Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MuDgElmWU_x_TY5Ba1BTf_F3ZW8.roa
File:                     MuDgElmWU_x_TY5Ba1BTf_F3ZW8.roa (raw, json)
Hash identifier:          T6psoaPCmSHGtSSleyGmzV94I3E6I1ayEyLTZsot1vk=
Subject key identifier:   32:E0:E0:12:59:96:53:FC:7F:4D:8E:41:6B:50:53:7F:F1:77:65:6F
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       0B6CBA6F
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MuDgElmWU_x_TY5Ba1BTf_F3ZW8.roa
Signing time:             Sat 01 Jan 2022 08:58:46 +0000
ROA not before:           Sat 01 Jan 2022 08:58:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199812
IP address blocks:        195.87.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191674991 (0xb6cba6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  1 08:58:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32e0e012599653fc7f4d8e416b50537ff177656f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:2f:af:3d:85:54:81:6b:ca:69:4b:52:93:
                    f0:79:a8:38:68:8b:1b:a6:ec:8b:22:31:9b:63:0c:
                    87:72:7c:83:c8:e8:fb:82:04:39:b0:19:44:09:26:
                    5c:d6:38:43:bc:1a:3c:7e:6f:74:55:cf:23:fb:ed:
                    f0:cb:d7:c8:09:e3:32:e7:88:4f:dd:88:e3:f6:43:
                    63:aa:ee:07:87:35:cf:dc:7c:26:e0:e7:c6:9c:95:
                    36:b3:d9:0b:21:7b:46:fd:cf:24:9a:c0:74:66:93:
                    d9:60:49:a1:b1:d3:c9:dc:55:7d:db:db:98:1a:45:
                    47:53:c8:9e:93:88:0b:12:4b:e5:0c:3f:e8:d5:d9:
                    7e:90:db:30:05:bc:27:70:67:a9:02:3c:5f:e8:7d:
                    25:81:42:78:e5:ea:5f:d1:62:2e:f1:55:6d:e9:3b:
                    b1:87:d3:ce:c9:ea:87:69:10:e8:90:60:13:f7:91:
                    26:45:04:e8:1d:aa:5d:e0:e0:74:61:92:7c:cd:bf:
                    3f:0a:eb:1f:7f:b8:87:b1:3f:58:92:4f:81:b7:72:
                    dc:9a:6f:52:50:15:03:5a:0f:05:af:1c:fe:eb:54:
                    f2:51:6c:fb:1f:99:4b:52:36:ba:7c:95:08:32:93:
                    aa:49:8a:78:45:85:4a:ec:7f:a8:43:30:a7:ba:d3:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E0:E0:12:59:96:53:FC:7F:4D:8E:41:6B:50:53:7F:F1:77:65:6F
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MuDgElmWU_x_TY5Ba1BTf_F3ZW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.87.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:b2:80:ce:99:39:11:33:f5:34:e5:7a:23:1a:ea:25:65:
         67:c7:b7:2b:3a:c7:10:8c:42:b1:65:d0:4d:78:57:78:2d:dd:
         5c:95:30:2b:5b:58:c8:31:f4:f0:30:2c:6f:f8:aa:7d:5d:1c:
         d0:8f:54:29:f5:8a:dd:29:a1:64:83:46:e0:dc:b2:1a:c1:69:
         16:c3:6d:e4:c6:0c:e2:e6:a4:f3:2e:0e:17:41:74:b4:a8:b2:
         2e:ec:d2:a4:fa:71:6a:e5:0a:99:f7:30:a1:cb:84:fa:f6:fd:
         5f:df:b8:8c:ff:4a:15:5d:b5:9a:d5:53:f7:a8:e8:b5:df:ed:
         dd:d2:9a:9b:2c:fa:8a:ac:84:d7:a4:a8:47:ff:2c:cc:66:8d:
         3e:ed:2d:6c:00:f4:23:71:82:c1:43:d4:a5:6f:60:71:02:c7:
         f7:86:bc:a5:07:7f:80:72:cb:2e:78:99:a7:e4:66:de:9c:86:
         b6:28:55:57:6b:7c:9b:93:d0:ba:76:a7:7e:aa:26:0e:8e:ec:
         42:62:69:72:a5:a4:fe:7e:b2:82:3d:6b:c1:80:e6:b4:1d:b8:
         58:a0:5c:e0:f9:9a:80:b4:8e:32:3b:a5:a8:40:85:15:42:64:
         89:7d:2c:06:75:b1:55:f2:f3:d3:2b:73:3d:a8:da:48:ff:0e:
         4b:3f:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:11 2023 by rpki-client on console-fra.rpki-client.org