Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rg-2efJl30__atQIQyM-B25_UJY.roa
File:                     Rg-2efJl30__atQIQyM-B25_UJY.roa (raw, json)
Hash identifier:          greeWo9GRzDpl7RTSKNijyjA65dZjte9AmkR+Ls0hoc=
Subject key identifier:   46:0F:B6:79:F2:65:DF:4F:FF:6A:D4:08:43:23:3E:07:6E:7F:50:96
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       37E3B122
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rg-2efJl30__atQIQyM-B25_UJY.roa
Signing time:             Thu 28 Apr 2022 11:09:08 +0000
ROA not before:           Thu 28 Apr 2022 11:09:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8717
IP address blocks:        89.215.214.0/24 maxlen: 24
                          92.247.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937668898 (0x37e3b122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Apr 28 11:09:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=460fb679f265df4fff6ad40843233e076e7f5096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:f0:6d:3b:60:e9:24:b2:b4:19:0a:23:6f:
                    ee:82:9e:6c:44:19:81:16:43:79:11:3f:32:f3:d3:
                    53:ab:5b:fc:f8:de:38:bc:e9:e2:ec:09:c1:1c:a7:
                    5b:2a:8a:99:c4:e2:09:a4:81:b0:4b:16:ba:36:74:
                    64:a7:20:2d:63:70:8d:6b:23:57:27:4c:67:04:d4:
                    15:b4:8a:13:9f:71:7c:53:60:51:73:33:a1:5c:9c:
                    a7:75:12:a4:fd:10:a0:e0:a3:c6:f4:bb:3b:73:78:
                    90:3f:6f:36:33:2d:a4:48:49:ff:b8:54:a7:eb:eb:
                    62:54:7a:72:0b:1f:2b:96:7b:d8:8b:18:0e:fd:1f:
                    35:72:6f:e9:86:26:a5:7a:e9:65:97:d2:7c:5a:f9:
                    0b:6b:31:fe:2d:56:91:6a:8d:4e:de:e7:e9:f5:9d:
                    bf:64:f3:9b:d8:a1:e2:1b:0d:ce:bb:64:ac:e9:04:
                    cb:73:81:1f:8c:3b:96:f6:55:8e:cc:32:a3:71:c2:
                    7b:79:9d:c0:c6:49:ad:82:13:51:31:2e:05:5e:40:
                    24:39:34:b4:8b:b3:96:3a:d6:1c:0b:44:45:38:64:
                    7e:69:e4:1b:39:4f:15:3f:22:ea:96:00:9d:b4:b4:
                    e3:04:a1:c9:1f:69:a7:9e:34:78:a9:29:a3:a4:05:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0F:B6:79:F2:65:DF:4F:FF:6A:D4:08:43:23:3E:07:6E:7F:50:96
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rg-2efJl30__atQIQyM-B25_UJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.215.214.0/24
                  92.247.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:e7:e0:b8:03:c0:67:d0:48:73:43:21:b9:40:a0:38:f9:
         af:91:12:10:0e:25:bd:b8:5c:38:64:cc:7c:de:fa:3f:0a:f3:
         24:72:94:fe:9f:7f:06:98:ce:af:ba:5e:a7:6e:ac:49:34:d6:
         0b:63:24:ff:1a:01:20:2e:a2:28:97:d2:2f:8c:96:3f:70:e2:
         3e:c5:9c:91:03:ff:f3:a9:ab:fb:bc:f9:f8:cc:de:bc:bc:ac:
         6a:c3:95:82:aa:75:9a:30:69:3a:0f:cd:d4:b5:17:ee:97:7d:
         15:b2:fc:ab:e2:d3:10:65:5d:b5:4d:45:03:f2:a0:d0:c3:95:
         a3:7c:be:f9:0e:4c:76:b1:e6:fd:77:2e:c4:a9:ef:43:fb:2c:
         41:57:8c:80:bb:49:57:61:a4:6c:a5:0c:21:c0:b5:ba:d1:8b:
         af:7f:8c:ed:bf:a3:8a:96:e6:1e:32:d5:59:90:94:d3:43:cb:
         bc:00:9a:4a:08:bb:09:33:7d:86:99:aa:a5:4c:19:5c:0f:c4:
         a2:3a:9e:8e:c7:6b:87:af:93:6b:84:04:55:5e:c3:c1:37:ec:
         b5:63:cd:29:a0:35:79:a2:a3:8f:d0:a3:4f:72:88:20:58:8f:
         51:a7:fe:6b:af:85:7d:27:e5:68:4f:80:a8:0a:60:15:5a:b6:
         20:28:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:12 2023 by rpki-client on console-ams.rpki-client.org