Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ht2HxfkaZszKZeZ9awttQVw5Hfc.roa
File:                     Ht2HxfkaZszKZeZ9awttQVw5Hfc.roa (raw, json)
Hash identifier:          OWudY5Eu6F3JYbuYNM7xrvWcFK5nPT6Kw9FksAOjxVg=
Subject key identifier:   1E:DD:87:C5:F9:1A:66:CC:CA:65:E6:7D:6B:0B:6D:41:5C:39:1D:F7
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018379EB084A07FB6FE75992934DD64266EB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ht2HxfkaZszKZeZ9awttQVw5Hfc.roa
Signing time:             Mon 26 Sep 2022 13:09:49 +0000
ROA not before:           Mon 26 Sep 2022 13:09:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        79.110.50.0/24 maxlen: 24
                          109.206.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:79:eb:08:4a:07:fb:6f:e7:59:92:93:4d:d6:42:66:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Sep 26 13:09:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1edd87c5f91a66ccca65e67d6b0b6d415c391df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:6c:e9:64:73:9b:ad:dd:9a:76:66:aa:22:
                    2c:5f:ca:a7:33:01:5a:51:75:92:9b:9c:b1:d9:39:
                    3a:0b:13:13:a3:04:75:0c:75:6a:f3:5f:9f:ef:7e:
                    2c:ea:af:2c:23:66:35:3a:b3:c3:81:b9:a1:42:7f:
                    20:cd:26:13:a4:d0:00:92:87:46:cd:3b:30:2d:73:
                    19:c8:03:40:95:f9:14:44:43:70:75:b0:83:87:f9:
                    5d:ed:2c:d9:e2:e8:f9:98:d7:3c:5b:36:80:b0:a5:
                    80:28:cb:db:3f:83:db:6f:22:90:c2:16:cb:d5:94:
                    ea:59:2e:a4:a9:37:b4:20:89:c8:d1:b7:8f:75:43:
                    68:1e:96:44:31:aa:a8:a3:1b:52:e8:85:ce:9a:2f:
                    2e:b5:0c:dd:7e:bb:28:41:f4:ca:b1:47:e3:53:26:
                    c3:65:87:25:af:02:9b:90:b9:73:fb:90:7b:a0:ea:
                    6a:ac:a2:ee:54:b0:70:f7:41:0a:26:2c:84:a0:f3:
                    17:0c:14:a6:f7:27:8f:c8:e9:3f:92:53:cf:6e:9e:
                    25:07:62:dc:7e:d8:7f:3f:20:af:45:02:b9:f7:4e:
                    f9:03:80:ba:3e:56:4e:6f:54:6e:83:ba:32:94:46:
                    23:e3:d4:2b:81:23:ea:99:96:9f:51:f5:a2:c4:d6:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DD:87:C5:F9:1A:66:CC:CA:65:E6:7D:6B:0B:6D:41:5C:39:1D:F7
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ht2HxfkaZszKZeZ9awttQVw5Hfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.50.0/24
                  109.206.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:df:d3:20:ea:1a:e1:f6:38:f0:ef:13:77:4c:e1:cc:61:52:
         9f:9a:9a:68:c5:a9:4f:c1:d8:8a:a1:e9:ea:1f:9b:ed:ad:b2:
         a1:45:3d:38:95:30:df:5b:b6:30:b4:d9:37:9e:63:c2:5c:47:
         83:a8:0f:ca:db:72:91:b7:be:7b:88:ba:22:c2:72:cd:19:8b:
         55:e2:73:49:ff:b6:5f:54:83:13:f3:99:75:50:3f:46:8b:78:
         21:ba:ac:79:c1:c8:c6:e6:21:bc:7f:8e:f5:1b:83:d9:ee:c1:
         92:d3:d2:26:6e:da:6a:52:c0:5a:e4:0d:20:32:c7:08:b2:df:
         1b:03:c8:d3:79:50:c3:a0:3d:c3:d5:87:e0:31:e4:99:5f:6e:
         72:da:e4:37:00:95:e5:aa:cd:2c:2e:99:08:82:d9:9a:a8:c2:
         04:55:08:1c:72:14:69:1b:1e:55:41:d4:68:2a:4f:0e:fe:82:
         2a:c4:06:cd:50:18:5f:e2:fd:1c:0d:b3:8d:fa:96:06:af:75:
         7b:ee:6b:66:5f:be:a3:fd:c7:f8:cf:c0:5c:02:bd:61:d5:81:
         37:76:36:6a:39:e6:98:53:ab:6c:e6:9f:72:9e:3a:d8:d5:e6:
         94:bb:61:21:ab:dd:5b:a0:94:81:bf:ea:d1:3a:99:33:7f:c7:
         ea:f9:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org