Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/kVnJdGHVcQwGh1m7Uj4aUBdawzI.roa
File:                     kVnJdGHVcQwGh1m7Uj4aUBdawzI.roa (raw, json)
Hash identifier:          Uvx19q/RJr5nVIdPatU1L3KKhvFVMPqUslRlJpmtams=
Subject key identifier:   91:59:C9:74:61:D5:71:0C:06:87:59:BB:52:3E:1A:50:17:5A:C3:32
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       335D2797
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/kVnJdGHVcQwGh1m7Uj4aUBdawzI.roa
Signing time:             Sat 01 Jan 2022 12:58:06 +0000
ROA not before:           Sat 01 Jan 2022 12:58:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209737
IP address blocks:        93.190.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861742999 (0x335d2797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Jan  1 12:58:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9159c97461d5710c068759bb523e1a50175ac332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:10:e6:c5:91:59:0c:2a:30:54:ff:06:29:
                    9d:10:a0:02:a6:c0:1a:3e:3b:17:d1:2b:e4:84:b9:
                    0d:18:45:5b:48:f0:55:70:2a:dd:2d:12:5d:33:2f:
                    50:79:b5:5c:31:3e:d8:7e:8d:86:03:12:ed:f7:55:
                    11:36:67:27:f6:c7:eb:f2:e8:dc:e5:e5:0e:ce:f3:
                    96:a9:0d:96:55:29:0f:70:21:71:20:91:83:f6:63:
                    74:6d:3f:d4:17:18:5c:c0:30:2f:40:71:ab:1a:f9:
                    21:ef:62:92:42:3c:11:e6:b5:7b:bc:a0:99:da:de:
                    8e:5f:7c:97:da:2a:83:28:91:5e:eb:44:2f:cc:42:
                    5b:94:27:73:6b:59:b2:16:57:74:db:98:af:fc:f1:
                    b2:ce:17:76:0b:5b:be:4e:64:fe:c8:79:13:08:1b:
                    24:45:4a:90:72:54:b1:02:d8:ae:92:73:b8:bb:42:
                    39:7e:4b:bc:f8:a9:b7:98:0a:a7:b9:09:f0:8d:dd:
                    79:e3:a5:fb:11:ff:df:42:42:b1:09:21:7e:25:01:
                    13:a9:0c:10:fe:ea:b3:d3:c8:04:6c:3e:9c:1d:9c:
                    a5:dc:70:b4:5f:68:c7:cc:06:09:54:81:d5:6e:87:
                    3a:3d:35:41:04:ed:8e:80:f4:b9:0d:47:86:26:d7:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:59:C9:74:61:D5:71:0C:06:87:59:BB:52:3E:1A:50:17:5A:C3:32
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/kVnJdGHVcQwGh1m7Uj4aUBdawzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:89:4f:3d:09:60:2d:e6:e1:bb:30:16:7a:92:a6:6c:86:
         f3:59:ca:56:36:90:d1:5b:80:ac:b7:f5:dc:e7:9c:60:d1:6f:
         48:f2:a1:eb:cd:a5:c2:36:86:09:df:1c:fd:f8:4b:e4:66:e3:
         53:93:05:db:40:8d:2f:2a:21:3c:3e:12:7d:30:f7:41:e8:5b:
         76:94:f9:b7:5c:16:92:a6:bc:2e:8d:c2:e9:a2:5d:0f:58:a5:
         c2:71:22:ad:ac:4c:f3:64:9a:ae:c8:d4:6e:05:fb:f6:dd:9e:
         f5:b2:16:05:b7:e4:e4:e1:f4:11:6f:f9:cc:76:1d:df:03:78:
         7c:29:12:75:66:30:20:da:95:58:e4:f8:bb:38:6d:35:53:81:
         6c:c2:ca:3f:bf:a6:59:a2:d3:22:58:40:a2:c1:e2:33:47:54:
         e9:60:df:50:b3:eb:85:f5:6b:8d:31:ed:5b:5a:d5:7f:f9:c9:
         96:c8:38:ee:87:3d:27:92:01:86:93:78:6d:ec:50:e7:15:2c:
         f0:98:e7:6f:83:35:43:4a:63:07:74:ba:97:c4:c4:ab:82:b4:
         78:87:1f:98:ad:5e:f9:95:c7:dc:3d:4e:41:8b:a8:e8:bf:38:
         08:b1:4c:11:e6:cf:5e:e5:da:b4:22:3c:d8:cc:2f:a9:d0:dc:
         d1:09:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:15 2023 by rpki-client on console-fra.rpki-client.org