Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa
File:                     sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa (raw, json)
Hash identifier:          7ItKPbrKC7dwpicxdwnj29tC4FN+iHa03daHhKUMsL8=
Subject key identifier:   B0:37:3C:C4:36:CC:51:28:F5:98:95:E8:FA:01:65:2F:7B:50:11:5C
Certificate issuer:       /CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Certificate serial:       B7B268
Authority key identifier: 71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa
Signing time:             Fri 28 Jan 2022 21:52:45 +0000
ROA not before:           Fri 28 Jan 2022 21:52:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141677
IP address blocks:        91.229.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12038760 (0xb7b268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
        Validity
            Not Before: Jan 28 21:52:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0373cc436cc5128f59895e8fa01652f7b50115c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:f3:80:47:fc:23:be:05:47:24:f2:64:72:
                    e4:65:b6:32:20:fa:b3:eb:2c:e5:74:29:47:82:4a:
                    2c:aa:0b:8e:ac:f2:8a:b5:7e:59:dd:2e:f5:03:68:
                    13:09:f7:67:1a:b3:a9:63:e9:80:69:80:c9:20:72:
                    ef:e0:c2:4e:67:da:f5:4b:dc:6f:4b:67:8c:4e:0b:
                    6c:3b:89:56:8d:71:b5:29:b7:7e:70:5d:f7:af:cb:
                    e8:71:4b:4c:ac:d2:2a:72:e9:3d:77:ae:c8:80:0c:
                    55:bb:b2:de:f3:02:02:8c:1f:fe:e5:1d:7e:e1:d8:
                    c2:05:2f:fc:e8:da:9f:23:5e:43:cc:7c:3c:80:e1:
                    74:4e:6f:d9:0e:f1:cb:25:64:67:2d:ce:d1:1a:85:
                    53:b7:10:63:7a:a3:7e:40:0a:72:85:95:c9:fb:9e:
                    47:e9:86:eb:6a:e9:6b:f1:9d:ff:e3:b7:28:ce:c4:
                    44:93:a3:a4:fc:e3:34:f4:6a:79:07:d9:78:e0:1e:
                    b8:8a:a4:54:22:d4:ad:55:c3:ec:1f:f7:32:55:89:
                    09:67:1a:07:b0:9d:21:26:46:de:11:a4:1c:0c:e9:
                    92:12:b8:5c:cd:95:18:96:10:12:38:4f:69:2c:66:
                    20:65:88:6f:1e:d3:31:db:24:2d:0c:90:8f:ea:e8:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:3C:C4:36:CC:51:28:F5:98:95:E8:FA:01:65:2F:7B:50:11:5C
            X509v3 Authority Key Identifier:
                keyid:71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:77:22:8c:a5:5d:7b:c9:73:49:ce:36:41:33:00:48:d5:
         6d:58:49:18:cb:9a:17:f0:32:b5:0c:ae:fb:1b:00:35:6b:b8:
         05:78:81:54:94:c4:19:2d:c1:d6:9f:fc:26:ca:01:b2:98:fc:
         2f:6e:44:31:9f:39:c2:c9:70:e2:5e:f9:bb:b7:a8:37:10:11:
         72:70:d7:df:29:ea:07:7e:25:a7:dc:8c:3f:7a:4e:36:f6:f7:
         0c:29:05:5c:d0:68:70:c1:f1:7f:60:e5:7c:61:11:ad:f9:59:
         66:de:fb:0f:da:f0:e0:5c:22:66:dc:70:d3:dc:4c:be:5d:f2:
         1b:46:2e:f1:5f:31:85:69:84:19:37:f3:ab:3c:8e:43:33:1a:
         2c:03:54:f6:99:6d:cb:25:a8:04:c0:13:d5:4a:a7:a0:5f:52:
         d3:34:54:69:e8:00:eb:2d:65:bc:12:bf:32:6a:d0:65:c0:3f:
         76:b9:08:5f:b3:81:90:0a:32:d0:1b:b7:19:b3:8d:61:7a:fc:
         36:a7:26:fb:ac:a9:57:cd:a7:bd:28:dc:91:8c:4b:6c:69:19:
         99:6f:8f:9d:6c:f2:2e:8b:7c:f8:4b:0d:ad:c6:67:c4:46:1a:
         a3:57:ce:d5:00:e0:fb:6d:24:03:e9:c2:4d:36:2b:cf:ae:de:
         b4:f4:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:36 2023 by rpki-client on console-fra.rpki-client.org