Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/bGGC1QwGc8fSADxDbr-eBGEepI4.roa
File:                     bGGC1QwGc8fSADxDbr-eBGEepI4.roa (raw, json)
Hash identifier:          y7agtSA4sLbjHkxsZnvvWFw/DcFKY0MNuH5407kUBNE=
Subject key identifier:   6C:61:82:D5:0C:06:73:C7:D2:00:3C:43:6E:BF:9E:04:61:1E:A4:8E
Certificate issuer:       /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial:       AC0E
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/bGGC1QwGc8fSADxDbr-eBGEepI4.roa
Signing time:             Mon 25 Apr 2022 14:49:39 +0000
ROA not before:           Mon 25 Apr 2022 14:49:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        193.32.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44046 (0xac0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
        Validity
            Not Before: Apr 25 14:49:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c6182d50c0673c7d2003c436ebf9e04611ea48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:d5:a2:c3:cb:6d:62:4a:95:a9:f8:90:49:
                    b9:8a:0b:6b:8c:d4:ea:e2:81:4b:1c:6d:cf:f3:9c:
                    50:f2:b3:8c:86:d5:ce:8b:cf:1c:9a:d3:64:b2:8d:
                    ae:71:7b:33:d1:4b:87:4f:ca:36:c2:44:a0:01:25:
                    0f:b1:a4:eb:32:e3:1e:6b:c8:fa:18:00:eb:e3:5e:
                    e2:37:eb:87:9f:52:73:9a:98:12:2e:db:3d:7c:97:
                    35:92:9b:10:aa:30:f9:51:95:4b:85:f0:fd:29:2e:
                    fc:fc:8d:60:69:1c:49:bd:ac:82:9a:a0:45:e2:7b:
                    d0:f0:e5:ee:2a:8f:00:08:13:76:87:f4:bf:9a:ca:
                    10:bc:2b:2c:6b:f3:67:e1:a1:ee:bf:6d:c9:9c:5a:
                    03:7e:d1:d9:ab:ad:8e:60:38:8f:5c:13:c3:aa:e7:
                    cf:f7:64:47:2f:0d:a1:cd:6a:ef:cd:12:8c:fc:88:
                    8d:cb:ef:4a:20:5c:66:80:2c:dc:38:76:9d:66:f2:
                    a7:ef:39:a2:79:bb:3f:74:3d:6b:c8:3a:96:65:14:
                    d2:2a:86:f1:d7:3c:63:d5:7f:43:74:b5:43:36:6d:
                    22:87:6a:e3:8c:d0:7d:b6:a7:88:f4:a9:0c:4d:b6:
                    ee:df:68:40:fc:2b:ee:2a:4b:85:40:10:a5:6a:19:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:61:82:D5:0C:06:73:C7:D2:00:3C:43:6E:BF:9E:04:61:1E:A4:8E
            X509v3 Authority Key Identifier:
                keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/bGGC1QwGc8fSADxDbr-eBGEepI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:de:64:fd:78:be:28:54:56:02:7c:ba:c8:09:f8:19:ef:cb:
         d0:ab:9f:bd:f3:f5:68:f3:db:7f:91:21:68:3e:b8:55:75:8e:
         de:b4:60:92:88:b6:94:16:cc:d9:f3:74:61:18:fa:24:9a:41:
         4d:02:56:5c:f0:47:31:81:de:42:b5:70:8a:8f:3e:94:9b:1a:
         4b:85:61:b4:13:4e:ce:68:f8:40:0b:5b:7c:91:cd:86:d5:47:
         04:35:be:a7:50:0b:4e:da:32:23:bf:c9:cb:9f:c8:e2:e0:48:
         7b:52:a1:d4:c3:27:03:35:a5:92:3e:b7:d3:c6:8f:b7:65:45:
         16:c1:a2:22:ac:95:42:bc:3c:02:39:c0:12:5a:e3:73:93:66:
         84:81:94:d7:83:8b:7b:f8:e7:63:ae:52:af:70:4d:6e:79:89:
         31:d4:ef:15:3b:e8:02:fb:81:d9:d2:3f:5c:c3:f1:32:5b:c0:
         32:10:f6:2f:01:87:a0:ba:40:f2:8d:42:bf:20:c8:43:2b:f1:
         ea:09:30:54:8a:41:55:16:26:b8:58:4c:ff:ca:70:0c:ad:f5:
         2d:c1:b5:f9:ae:88:e3:7e:ba:28:33:57:50:06:03:9d:14:9e:
         ea:98:0a:ab:eb:8f:e0:90:a1:de:22:e0:2e:dd:ff:d4:1f:65:
         ab:3a:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org