Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/7WJAKTpD_wdu_DfEl2uELmI4lpM.roa
File:                     7WJAKTpD_wdu_DfEl2uELmI4lpM.roa (raw, json)
Hash identifier:          nya+7cLLCG47jQaldMYP/g/W71+lTYl3j5JXsHYUOvo=
Subject key identifier:   ED:62:40:29:3A:43:FF:07:6E:FC:37:C4:97:6B:84:2E:62:38:96:93
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       04EA0592
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/7WJAKTpD_wdu_DfEl2uELmI4lpM.roa
Signing time:             Sat 01 Jan 2022 16:11:11 +0000
ROA not before:           Sat 01 Jan 2022 16:11:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198949
IP address blocks:        91.216.108.0/24 maxlen: 24
                          195.66.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82445714 (0x4ea0592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Jan  1 16:11:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed6240293a43ff076efc37c4976b842e62389693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:fe:f5:6d:fc:de:5a:c0:ba:2a:4e:90:26:
                    80:97:c3:85:35:6f:df:02:65:e2:ae:35:17:b6:53:
                    b5:69:af:2f:1f:8a:6c:37:39:20:60:02:1b:e6:88:
                    92:08:be:63:9e:73:09:3a:63:52:9b:99:e9:f2:71:
                    c6:71:f2:3d:ed:21:8e:f9:59:5e:62:76:2a:97:e4:
                    5b:3d:40:39:ce:d1:83:a6:34:6b:ea:1d:ef:5d:24:
                    61:fd:f7:17:34:3c:3f:f9:ca:92:11:15:d8:7a:a8:
                    9a:bb:5c:8d:a4:83:19:fb:47:4c:35:ec:e5:f5:92:
                    55:04:88:8c:71:ec:82:54:89:2b:17:73:8b:c3:4d:
                    29:51:4e:5b:1d:4b:0d:03:38:5f:8e:48:d9:22:28:
                    19:f3:a8:f6:c9:fb:8f:38:72:e2:0f:b9:f4:8b:6f:
                    1b:b3:b8:4c:09:3d:92:da:6d:35:d3:0f:6e:70:34:
                    07:7f:f6:7e:54:e2:d6:05:91:74:be:ac:f7:51:dd:
                    cf:66:25:c1:c7:81:05:08:85:4f:d6:2b:ed:e7:cc:
                    38:58:02:56:b4:97:99:0d:21:a7:b5:a4:05:f2:28:
                    b8:88:8e:7e:c5:ed:65:3c:6c:f6:fe:d7:87:b3:18:
                    3e:79:2d:87:d9:a8:6b:2e:5a:66:af:43:b7:9d:d9:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:62:40:29:3A:43:FF:07:6E:FC:37:C4:97:6B:84:2E:62:38:96:93
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/7WJAKTpD_wdu_DfEl2uELmI4lpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.108.0/24
                  195.66.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:66:66:ab:39:89:cc:77:b5:97:7c:00:cb:e4:f9:19:50:
         bf:72:c3:92:a3:8f:68:ce:17:8e:3b:63:f2:f3:8b:7b:4c:85:
         5c:db:d9:4b:47:6f:b7:37:ef:3a:53:bf:78:d5:f0:06:16:cd:
         8d:d3:40:17:dc:7e:aa:06:ff:83:66:69:36:8d:ce:71:76:51:
         72:b1:f3:06:bb:f6:20:de:c0:60:29:b8:7c:3e:d1:77:27:9b:
         b7:68:20:2c:4a:81:e4:a0:9b:03:67:fa:4e:7c:81:44:66:e7:
         1d:33:e3:c1:fa:c9:19:08:c8:a1:c1:82:63:1b:b4:ce:d9:1d:
         ea:ce:68:4c:e3:32:51:55:d4:0e:5a:7a:e8:63:f5:d1:86:5d:
         d9:1d:13:ed:c6:93:34:56:93:d7:c1:a5:95:77:09:b6:a7:04:
         ee:b2:57:82:3e:ef:d2:e6:8a:81:e6:92:7a:60:9b:ae:c1:12:
         ca:8b:93:f0:60:bd:e5:89:40:e5:d9:9e:5a:dd:c7:c2:0d:89:
         58:be:3c:60:ab:24:a5:ba:7e:7b:e2:14:75:f4:24:4d:15:38:
         51:aa:b4:ed:fc:54:89:52:8d:d8:3b:73:1b:87:8a:c5:48:1b:
         53:74:5c:be:bf:6b:c8:64:37:0a:5f:19:70:70:37:8c:92:1d:
         23:4c:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:47 2023 by rpki-client on console-ams.rpki-client.org