Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/Ji5Ra2IhCnra2ZZ_LZmRUu_5A9I.roa
File:                     Ji5Ra2IhCnra2ZZ_LZmRUu_5A9I.roa (raw, json)
Hash identifier:          4HxOc5wrES/PsY6ILzIwTxOu9P/rICU3OAoYOKQXGU8=
Subject key identifier:   26:2E:51:6B:62:21:0A:7A:DA:D9:96:7F:2D:99:91:52:EF:F9:03:D2
Certificate issuer:       /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial:       0335A227
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/Ji5Ra2IhCnra2ZZ_LZmRUu_5A9I.roa
Signing time:             Sat 01 Jan 2022 07:04:12 +0000
ROA not before:           Sat 01 Jan 2022 07:04:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9121
IP address blocks:        193.186.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53846567 (0x335a227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
        Validity
            Not Before: Jan  1 07:04:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=262e516b62210a7adad9967f2d999152eff903d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:53:d8:eb:b0:16:be:56:c7:03:1b:f3:90:
                    9e:45:16:e4:3f:eb:49:c2:fb:b0:c3:33:39:84:2a:
                    10:5a:61:fa:bc:a5:ef:c6:28:3e:f0:cb:7a:b3:83:
                    42:72:0f:3e:0b:3f:85:e2:28:42:f4:04:d7:23:6a:
                    e8:ed:6c:3b:5f:bd:1a:6a:ee:a5:b6:e4:af:07:2a:
                    1d:f2:ac:cf:d3:1f:62:d8:78:0a:d0:50:71:34:08:
                    bc:f7:4e:52:69:b6:60:45:6c:4f:a9:60:a7:6c:34:
                    27:88:92:42:ca:da:ee:4a:4e:08:d9:68:55:8b:16:
                    f1:0b:8b:3a:78:8f:4c:0b:7a:59:8f:6d:06:f2:ca:
                    cc:b6:40:c8:f1:eb:fe:0c:7a:1b:80:c4:09:53:a4:
                    cf:e2:c3:1a:9c:51:c7:26:3a:4d:df:b8:b8:ff:94:
                    79:b6:37:23:4b:93:1b:e3:a1:c4:62:ec:78:a2:ae:
                    29:43:5a:e9:8d:77:da:1b:4e:db:ad:7b:af:6d:03:
                    c2:43:65:38:95:0d:22:6d:89:3a:87:c7:1d:6f:44:
                    e2:f1:de:2e:ff:05:8e:e5:20:eb:77:73:79:8f:85:
                    6e:0d:e8:1d:10:93:c0:74:ea:78:d5:09:dc:66:56:
                    73:9b:89:5d:af:22:fb:76:f5:0f:66:93:6e:d8:62:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:51:6B:62:21:0A:7A:DA:D9:96:7F:2D:99:91:52:EF:F9:03:D2
            X509v3 Authority Key Identifier:
                keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/Ji5Ra2IhCnra2ZZ_LZmRUu_5A9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:6d:23:1d:e4:9a:0e:d1:16:e8:37:73:e2:bc:c4:8a:64:b5:
         fe:42:69:ec:98:cb:96:8e:71:b4:c6:f5:50:80:aa:92:6b:39:
         fb:e0:a9:48:4e:af:36:bb:38:f7:ac:59:71:b3:6d:67:a8:5f:
         4c:54:16:18:24:8c:e4:16:35:42:79:ab:0f:1c:ab:2f:ab:fb:
         d0:c8:21:d4:ab:61:f8:fb:4d:6a:2e:8e:3e:9e:1e:e7:b2:b2:
         db:05:8e:fe:82:8b:50:7c:e1:32:2a:52:2a:18:6d:8c:36:db:
         f6:da:6f:58:fb:c6:da:9c:f6:f3:1f:ae:65:d5:82:da:4c:b8:
         84:a6:ab:f3:05:08:08:64:70:40:e8:bb:8c:cf:66:3d:29:15:
         b0:ef:69:55:af:2a:cc:6f:24:67:8b:07:59:bd:4d:58:91:a5:
         6c:40:d1:a0:c0:1d:3e:1c:c1:ce:9e:87:42:1f:3c:c3:fb:73:
         99:7b:a9:48:5e:22:f8:89:dc:57:5e:db:5a:e3:97:21:ad:81:
         03:1e:07:40:35:ab:36:3b:a6:17:a9:0e:8b:6c:99:b7:bf:75:
         3b:67:b7:af:97:6a:c1:30:e5:f4:7f:fc:99:e2:56:59:e3:e2:
         fe:0b:f8:bb:7d:12:14:dd:03:a7:78:1f:59:4f:53:76:d7:85:
         cb:1f:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org