Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/Yhc0IXhY8ECJ8l1WpHAaH3_CsKQ.roa
File:                     Yhc0IXhY8ECJ8l1WpHAaH3_CsKQ.roa (raw, json)
Hash identifier:          5puLbcXTpstAZksRQoBb5+uAUbygaGU7nd0GHtO06II=
Subject key identifier:   62:17:34:21:78:58:F0:40:89:F2:5D:56:A4:70:1A:1F:7F:C2:B0:A4
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       03BB46BC
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/Yhc0IXhY8ECJ8l1WpHAaH3_CsKQ.roa
Signing time:             Wed 08 Jun 2022 11:27:02 +0000
ROA not before:           Wed 08 Jun 2022 11:27:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44410
IP address blocks:        193.3.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62604988 (0x3bb46bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Jun  8 11:27:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=621734217858f04089f25d56a4701a1f7fc2b0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:74:10:c3:2c:e3:02:e7:7f:27:65:af:16:
                    37:e8:84:0b:c0:16:61:5a:fe:35:86:4f:d4:7d:00:
                    fd:c5:7e:d1:78:41:8f:9e:6a:9b:6f:90:37:33:b8:
                    1c:34:96:31:c4:bc:5f:e7:0c:d0:66:72:f2:41:9b:
                    20:54:fe:4a:bc:ba:2c:48:54:da:7f:9c:3d:79:38:
                    63:18:22:c2:23:44:89:38:8b:1d:a5:53:b5:c2:e9:
                    30:19:08:9f:26:b5:95:60:1a:3a:fd:58:3e:64:b6:
                    f2:47:49:e6:e4:46:49:98:bd:3c:2d:dc:83:9f:1a:
                    14:b8:d1:84:a9:49:f8:63:c0:be:3c:15:6a:12:87:
                    99:20:d6:27:dd:9c:c7:41:ae:ed:38:6e:ae:57:11:
                    96:bb:43:db:5c:8f:7b:d3:a3:a4:53:bf:46:1d:9a:
                    1d:07:5f:d1:e5:a2:4d:92:17:67:6f:26:1c:f9:b3:
                    80:77:5f:51:1c:c7:36:4d:f7:16:3b:82:83:b7:27:
                    2a:ac:22:22:a6:39:bf:ee:45:45:00:fe:e6:f2:24:
                    7a:c3:2e:06:ad:8f:40:d5:f0:63:10:a7:9c:49:9c:
                    1d:12:71:91:2d:a3:d7:ed:0d:24:19:85:bd:76:51:
                    70:29:b0:e7:8b:90:3c:a8:0b:6c:a4:62:d9:8e:ce:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:34:21:78:58:F0:40:89:F2:5D:56:A4:70:1A:1F:7F:C2:B0:A4
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/Yhc0IXhY8ECJ8l1WpHAaH3_CsKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:14:0d:1f:5d:81:7a:1e:e2:ac:e6:f6:ee:65:c6:66:23:
         15:7b:b4:f8:df:8b:68:47:1a:a9:a7:0a:b7:f9:84:ba:fc:a9:
         13:7f:ac:c0:9a:40:84:9b:a4:52:f1:f6:b1:09:d4:fb:8b:c6:
         98:1e:79:a2:2b:30:c9:8f:f5:23:51:c5:29:a0:9e:b6:f5:37:
         3e:c7:e3:2c:13:f2:9f:bb:26:32:9c:f4:2a:8e:f0:e6:66:0d:
         ac:aa:0d:4e:a8:23:3e:99:b2:55:ca:16:2b:6b:b8:6a:06:81:
         9e:b0:b6:0e:38:f9:17:0e:d6:bb:c7:e9:33:ab:2b:40:76:c0:
         51:5f:73:76:97:2f:2e:d9:99:7e:25:98:0b:84:9c:ab:fd:b5:
         c1:64:66:fa:1b:ef:58:0c:b2:48:95:b0:5e:c0:76:7d:a2:aa:
         74:31:b1:fa:7d:92:fa:8e:50:92:bc:73:8d:c7:1c:5b:02:0d:
         76:ed:41:c9:72:ce:ea:14:33:ae:85:89:ce:12:87:a7:e3:a6:
         90:70:31:40:4a:95:99:23:48:b5:73:aa:52:29:3e:6d:6f:4d:
         a7:b8:86:9f:de:2e:46:4f:6c:0c:86:8d:f5:f4:a4:90:70:3c:
         54:1c:7a:81:a7:59:8b:34:73:bc:97:73:6a:0d:98:8e:be:e4:
         4d:b4:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:01 2023 by rpki-client on console.sobornost.net