Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6cJfdBBmq0kuGNaSGKbUASBx2T4.roa
File:                     6cJfdBBmq0kuGNaSGKbUASBx2T4.roa (raw, json)
Hash identifier:          xz5RAvaoZFe2oeePe6kcBncVfjwSdizfaQTr1dzFqMo=
Subject key identifier:   E9:C2:5F:74:10:66:AB:49:2E:18:D6:92:18:A6:D4:01:20:71:D9:3E
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       04C387B0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6cJfdBBmq0kuGNaSGKbUASBx2T4.roa
Signing time:             Tue 15 Feb 2022 18:27:29 +0000
ROA not before:           Tue 15 Feb 2022 18:27:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        193.233.232.0/22 maxlen: 22
                          193.233.85.0/24 maxlen: 24
                          193.233.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79923120 (0x4c387b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Feb 15 18:27:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9c25f741066ab492e18d69218a6d4012071d93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:72:d1:0b:e2:48:6a:d5:8b:12:e4:70:14:
                    16:05:ce:15:64:bc:1e:06:94:72:36:13:39:78:f8:
                    a0:38:57:c1:4d:11:0e:19:a0:c2:5a:56:3f:7a:2a:
                    b7:11:a5:aa:ce:b2:5e:0f:04:ea:85:0b:ad:04:b9:
                    65:0d:f0:5b:57:8d:8f:e3:18:93:88:6f:8c:85:eb:
                    27:46:28:7e:d9:02:e6:1a:d1:79:bd:b7:be:a7:3e:
                    f8:d4:fd:19:9c:ec:15:c9:d3:7a:1d:eb:94:54:0f:
                    f0:a7:a8:1a:75:a4:3b:8f:53:f4:e6:42:91:2b:ba:
                    c6:c3:93:02:f4:b1:07:58:ab:76:1f:ba:a0:56:a9:
                    25:de:81:f4:a2:a6:16:54:a2:c7:34:8e:25:ae:4a:
                    bc:88:36:f0:6f:40:66:d8:2b:cc:51:02:fc:0e:2a:
                    52:8a:8a:ce:a7:d5:ee:f9:5b:eb:6a:e6:25:1a:76:
                    17:03:4e:83:14:ee:4e:28:74:07:54:39:e1:54:14:
                    84:44:67:ff:81:c3:0c:01:da:24:65:66:14:cc:c9:
                    a7:a4:fa:6e:79:69:2e:41:db:5d:7c:1b:72:e3:83:
                    a7:bf:d5:88:fe:e8:4e:1b:02:c2:11:77:c4:fb:da:
                    cf:5b:b6:ea:62:89:be:55:89:5d:2c:30:68:15:79:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:5F:74:10:66:AB:49:2E:18:D6:92:18:A6:D4:01:20:71:D9:3E
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6cJfdBBmq0kuGNaSGKbUASBx2T4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.85.0/24
                  193.233.212.0/22
                  193.233.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:4d:93:9f:8b:94:bb:e0:ae:df:d8:d0:30:38:89:b3:99:19:
         33:72:f0:7f:0b:c8:d3:91:75:a5:a0:95:d4:67:0c:92:86:18:
         36:2d:3a:cd:88:e3:46:ce:af:7a:0d:e2:9f:a5:8e:fb:38:70:
         d6:a8:87:06:8e:a3:f1:6b:a6:7f:c8:0a:9c:20:9f:d9:61:8b:
         1d:b4:21:c0:aa:58:30:74:cb:2e:bb:4a:8a:dd:13:40:40:7e:
         aa:fa:9a:aa:80:02:8c:d8:ab:5b:0c:e3:1d:f0:eb:db:b8:eb:
         ae:d4:be:29:83:e5:de:7f:d5:c1:4a:99:1c:3c:e5:d2:61:d1:
         ee:af:b8:32:d7:93:e3:78:1f:89:a3:ff:6e:02:92:84:0a:ee:
         33:87:98:0e:be:98:0f:2d:f7:b4:53:70:03:05:0a:fa:8e:88:
         aa:e2:0c:61:f0:83:84:ab:60:f0:60:a4:02:bc:3f:93:7e:e3:
         24:ac:da:03:9d:62:55:d5:e5:e0:eb:81:8b:ca:23:f6:3c:06:
         90:fd:70:10:ca:6d:d6:7a:2b:1c:2c:f0:cd:e8:a5:b9:ad:6f:
         27:84:93:59:91:7d:26:4e:28:ce:6a:2d:32:04:8b:71:c0:90:
         17:cb:b6:98:cf:3a:2d:cc:82:b0:b5:d5:de:2c:ae:f2:d0:70:
         e9:21:89:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org