Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0Sxtvn6f_-y-vbTt7CSaGhNeKBc.roa
File:                     0Sxtvn6f_-y-vbTt7CSaGhNeKBc.roa (raw, json)
Hash identifier:          tAMj+3VygMvK1N7byxn16JQOhQ1LoZI+ppz7XlVUUkQ=
Subject key identifier:   D1:2C:6D:BE:7E:9F:FF:EC:BE:BD:B4:ED:EC:24:9A:1A:13:5E:28:17
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38135061
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0Sxtvn6f_-y-vbTt7CSaGhNeKBc.roa
Signing time:             Mon 09 May 2022 06:47:54 +0000
ROA not before:           Mon 09 May 2022 06:47:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8717
IP address blocks:        89.215.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940789857 (0x38135061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May  9 06:47:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d12c6dbe7e9fffecbebdb4edec249a1a135e2817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:f0:fd:21:a9:86:83:07:4f:c6:1a:1c:03:
                    e2:c4:9c:15:e9:f3:df:4f:b8:6f:06:eb:f8:af:c4:
                    ba:c8:7b:28:68:ef:c4:07:cd:59:7b:51:62:22:18:
                    9e:68:f0:61:2f:39:7b:2f:15:26:d4:5e:95:03:8c:
                    d0:c4:20:79:2c:4b:dc:d5:67:c6:2a:1e:5f:94:f7:
                    27:40:2e:1f:c3:29:00:50:5b:24:2a:49:4b:47:1f:
                    68:c8:70:99:46:6f:55:ab:2f:70:3c:64:e6:05:9c:
                    55:68:0d:95:c2:01:2d:52:b2:98:fc:3e:86:d5:94:
                    8d:fe:c1:bc:3b:a0:f7:27:45:18:38:6d:6b:fb:28:
                    b2:b8:88:76:f9:36:77:e9:00:09:07:0f:1d:6a:0f:
                    83:b0:c9:e7:c1:6d:d5:7f:9a:3b:a7:a9:b8:d5:8f:
                    9d:fe:a6:b4:70:35:75:5f:5f:96:c6:4c:3c:52:5b:
                    33:19:f1:81:aa:e2:46:bd:b9:f1:28:64:d6:38:ea:
                    1d:d0:28:f0:87:4c:5c:bc:35:56:e3:22:7d:86:15:
                    3f:77:ca:a5:70:ce:d7:7a:2b:a0:07:e6:ad:eb:7e:
                    0e:37:2d:3f:0b:36:b8:f9:ed:aa:19:46:bc:ab:1d:
                    ea:16:e1:1a:0f:91:d4:76:01:32:a5:42:17:ba:30:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:6D:BE:7E:9F:FF:EC:BE:BD:B4:ED:EC:24:9A:1A:13:5E:28:17
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0Sxtvn6f_-y-vbTt7CSaGhNeKBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.215.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:63:bb:20:37:69:11:50:9b:c2:f8:74:9c:46:e9:ed:42:
         7f:f8:b2:2b:91:96:31:56:03:8b:14:55:70:77:33:76:57:12:
         19:1f:d9:a2:0b:60:5a:f6:dc:71:29:bc:8c:39:cc:fb:7d:60:
         6d:23:98:85:aa:d8:e9:b2:c5:91:13:0e:24:c8:17:12:ee:46:
         a3:9d:4f:f5:14:d3:eb:a6:fd:4a:2a:33:8f:d5:cb:6e:f1:96:
         c9:4f:f5:13:bc:ce:60:5e:96:2c:85:d2:79:33:79:68:3a:a9:
         ab:63:12:15:b7:84:d2:90:3b:99:90:2b:8e:f6:1a:e3:67:be:
         49:ee:08:9c:39:e6:ed:8f:4f:d2:11:52:75:f2:71:73:55:62:
         11:06:16:8b:03:7e:0d:c4:7a:67:dc:01:9c:db:f3:0b:c7:6b:
         b6:25:5f:f8:f5:b5:80:5f:f7:b9:bf:49:34:d9:b4:30:7a:21:
         34:26:d4:57:64:e6:e9:ee:08:a2:69:52:43:8d:ca:26:fb:12:
         34:d6:63:54:3a:18:6e:bf:5c:84:8f:2d:00:4c:68:b4:3a:97:
         11:67:dc:4c:33:ad:a7:84:0d:ad:08:47:d0:5c:b2:cd:15:70:
         8a:36:5c:6e:5c:1c:8d:bf:1e:d0:a8:79:82:ce:d5:fa:af:5c:
         e0:4f:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:17 2023 by rpki-client on console-fra.rpki-client.org