Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uRsigTCjcC0U5diLO_LsMSJ7nrU.roa
File:                     uRsigTCjcC0U5diLO_LsMSJ7nrU.roa (raw, json)
Hash identifier:          86FDW4aRKGKaa1XWwz1spzdnP2YDMHdBK586CKtYdmY=
Subject key identifier:   B9:1B:22:81:30:A3:70:2D:14:E5:D8:8B:3B:F2:EC:31:22:7B:9E:B5
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1F47DD8E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uRsigTCjcC0U5diLO_LsMSJ7nrU.roa
Signing time:             Tue 28 Jun 2022 10:28:02 +0000
ROA not before:           Tue 28 Jun 2022 10:28:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138687
IP address blocks:        79.110.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524803470 (0x1f47dd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jun 28 10:28:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b91b228130a3702d14e5d88b3bf2ec31227b9eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:af:f4:7f:45:bc:0b:7b:de:0a:b3:f7:4f:
                    ef:a7:30:f6:be:bd:7f:90:c6:56:c9:90:65:7a:d3:
                    6f:4c:6f:af:f2:ee:cf:c1:fc:3a:ce:47:4c:4f:b6:
                    e3:a3:7d:cb:5e:52:ec:f4:ee:fe:52:ba:9d:7a:d4:
                    a0:07:00:57:8a:51:ee:e3:9a:8f:30:bc:ed:3f:29:
                    01:f3:b0:5e:24:f5:4f:b2:36:a6:8c:f5:00:fe:3f:
                    99:ab:e4:65:cf:8d:eb:fb:ba:d0:82:1f:c5:86:7b:
                    40:07:6d:56:e6:d4:cd:5f:ec:82:0c:ef:8f:da:1e:
                    28:68:3a:be:d6:08:0f:05:c4:3e:11:95:46:28:97:
                    8a:9d:63:5b:2a:07:14:ad:30:66:d2:ba:00:1e:1d:
                    5d:31:ea:1e:c2:66:bc:cb:4f:d4:9b:a3:fd:55:0d:
                    bd:79:a7:51:e0:38:3b:3e:9c:bf:d2:ad:72:a3:cc:
                    9c:a5:d4:9b:68:cc:d0:5d:6f:3b:22:f3:46:21:30:
                    35:97:0f:ec:5f:23:5f:88:ca:6b:9e:cc:00:9a:fb:
                    06:07:07:af:5c:79:98:b9:5c:9d:d1:c4:aa:c2:23:
                    6f:09:75:2d:0a:32:8e:e0:15:d6:39:0b:0c:40:b3:
                    fc:67:76:6d:cf:b9:5b:19:44:d9:1b:dc:7d:0d:47:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:22:81:30:A3:70:2D:14:E5:D8:8B:3B:F2:EC:31:22:7B:9E:B5
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uRsigTCjcC0U5diLO_LsMSJ7nrU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:21:53:65:7f:4f:8d:b7:cb:52:71:6a:27:95:08:63:90:
         81:8d:2a:0f:a6:05:c8:3f:a7:9b:36:e4:32:1a:a7:76:37:33:
         71:97:d0:25:51:58:c9:3d:12:e7:85:56:90:bc:34:ae:76:87:
         7b:a3:15:fa:53:65:39:d0:12:08:05:c7:9d:d5:7b:11:00:2e:
         43:a9:be:70:2f:fc:31:c6:0a:6c:3b:65:01:24:5e:b4:3e:4c:
         ce:b9:1b:55:27:f5:e4:76:9a:fc:b4:35:8e:c0:f2:93:2c:15:
         b7:6b:f9:43:93:91:b8:4e:ba:5b:e0:51:dd:54:fa:50:6c:a9:
         e5:16:e9:e8:e3:a1:19:70:3b:3b:3c:ce:66:b5:a1:95:3d:23:
         3d:22:24:9a:46:ab:b0:c5:90:a4:5a:5d:fa:a1:1c:52:bf:d5:
         62:cb:58:49:7f:5f:7b:b7:20:7a:b4:06:ca:c9:ca:c1:da:54:
         de:8d:0f:79:24:c2:0d:d6:2f:d9:29:a9:d3:14:d8:68:be:39:
         7f:87:bf:16:a4:a3:e4:11:fe:27:a6:02:6e:8d:b6:97:8b:0c:
         d1:6d:87:16:2f:46:cf:73:8d:da:a8:16:a7:30:d6:52:29:b5:
         e0:c0:0f:5f:39:ad:3b:fc:c9:17:d0:61:83:68:15:c8:80:0f:
         df:32:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org