Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GJc-W1DkD7nxVJdWR1fvBRmGrOE.roa
File:                     GJc-W1DkD7nxVJdWR1fvBRmGrOE.roa (raw, json)
Hash identifier:          KxIvBCQGBUE3Yod9W5PVlq01zgmlLRQpz8MVTApu6kk=
Subject key identifier:   18:97:3E:5B:50:E4:0F:B9:F1:54:97:56:47:57:EF:05:19:86:AC:E1
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1D568C87
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GJc-W1DkD7nxVJdWR1fvBRmGrOE.roa
Signing time:             Fri 04 Mar 2022 11:04:37 +0000
ROA not before:           Fri 04 Mar 2022 11:04:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212755
IP address blocks:        92.249.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492211335 (0x1d568c87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Mar  4 11:04:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18973e5b50e40fb9f15497564757ef051986ace1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:f5:81:70:4d:86:9a:00:3c:91:4e:fd:b6:
                    9d:9e:41:d9:fb:6b:bd:54:97:1d:e5:4f:ab:89:1a:
                    31:cb:ca:ca:0d:b2:c3:66:ee:42:d1:24:d0:f3:eb:
                    ad:17:26:1d:95:e5:8d:19:eb:91:32:6e:8c:73:12:
                    cf:21:b1:32:1c:3e:d1:6d:29:e8:07:31:0e:fc:c8:
                    6e:33:ce:f9:be:e8:7a:84:a7:36:d5:4e:52:44:fe:
                    c5:7b:52:fa:9c:e4:7a:38:70:4c:e0:2f:15:31:2f:
                    fd:58:b5:37:fa:f4:34:f4:87:d6:42:c4:96:e4:4c:
                    b8:64:75:96:ed:e5:4b:2a:7a:0f:7f:f2:37:d4:c5:
                    af:b1:69:27:d7:a0:74:a5:7d:34:d6:71:f9:1c:f5:
                    c9:b4:37:02:7a:55:16:9b:90:04:26:ea:6a:34:49:
                    2b:db:33:76:25:13:04:2d:0f:18:29:09:67:e3:6e:
                    57:f5:8b:8b:33:2a:4d:c0:3a:88:3f:b4:d8:cc:82:
                    fe:dd:95:67:a5:f4:a1:79:ed:7e:65:d7:91:1b:45:
                    86:38:5d:35:ff:4f:d6:32:02:54:92:e3:64:d3:5f:
                    ec:f3:b4:06:f1:ee:ce:7c:d1:88:ea:56:20:03:3b:
                    3b:f5:c5:1d:54:2f:af:73:5b:01:29:29:20:20:b2:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:3E:5B:50:E4:0F:B9:F1:54:97:56:47:57:EF:05:19:86:AC:E1
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GJc-W1DkD7nxVJdWR1fvBRmGrOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:82:8a:97:bd:47:b2:04:66:3f:bf:d4:a3:f9:85:03:7d:b3:
         af:23:2f:67:94:9c:60:f6:19:c4:19:c1:0b:57:63:28:65:79:
         5d:3f:7b:c3:db:6f:0e:3e:c5:c1:4f:7e:6d:38:22:47:39:88:
         6a:0a:9c:e6:11:90:e5:59:fb:0b:78:db:55:aa:e7:83:ac:ee:
         79:ec:b0:5f:83:cf:77:1c:84:1c:a6:6f:5c:b5:08:38:57:74:
         0f:5a:e9:0f:96:56:84:4f:0c:7a:db:fe:27:34:99:56:ba:37:
         6f:41:96:09:0c:8b:60:57:cf:5c:49:21:59:32:3f:0f:a9:2c:
         d2:8c:2e:33:80:27:d8:1b:97:5e:0b:ce:62:ae:d5:b8:d0:9b:
         24:1f:84:df:5f:1e:71:be:d0:77:a7:2d:b0:5d:08:2a:fe:5b:
         b8:03:f5:1d:f9:bb:a6:39:f4:53:d9:c0:e8:0c:f4:dd:8c:52:
         3f:f5:f4:20:e6:05:fb:f9:43:d1:ad:50:59:7a:b2:9a:dc:fa:
         8d:12:d0:44:02:25:2b:4c:1e:ea:e2:da:ef:2a:0c:48:bf:37:
         d6:68:19:05:3c:18:19:4b:60:22:38:c6:da:a2:c9:bd:a4:c8:
         ff:36:1e:01:9e:95:b1:19:51:4a:a6:11:9d:42:8e:ca:dc:9d:
         49:9d:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org