Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/Ftw1a8jn6GMtMFnNCBo0BOnx4ug.roa
File:                     Ftw1a8jn6GMtMFnNCBo0BOnx4ug.roa (raw, json)
Hash identifier:          9GkBFPc3ZXq6q73IUcxcZSQsLTbvE+LiTHJVS4la4mk=
Subject key identifier:   16:DC:35:6B:C8:E7:E8:63:2D:30:59:CD:08:1A:34:04:E9:F1:E2:E8
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       02C46E
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/Ftw1a8jn6GMtMFnNCBo0BOnx4ug.roa
Signing time:             Wed 26 Jan 2022 20:03:43 +0000
ROA not before:           Wed 26 Jan 2022 20:03:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2386
IP address blocks:        193.38.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181358 (0x2c46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Jan 26 20:03:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16dc356bc8e7e8632d3059cd081a3404e9f1e2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:12:7d:a4:dd:d8:79:f6:cb:5e:db:44:6d:
                    3f:18:9e:9b:d8:e2:2d:b9:fe:e9:e2:4c:a0:6c:b0:
                    37:55:d4:6a:96:c0:13:f9:f6:c1:1f:c9:98:9c:31:
                    e7:93:de:48:bf:49:ae:67:4b:0e:e4:82:78:ff:b4:
                    61:02:7c:13:6c:6a:f2:6e:f3:45:e1:af:e8:bb:3b:
                    0f:b8:71:1c:81:fb:58:8f:31:c4:f0:93:ba:d8:b4:
                    b3:86:46:1c:4c:c8:ac:20:8e:b4:db:97:8e:83:6b:
                    8f:7a:c3:ee:61:97:71:1b:31:f0:c0:34:55:dc:73:
                    14:69:fd:f9:6c:a6:62:71:71:e7:72:c9:c9:a9:1e:
                    a5:2e:af:15:86:56:3d:95:87:1a:fb:f2:9c:78:20:
                    9c:03:d2:cb:ca:98:6b:cd:52:97:6a:fb:a4:3b:5f:
                    e7:7e:91:8a:eb:d1:db:f1:67:2e:af:8c:a7:9e:8b:
                    4c:bb:74:06:ee:3f:dd:97:7b:6d:95:88:12:e1:34:
                    01:7b:14:4d:83:14:8b:9b:41:97:3b:0a:c1:f1:fb:
                    dc:0c:13:91:7b:16:5a:99:71:20:83:05:62:10:73:
                    9f:b6:71:a9:73:4d:f8:38:95:3f:1c:4a:a0:0f:17:
                    68:38:d9:86:66:c2:80:72:fb:a1:50:29:0a:5b:36:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:35:6B:C8:E7:E8:63:2D:30:59:CD:08:1A:34:04:E9:F1:E2:E8
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/Ftw1a8jn6GMtMFnNCBo0BOnx4ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:99:62:9a:12:50:7d:da:6c:8f:90:da:f4:fb:8c:8a:f5:97:
         70:8a:74:cd:e6:f2:2a:8d:ed:43:d3:c6:bc:20:2b:e3:99:f1:
         23:20:1d:02:6a:2c:83:f1:48:fd:6c:19:58:09:c3:77:2f:70:
         61:4c:20:96:f5:7a:a2:20:d4:cf:9f:8f:a3:00:09:ce:c1:7c:
         90:3a:3d:45:2c:4d:dc:60:49:87:74:df:94:9d:73:3a:d9:04:
         02:04:e2:3d:0a:4a:82:ef:9f:b0:0c:b6:73:43:6f:24:fe:ab:
         3d:2e:95:5c:a7:fa:48:30:82:7f:b9:0b:d4:9a:72:36:91:db:
         5b:bb:da:99:11:20:e8:73:5b:79:c9:9e:24:36:fb:81:05:9c:
         8e:27:43:67:f4:34:36:e7:e1:52:60:1f:50:ed:47:4b:46:2c:
         f2:5f:94:57:62:a4:87:23:5a:87:a1:a7:0f:cd:11:1c:2e:f8:
         f8:06:fd:a0:76:ce:6f:be:97:b0:4b:ce:d8:50:b0:c1:18:3b:
         97:74:86:05:39:01:aa:fa:2d:fd:47:80:cd:88:7e:9f:0c:5c:
         c8:5c:9d:91:64:3c:db:d8:e6:40:b3:68:78:bd:6d:0c:c2:30:
         26:c6:12:50:76:c3:a5:9e:a6:ab:05:f2:c2:79:4f:84:94:52:
         05:1d:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org