Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/OAT1uO3BzeM1Zl30n9EpmklvGzY.roa
File:                     OAT1uO3BzeM1Zl30n9EpmklvGzY.roa (raw, json)
Hash identifier:          8zb2InhidnONa2IwXqW3mSST6EhsycN9tku4gWVu+9U=
Subject key identifier:   38:04:F5:B8:ED:C1:CD:E3:35:66:5D:F4:9F:D1:29:9A:49:6F:1B:36
Certificate issuer:       /CN=01807b6740a6341bffaff46f165b5881f660d619
Certificate serial:       01821F82D0FF5D61DEEA335811821E374C17
Authority key identifier: 01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/OAT1uO3BzeM1Zl30n9EpmklvGzY.roa
Signing time:             Thu 21 Jul 2022 06:47:23 +0000
ROA not before:           Thu 21 Jul 2022 06:47:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        195.96.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1f:82:d0:ff:5d:61:de:ea:33:58:11:82:1e:37:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01807b6740a6341bffaff46f165b5881f660d619
        Validity
            Not Before: Jul 21 06:47:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3804f5b8edc1cde335665df49fd1299a496f1b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fb:c7:fc:bd:6f:fe:61:19:9b:1e:db:6f:33:
                    65:b2:0a:44:92:d9:78:bd:81:3c:ff:d3:dc:66:42:
                    9b:af:cf:6d:67:16:90:c9:e4:e2:10:cd:ef:db:08:
                    4d:22:cf:99:7a:71:df:3e:dd:c0:f5:46:21:7b:f7:
                    0a:6d:af:40:49:62:3c:9b:d2:b7:69:91:af:09:03:
                    46:c1:27:51:3c:a0:34:20:6d:89:da:7c:82:64:40:
                    18:6b:42:56:af:6c:d7:72:14:5d:42:e7:b0:80:a1:
                    35:37:37:70:24:ec:e3:ff:09:91:64:34:cd:fc:16:
                    94:02:a3:30:24:5e:9c:9f:95:37:ca:28:67:56:c6:
                    d4:3a:ec:3b:d2:96:1a:fa:04:9c:5f:35:5d:b0:12:
                    a7:98:b5:c7:0d:f9:dc:52:05:36:17:eb:2c:23:b7:
                    ee:32:b6:5f:74:f2:b7:fa:bf:44:4a:d2:4e:8f:e2:
                    bb:d6:24:30:5f:71:11:7d:11:fe:bc:63:eb:c0:1e:
                    4b:75:3e:0e:61:38:2a:47:82:d9:5f:1d:d0:68:29:
                    81:89:8c:fa:5a:f6:c2:9f:8f:ee:50:66:41:b7:3b:
                    ee:08:37:9f:28:d9:cb:82:bf:57:b9:33:c7:c0:a7:
                    23:85:5b:5f:ac:80:0f:e2:27:cc:54:1c:62:40:9a:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:04:F5:B8:ED:C1:CD:E3:35:66:5D:F4:9F:D1:29:9A:49:6F:1B:36
            X509v3 Authority Key Identifier:
                keyid:01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/OAT1uO3BzeM1Zl30n9EpmklvGzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:12:5b:ca:22:ab:94:de:c9:59:f4:e3:61:71:85:f7:04:99:
         5f:7a:e6:01:d8:58:b6:57:18:4b:95:8b:f8:e6:33:5e:f1:54:
         7a:33:f7:a2:4e:3d:27:ad:28:2a:80:ef:a2:bc:e3:b7:0b:eb:
         fa:18:82:a6:38:64:5f:41:ce:b3:59:86:55:29:6d:de:2c:d1:
         20:31:59:28:a7:9c:7e:bd:97:45:a6:07:ce:86:81:9e:5f:10:
         e8:2f:bf:73:19:23:a4:de:63:c0:82:1f:12:d4:97:aa:4e:a6:
         ed:25:ec:20:33:9d:de:3d:93:bf:70:61:2c:59:49:40:c6:57:
         9d:b4:e4:f1:8b:20:c3:16:38:fb:29:61:10:63:9d:66:77:a9:
         b0:28:a8:33:fa:90:81:d8:bd:7c:62:52:5c:3a:45:f3:0e:45:
         26:32:f1:6c:ea:36:25:7e:42:89:24:69:c1:55:fd:e6:42:8d:
         e5:e6:9c:0c:8f:f6:19:49:e5:f6:29:8e:a6:45:7d:f4:27:b9:
         98:c7:04:67:9b:16:aa:6f:7b:50:8b:34:07:a7:b8:a5:4f:b9:
         fc:a9:ba:dd:4c:04:40:d3:26:d3:04:f0:56:28:26:07:bd:48:
         ba:0d:0e:a1:6a:77:a0:e6:21:78:4b:05:a0:62:53:c2:fd:f3:
         52:1e:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-ams.rpki-client.org