Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/TGuLpBZSotGG07vqvKAZzOHoGu8.roa
File:                     TGuLpBZSotGG07vqvKAZzOHoGu8.roa (raw, json)
Hash identifier:          UJWzERtQKIaSBXwRuC5waSO42EtOuBdfK/QxG7DU98M=
Subject key identifier:   4C:6B:8B:A4:16:52:A2:D1:86:D3:BB:EA:BC:A0:19:CC:E1:E8:1A:EF
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       0249232F
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/TGuLpBZSotGG07vqvKAZzOHoGu8.roa
Signing time:             Sat 01 Jan 2022 01:57:26 +0000
ROA not before:           Sat 01 Jan 2022 01:57:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        193.138.90.0/24 maxlen: 24
                          193.110.146.0/24 maxlen: 24
                          194.165.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38347567 (0x249232f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: Jan  1 01:57:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c6b8ba41652a2d186d3bbeabca019cce1e81aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:88:f1:16:19:42:91:43:0d:f3:9b:18:90:
                    8a:41:76:b5:0a:de:82:75:f3:70:42:09:cb:cd:cb:
                    b6:7d:fb:52:b4:09:1a:d9:9c:bb:8c:00:18:72:1c:
                    6d:2b:17:b2:da:12:94:fd:20:e5:8a:2f:c9:87:d0:
                    ba:81:43:d6:ff:b7:c7:8c:78:59:52:93:ff:80:db:
                    41:e9:20:d4:36:f9:71:6b:6f:29:94:aa:f6:ab:b1:
                    76:5b:fa:0f:90:ce:7c:dd:c8:6b:0a:04:d6:ce:ab:
                    44:73:84:f8:e0:73:3f:95:c0:68:9b:9c:63:ba:88:
                    ba:96:33:66:81:e9:ea:37:3a:8f:8f:76:03:ed:d1:
                    a1:b9:ae:0c:1a:c2:f7:26:07:ea:d7:5a:fa:ea:93:
                    16:cc:03:71:95:b9:b3:3f:0b:fe:b5:7e:27:cf:3c:
                    ae:22:f9:98:8c:a7:7d:82:ce:01:2d:c8:eb:7f:5f:
                    a8:66:86:b5:28:3e:3e:7d:bb:56:35:9e:fd:fd:49:
                    a1:49:fd:fc:34:92:e2:84:f5:20:08:de:c7:6f:8b:
                    fa:26:76:e0:f3:6a:88:8d:77:70:f2:fa:b2:e8:93:
                    47:7d:d1:8f:ea:58:c9:e3:56:b0:65:a9:fa:1d:ea:
                    53:45:f6:c5:59:a9:c9:a3:a0:51:a3:99:10:96:21:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6B:8B:A4:16:52:A2:D1:86:D3:BB:EA:BC:A0:19:CC:E1:E8:1A:EF
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/TGuLpBZSotGG07vqvKAZzOHoGu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.146.0/24
                  193.138.90.0/24
                  194.165.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:01:ab:43:27:80:36:7a:35:18:02:82:b5:8a:10:bb:96:d2:
         11:75:5b:f4:11:08:37:4f:f1:de:f4:71:47:96:99:81:6c:0e:
         6a:0a:5a:7f:97:05:1a:84:e2:62:1e:16:6f:27:e8:c9:c2:dd:
         db:bf:22:cf:66:8c:75:bc:4c:bb:dd:d5:32:f5:24:49:c5:8e:
         e2:c5:2d:f5:18:d8:40:10:bb:87:16:d8:6a:ed:b3:89:c2:a3:
         4e:ea:34:f1:b4:80:21:d1:86:08:4a:39:7f:12:da:08:df:48:
         9d:16:87:a2:68:ee:ef:57:ed:8a:5f:05:01:29:30:a8:1c:e0:
         85:93:a3:85:9e:16:bf:95:41:79:4e:20:7f:65:d8:7a:73:28:
         35:9c:34:56:bd:6f:b2:c7:f1:6e:45:42:d4:70:65:0f:b9:1d:
         c8:11:af:e0:8f:0a:8f:c3:ac:5a:d1:aa:ec:bf:9b:d7:01:36:
         5c:7d:43:9d:d1:32:84:8d:17:e1:26:63:d1:a1:fe:b3:49:c5:
         dc:5f:ff:a8:06:db:87:9c:90:5c:80:3a:1c:46:4e:a8:b3:ad:
         98:48:aa:dd:ab:f7:f0:0b:90:ed:ff:31:0a:3b:4f:a9:e1:d6:
         72:33:89:17:b4:43:19:a8:6d:25:68:02:e0:e9:4f:02:58:34:
         dd:00:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:20 2023 by rpki-client on console-ams.rpki-client.org