Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/oUuAUynL3sKNYvQFKNBtfHLKHk0.roa
File:                     oUuAUynL3sKNYvQFKNBtfHLKHk0.roa (raw, json)
Hash identifier:          IfhyLucrpr+51bONDbfKGiTiSpfg67Rz3SnBam5VjXE=
Subject key identifier:   A1:4B:80:53:29:CB:DE:C2:8D:62:F4:05:28:D0:6D:7C:72:CA:1E:4D
Certificate issuer:       /CN=eeb9ba19b9eccc4aee0f81115af2439a7979f31b
Certificate serial:       013EE9
Authority key identifier: EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rm6GbnszEruD4ERWvJDmnl58xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/oUuAUynL3sKNYvQFKNBtfHLKHk0.roa
Signing time:             Tue 25 Jan 2022 12:45:52 +0000
ROA not before:           Tue 25 Jan 2022 12:45:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57878
IP address blocks:        185.207.212.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81641 (0x13ee9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb9ba19b9eccc4aee0f81115af2439a7979f31b
        Validity
            Not Before: Jan 25 12:45:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a14b805329cbdec28d62f40528d06d7c72ca1e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:da:61:ee:5c:6c:f6:c6:fc:51:a9:5e:32:
                    28:2f:3d:89:9b:cd:ad:b0:51:cd:5d:ed:28:b1:7b:
                    d2:e7:34:f0:1e:d4:8f:43:b7:62:18:e3:02:8c:43:
                    83:a0:60:07:fa:74:80:aa:61:f6:fd:4b:ee:3c:6c:
                    33:54:2b:ad:23:13:a4:2e:56:23:60:bf:f3:ab:83:
                    4f:88:b2:1c:e9:dc:9e:54:cb:41:c1:39:fe:a2:d7:
                    c0:13:8c:a1:63:9b:4e:86:b2:39:d1:ab:ea:45:c1:
                    84:7a:d7:d0:37:22:08:3f:c5:1b:c2:e8:7d:05:30:
                    8d:d4:3c:2c:25:5c:13:a1:3a:6c:ed:17:8f:30:bd:
                    8e:ad:ab:4d:b4:37:99:ea:89:e0:eb:c3:93:29:3d:
                    0e:dc:70:51:1f:ce:e4:57:e3:4d:7d:af:c9:d8:ab:
                    d7:c9:07:f4:81:6d:b8:75:c0:e0:de:46:d8:49:e1:
                    5b:79:3f:6e:91:62:20:c2:23:4d:70:de:de:b7:30:
                    4e:c6:e2:27:1a:fb:35:6a:9b:12:4e:c9:5d:b0:2d:
                    fb:ce:f6:b1:99:a7:62:6b:20:42:86:6a:2b:47:da:
                    8c:74:37:8f:48:9b:37:b2:7e:79:a5:1b:dd:c4:af:
                    b9:83:e6:bb:b0:c4:0f:06:78:1f:7a:a2:bf:c4:c5:
                    7c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4B:80:53:29:CB:DE:C2:8D:62:F4:05:28:D0:6D:7C:72:CA:1E:4D
            X509v3 Authority Key Identifier:
                keyid:EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rm6GbnszEruD4ERWvJDmnl58xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/oUuAUynL3sKNYvQFKNBtfHLKHk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/7rm6GbnszEruD4ERWvJDmnl58xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:24:97:dc:c6:fa:69:37:84:d7:97:a7:bd:ce:59:3a:00:bf:
         8f:d1:4b:92:40:9b:e4:40:c7:d5:57:3a:82:26:76:8f:e2:99:
         5c:60:36:f5:c3:77:64:3f:b5:5c:42:c4:67:09:2b:fb:58:ed:
         0e:20:1b:3f:17:07:3f:ed:33:c0:7d:e6:74:03:23:51:b6:09:
         48:36:cc:79:c4:00:2b:91:ce:d8:e3:3c:25:f5:9d:16:1f:64:
         3c:22:0e:8a:97:bd:95:5d:56:9f:fd:3e:e8:67:0c:a6:9b:a0:
         3f:aa:1d:ba:16:7d:2e:d8:9a:95:6c:52:05:a8:ab:d1:79:42:
         95:b7:f6:bc:b8:da:60:73:cc:12:82:fd:fd:6a:a6:02:4e:9d:
         e7:7a:46:1b:40:18:3e:4d:4e:e1:09:27:fe:3a:7e:da:82:e8:
         c7:1c:7e:3b:72:09:de:6e:69:44:96:4f:25:44:ea:1b:9b:e2:
         c9:ea:ec:3f:45:81:c4:c2:5d:8b:b3:bc:3a:ce:9d:84:c7:d4:
         24:64:62:9c:94:12:bb:13:42:aa:2c:2b:f4:b4:73:99:f8:93:
         62:db:25:02:dd:c6:8e:65:a3:bd:d7:8c:de:c7:a5:d1:12:4b:
         7f:0d:5d:2e:2c:2c:de:f1:08:9c:1e:63:b2:bd:b4:a4:20:f2:
         89:72:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:46 2023 by rpki-client on console-ams.rpki-client.org