Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eqmRHcfNsRV7JnSDOOp0ajXXNKI.roa
File:                     eqmRHcfNsRV7JnSDOOp0ajXXNKI.roa (raw, json)
Hash identifier:          VhctnkY7w4BfEbs1QkSy76evv0klh7882Cf+XGdbWhU=
Subject key identifier:   7A:A9:91:1D:C7:CD:B1:15:7B:26:74:83:38:EA:74:6A:35:D7:34:A2
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       0505A6DD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eqmRHcfNsRV7JnSDOOp0ajXXNKI.roa
Signing time:             Mon 14 Mar 2022 15:22:17 +0000
ROA not before:           Mon 14 Mar 2022 15:22:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.233.198.0/23 maxlen: 23
                          193.233.201.0/24 maxlen: 24
                          193.233.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84256477 (0x505a6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Mar 14 15:22:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7aa9911dc7cdb1157b26748338ea746a35d734a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:eb:56:46:42:71:96:68:80:19:6c:5f:7a:
                    4c:b1:4f:c0:01:72:ca:94:01:b7:98:6f:b8:74:97:
                    1e:56:bf:0e:ac:3c:0d:7c:0f:ce:61:4a:eb:7f:23:
                    cf:03:06:7c:3c:be:b8:f6:96:f3:9e:cf:c9:08:c3:
                    f5:05:5e:da:f6:5c:88:95:ca:e6:24:28:f1:00:ac:
                    f1:37:56:a8:8d:21:70:44:a4:06:a9:65:1a:2c:04:
                    92:61:33:93:6d:dd:ae:7d:ec:a5:94:7c:f8:2b:3f:
                    2c:5b:ab:3c:7a:49:dc:c0:27:b0:85:3b:0d:42:29:
                    25:25:57:c0:0e:6a:94:d7:dd:80:5d:12:9f:1d:33:
                    a5:54:31:ed:71:52:55:03:77:54:b6:57:13:a5:ed:
                    11:1b:bd:7b:4f:31:08:dc:41:fc:82:8f:72:b0:1c:
                    64:6f:b0:9b:05:1b:30:fc:52:ba:c5:0f:df:4f:4c:
                    bc:95:0a:2c:2f:52:b7:a9:42:60:1f:50:29:df:66:
                    7f:60:86:fd:83:fd:1f:a6:85:04:d3:ae:a8:38:a2:
                    27:ba:a0:e1:35:bc:0f:e5:cf:ea:f8:02:43:dd:fd:
                    88:6d:67:de:e8:2a:c9:b2:d8:e7:6f:7e:c3:88:32:
                    db:95:14:2c:c6:a8:3e:1a:ff:06:40:ff:3c:e5:52:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A9:91:1D:C7:CD:B1:15:7B:26:74:83:38:EA:74:6A:35:D7:34:A2
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eqmRHcfNsRV7JnSDOOp0ajXXNKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.198.0/23
                  193.233.201.0/24
                  193.233.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:9b:0c:20:6c:a5:8a:2a:0e:a3:db:bb:21:26:1c:95:4a:
         e8:a0:c7:fb:7e:19:f1:21:a0:f6:51:42:e2:a8:7f:43:83:d4:
         49:35:e4:b9:64:56:31:7d:35:44:36:8c:a0:7c:4a:f5:b0:d6:
         ba:fb:00:9e:99:3c:a9:18:19:ca:41:65:76:59:39:d7:87:76:
         9d:d6:dc:15:1a:61:5d:dc:d4:e9:9b:67:f3:d9:2c:67:d4:d0:
         42:1f:b9:2e:f0:3b:31:83:bb:ae:89:55:de:7b:10:2f:7b:65:
         8f:88:d2:d3:6b:ce:88:8c:10:54:6b:25:b2:1b:a9:ec:17:ca:
         de:37:5d:c7:5f:60:61:b7:65:77:5e:2c:a5:2e:9a:fb:99:c7:
         88:ea:ed:05:dd:4a:12:77:21:c6:5d:00:2d:5a:a0:b5:7b:14:
         08:df:ad:5e:63:37:f9:24:ff:34:33:ca:96:89:7f:b3:f8:d4:
         a1:31:30:13:79:ab:f3:7f:12:03:d8:a2:cd:53:67:c6:c9:ec:
         f5:40:99:41:c3:a5:3f:fc:53:d5:1b:af:41:be:9a:36:e7:e4:
         72:b1:06:6a:2c:a5:0f:1f:29:6f:81:00:2b:08:9e:f7:83:20:
         7b:90:dc:e0:08:6a:5c:9d:4d:a5:d5:46:44:67:89:b9:a6:47:
         c9:4c:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org