Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/no7TFBeeLsHfKXj057TndV1ULMc.roa
File:                     no7TFBeeLsHfKXj057TndV1ULMc.roa (raw, json)
Hash identifier:          nOqO+6bCnEYhu+w6hbbKw6KXwqHPSQztUo5w7BvVSA4=
Subject key identifier:   9E:8E:D3:14:17:9E:2E:C1:DF:29:78:F4:E7:B4:E7:75:5D:54:2C:C7
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       095BBBB5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/no7TFBeeLsHfKXj057TndV1ULMc.roa
Signing time:             Tue 04 Jan 2022 20:52:12 +0000
ROA not before:           Tue 04 Jan 2022 20:52:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        92.118.205.0/24 maxlen: 24
                          92.118.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157006773 (0x95bbbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  4 20:52:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9e8ed314179e2ec1df2978f4e7b4e7755d542cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:9b:23:f8:aa:48:a2:8b:0c:f3:e3:0d:fe:
                    af:79:92:cc:ee:d5:81:21:79:7e:1f:f4:c2:23:7f:
                    b5:6c:e3:44:5b:97:90:ec:17:31:32:e3:23:82:b1:
                    4e:73:af:fd:96:d0:6a:a3:80:e1:05:29:58:00:ac:
                    eb:50:23:74:fe:1a:21:b4:41:0a:b9:48:1d:f0:a7:
                    8f:c7:38:91:29:a4:8d:18:57:5c:26:3c:21:24:c9:
                    e1:19:b8:99:bb:aa:44:7c:23:42:3d:47:3a:17:11:
                    75:82:a5:ab:a3:2c:66:fd:21:f5:3e:41:0e:d0:ee:
                    5d:d9:69:85:ad:61:ff:a4:c8:be:f2:3e:2c:5a:a2:
                    c8:47:33:a4:d3:cf:79:09:38:da:0b:1d:11:07:12:
                    3f:51:6b:e5:2f:5e:bc:40:51:f8:b5:8b:d5:15:c0:
                    11:59:fd:87:51:f1:ed:62:5c:d5:48:83:a7:ea:60:
                    a9:e6:da:4f:17:44:72:2c:ce:dc:ab:03:08:e6:6a:
                    d6:08:aa:17:84:6b:af:e6:f8:50:ec:31:4c:c7:77:
                    50:19:ba:b0:64:b9:37:4e:79:7a:b6:fa:a8:a1:b9:
                    38:98:42:43:08:f7:a9:1f:f9:e5:17:79:7a:fc:e8:
                    c0:2b:ae:a5:6b:1d:dc:30:19:4a:ed:5f:15:85:33:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8E:D3:14:17:9E:2E:C1:DF:29:78:F4:E7:B4:E7:75:5D:54:2C:C7
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/no7TFBeeLsHfKXj057TndV1ULMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.205.0-92.118.206.255

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:76:c0:94:3c:7e:7e:16:ba:33:8d:3b:bd:53:02:ca:c8:
         a9:c0:8d:89:de:15:e7:02:f9:3a:3c:79:a1:0c:87:45:ce:3d:
         f6:73:9f:0e:90:ea:25:4c:af:d7:42:6e:8f:a5:a4:55:09:56:
         76:e6:e5:80:07:d3:10:26:db:6f:b1:f5:c7:86:01:bf:ef:d4:
         3b:82:4e:25:59:cb:51:89:4f:d7:46:54:5a:e6:0b:23:5e:25:
         cc:e5:c0:ba:b2:41:48:a9:4d:ea:50:dd:97:ac:8e:b9:bc:03:
         1b:fb:32:60:6b:aa:23:d1:73:35:3b:3f:f4:60:51:d7:e6:90:
         65:1f:db:e5:be:d6:eb:4c:f4:a4:0b:8c:24:f2:f9:33:2e:86:
         ac:52:df:fb:19:92:98:39:4b:a3:25:49:f2:1a:53:f8:49:77:
         aa:c4:dc:65:60:1a:b0:d2:65:69:b6:9c:95:8c:97:44:d5:62:
         8d:be:8d:a1:cd:0b:3f:92:52:ae:52:00:ad:0c:85:c4:7f:f1:
         57:f0:1b:ed:5c:56:93:d1:97:72:21:af:ce:b9:ef:c4:4d:50:
         0e:fb:6c:38:a7:9f:0f:c4:6f:4a:dd:ca:02:99:3f:78:27:30:
         75:62:13:d6:35:ec:3f:c3:50:f5:6a:6a:13:9f:c8:9f:e5:a5:
         36:53:0e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org