70:be:
                    bc:64:c4:18:45:27:82:19:18:19:f8:ae:45:c5:4b:
                    73:62:62:8e:cf:f3:d2:43:92:30:b0:c2:c2:46:17:
                    5a:3f:c2:45:66:76:c0:3c:f7:27:c5:9a:19:57:68:
                    ff:d4:e5:46:b5:df:d2:c5:56:01:bd:81:4a:5a:ac:
                    44:ab:6b:ac:06:2d:ba:d8:d8:d0:ed:38:8c:12:f3:
                    aa:70:aa:8b:de:7c:27:0a:d4:d5:3e:bc:5e:6d:54:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:1C:81:47:6D:0B:79:3A:8B:2B:DC:8B:B0:4E:A5:08:56:2A:15
            X509v3 Authority Key Identifier:
                keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/7HIcgUdtC3k6iyvci7BOpQhWKhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:83:71:a8:fd:d9:74:07:8f:d9:2a:9c:91:41:b2:6b:fe:07:
         40:8c:b0:a3:b8:6b:c8:c7:96:63:e7:1f:af:2c:e2:4e:26:f9:
         a9:ba:09:b0:b2:81:70:43:83:bc:90:ad:20:a3:b9:ac:ed:f8:
         e7:f4:5b:70:dd:36:b2:7f:9a:f4:4c:35:d8:91:69:c8:13:b0:
         9e:1b:16:ba:21:b8:ab:9e:a9:72:5a:74:f5:66:d3:a6:93:c5:
         97:16:24:69:e2:90:27:c8:83:55:1f:87:c5:7b:b9:4f:79:60:
         c1:28:d4:48:dd:88:f4:76:55:a1:dc:74:ec:0d:89:26:23:74:
         5b:b7:41:21:65:3d:28:bc:0a:ec:55:fb:50:b7:2c:64:65:a3:
         03:df:d0:82:f2:f4:f5:05:4e:98:7d:ea:59:0d:e1:a3:1e:0d:
         cd:5d:8f:e2:44:2e:63:9b:1e:cd:b7:59:b5:31:b6:22:57:bf:
         db:36:d8:94:55:0e:33:e6:68:22:db:46:72:82:35:5a:de:4b:
         c9:fd:70:33:f4:b9:51:c8:ef:ec:13:68:82:22:4d:61:6b:8f:
         c6:01:87:84:cc:e9:e1:67:ae:c5:2a:b1:28:b2:69:d9:a8:dc:
         8b:30:39:ea:99:60:6b:90:d5:b4:12:05:b1:d2:88:8a:2d:1b:
         78:6e:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:13 2024 by rpki-client on console-fra.rpki-client.org