Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GpLtJEVZCrjQUaNmmQ4FdUQ1S6Q.roa
File:                     GpLtJEVZCrjQUaNmmQ4FdUQ1S6Q.roa (raw, json)
Hash identifier:          N7ob9KO9pQas5uE66sd2zK2mTgQ57TJLCqQOtffxNoM=
Subject key identifier:   1A:92:ED:24:45:59:0A:B8:D0:51:A3:66:99:0E:05:75:44:35:4B:A4
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       043A85F6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GpLtJEVZCrjQUaNmmQ4FdUQ1S6Q.roa
Signing time:             Sat 01 Jan 2022 12:05:04 +0000
ROA not before:           Sat 01 Jan 2022 12:05:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206167
IP address blocks:        193.233.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70944246 (0x43a85f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jan  1 12:05:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a92ed2445590ab8d051a366990e057544354ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:5a:69:85:51:16:20:c1:0d:95:cd:9c:3d:
                    29:c1:aa:5e:f9:c7:f2:26:4e:b7:fc:5d:55:01:8d:
                    94:e2:30:71:bf:a8:a1:a3:5e:13:99:c2:92:dc:a3:
                    cf:a8:86:1c:e4:cc:a0:bd:31:40:17:9a:00:cd:99:
                    3e:5a:c4:cf:16:68:82:e0:dc:c7:a1:a1:77:27:26:
                    98:63:b0:5f:99:a7:29:e0:1f:58:e0:e2:17:3d:d3:
                    a7:91:76:18:87:57:72:b5:08:e2:f3:cf:52:ef:54:
                    54:7a:31:21:4c:45:33:52:de:1a:7b:4b:54:63:5d:
                    43:6a:b5:56:a6:71:d0:17:c9:7c:96:db:68:9e:0b:
                    fd:c7:f9:14:cc:d9:51:18:4c:6a:f8:3b:5b:2f:43:
                    d0:0f:32:7a:1b:d6:dc:5f:13:d0:05:bc:7c:90:e6:
                    d9:9c:b7:64:b9:4f:aa:a9:ee:2e:d0:89:45:d1:73:
                    b7:c4:64:2b:54:81:8a:e3:36:2d:7b:26:8f:0f:3e:
                    3e:41:50:e3:8c:20:5a:92:42:cb:c0:d8:4f:11:47:
                    f4:ea:8c:33:96:7a:c2:0f:6f:8f:b5:45:45:de:3d:
                    03:df:e2:42:6f:b5:84:ea:1f:bf:03:06:32:4e:53:
                    fa:0d:b7:ef:26:bf:3c:db:0e:d4:11:59:c7:9a:2d:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:92:ED:24:45:59:0A:B8:D0:51:A3:66:99:0E:05:75:44:35:4B:A4
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GpLtJEVZCrjQUaNmmQ4FdUQ1S6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:2a:f7:07:74:0e:0f:cc:be:42:df:87:8c:32:bb:99:64:
         c9:17:f1:c5:a8:60:28:5b:29:2a:e5:f0:c4:40:cf:a3:22:ef:
         c1:eb:ff:29:06:50:a6:99:f4:67:d2:46:c9:a0:00:ce:2c:03:
         1b:5f:0c:05:8b:5e:e0:0d:e3:ff:80:d8:e7:cc:78:7b:42:c0:
         b1:65:b3:f7:7c:ca:89:81:f7:e9:3e:b3:bd:1c:28:bc:c3:99:
         72:69:52:77:e8:35:a5:58:59:81:a3:53:77:05:8f:19:78:d4:
         6c:77:37:4e:fc:8c:d3:3b:60:30:3e:45:8b:4e:df:4c:ce:e9:
         68:53:7c:43:f7:61:12:e5:7b:e2:70:9c:b8:eb:98:b7:85:ed:
         d7:0f:65:c6:61:86:22:4f:47:a9:09:a9:fc:08:60:bc:27:17:
         f9:91:68:6a:ca:3d:d9:d5:77:ab:9f:e2:3e:4b:02:49:84:08:
         5a:43:85:cb:f5:10:13:93:c4:36:fa:7c:ac:95:a7:b1:3e:6b:
         b4:9d:1b:37:2d:2d:59:b5:22:60:f2:94:18:2b:db:87:5e:76:
         dc:b4:3b:0e:dd:32:6f:a7:bf:60:ab:96:a1:87:13:d8:c4:fe:
         93:57:23:07:a5:80:14:15:48:84:fb:ec:18:5b:20:10:06:31:
         66:9d:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org