Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZFiYMKAcvnEvxoNAUTN3a4wD5Fg.roa
File:                     ZFiYMKAcvnEvxoNAUTN3a4wD5Fg.roa (raw, json)
Hash identifier:          MoGPlv4SbHj2v3XSSURQEFCos3iv1Qc4dixy3O0wOvc=
Subject key identifier:   64:58:98:30:A0:1C:BE:71:2F:C6:83:40:51:33:77:6B:8C:03:E4:58
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38ABDE9F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZFiYMKAcvnEvxoNAUTN3a4wD5Fg.roa
Signing time:             Tue 17 May 2022 05:30:19 +0000
ROA not before:           Tue 17 May 2022 05:30:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51374
IP address blocks:        88.203.189.0/24 maxlen: 24
                          88.203.190.0/24 maxlen: 24
                          88.203.187.0/24 maxlen: 24
                          88.203.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950787743 (0x38abde9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64589830a01cbe712fc683405133776b8c03e458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:cf:52:59:86:c1:54:37:c3:63:40:3c:a8:
                    47:c3:78:37:a4:21:c8:22:6d:3d:f2:80:73:e7:f4:
                    32:c9:78:df:38:7c:b9:8d:e5:b1:98:76:4e:fe:48:
                    97:85:b5:0b:cf:49:d8:e9:57:e9:3c:e5:d7:fa:48:
                    cd:43:54:d8:6c:cb:e7:68:e4:61:ed:83:33:a3:8e:
                    ba:c7:93:a0:69:33:4b:57:34:66:12:cd:51:0d:36:
                    27:ee:22:17:33:7b:a5:96:2e:ad:c8:68:22:3f:15:
                    a0:4a:c2:03:29:7d:d3:91:bd:36:a3:ea:f9:01:e7:
                    f7:29:88:b6:5b:8d:fe:75:8d:63:18:d8:d0:03:82:
                    4d:04:76:ba:6d:62:91:4a:39:6d:f9:f3:4d:fb:38:
                    39:23:e6:06:84:e8:0f:ce:a2:4e:e4:78:c5:7c:0c:
                    06:03:f8:47:90:1a:08:0a:8b:85:d4:d7:55:dd:4b:
                    f3:bf:7f:cd:ef:41:b9:13:f7:2c:2a:49:f5:66:dd:
                    4e:26:96:32:21:5f:72:87:70:b7:f7:e1:9e:3a:6e:
                    6e:a6:78:e4:e5:47:f0:49:ad:26:3d:a3:88:fb:98:
                    0a:eb:eb:7a:0a:20:dc:5b:50:e7:d3:a4:51:23:53:
                    4a:ba:75:cf:ff:8f:61:75:21:fe:f0:f2:80:14:91:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:58:98:30:A0:1C:BE:71:2F:C6:83:40:51:33:77:6B:8C:03:E4:58
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZFiYMKAcvnEvxoNAUTN3a4wD5Fg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.203.187.0-88.203.190.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:83:22:64:48:f9:9d:4d:ad:d8:16:8e:6e:7b:3e:22:ad:93:
         74:cc:7f:c3:93:11:24:7a:1c:85:e2:6c:44:10:da:98:00:f0:
         79:41:03:93:b4:14:60:21:94:87:10:38:a2:29:c9:03:54:50:
         69:99:96:29:f3:9b:c8:75:74:8e:44:4f:05:21:65:9e:16:8f:
         d9:ea:38:77:fe:ab:f5:75:71:bb:a6:a9:cc:86:11:89:a6:18:
         d9:37:19:52:fe:e4:a5:30:bb:00:5f:5d:3c:5b:e3:33:e3:ac:
         e7:ca:fa:2d:c7:94:a2:2f:40:09:00:d5:f6:9f:5a:be:54:6f:
         41:25:29:f2:ae:e8:54:a3:b2:0d:96:28:e0:85:03:4b:0f:e9:
         ba:1b:69:d0:51:41:e2:a4:4f:f6:29:ca:2f:61:54:dd:be:e2:
         a5:67:57:79:6b:e8:e7:f5:e1:c2:23:e4:b6:69:38:5c:6d:a7:
         bc:88:90:57:b4:af:19:3a:66:ef:e5:7b:a7:75:d9:3a:8c:86:
         26:69:4b:83:f1:3b:2a:06:a5:ae:e5:7d:03:91:d5:71:9f:95:
         aa:4e:f1:16:0c:ff:c5:8a:9d:20:7d:b6:39:20:04:c6:ef:8b:
         8e:1f:19:16:32:db:bc:bd:d2:cd:21:30:2b:da:48:04:d2:22:
         be:7c:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org