Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/X7IZRT47HdkHq02DNVxPXk67aL8.roa
File:                     X7IZRT47HdkHq02DNVxPXk67aL8.roa (raw, json)
Hash identifier:          APeQGgsx04qEPN3IvwlfNr8/TAkdlJC/lTAywXKV2kI=
Subject key identifier:   5F:B2:19:45:3E:3B:1D:D9:07:AB:4D:83:35:5C:4F:5E:4E:BB:68:BF
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       030E1E8D
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/X7IZRT47HdkHq02DNVxPXk67aL8.roa
Signing time:             Sat 01 Jan 2022 15:07:11 +0000
ROA not before:           Sat 01 Jan 2022 15:07:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399471
IP address blocks:        185.126.34.0/24 maxlen: 24
                          185.28.37.0/24 maxlen: 24
                          185.28.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51256973 (0x30e1e8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Jan  1 15:07:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fb219453e3b1dd907ab4d83355c4f5e4ebb68bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:1e:70:e8:fc:c5:06:66:59:80:e9:a2:e8:
                    e5:d1:67:cb:94:1c:30:00:3f:4f:a0:8b:a5:1c:e9:
                    76:be:0d:8b:e2:a7:ae:55:79:d5:86:0f:a2:c7:5c:
                    61:68:19:f9:72:85:ad:62:e3:af:67:0e:3f:81:2c:
                    6a:07:53:1f:68:d6:2d:18:83:a1:1a:97:ba:dd:da:
                    10:8d:58:c3:c4:f8:2e:e4:af:13:8f:17:4f:d9:1c:
                    91:21:a5:d1:d8:14:84:79:9b:28:be:66:af:79:d8:
                    02:ce:e9:d1:c8:5c:34:71:90:ab:7e:65:fb:05:0c:
                    c5:73:a6:55:ea:cf:6c:3c:4e:1c:27:2c:55:d7:ca:
                    e5:be:8c:9b:a1:04:b5:a6:46:f7:b2:3d:3a:11:83:
                    5b:e6:60:a2:22:07:94:6b:51:c4:da:4f:85:fa:8f:
                    9c:9e:38:30:ed:9c:d4:d0:33:38:ba:11:55:cb:fb:
                    d8:5a:6c:08:f9:0a:28:d1:18:f7:e5:d8:83:51:3e:
                    0a:fc:0b:1c:14:fc:55:66:0f:da:c3:48:ea:f6:b9:
                    66:4d:d4:77:e6:77:68:9a:2e:2b:56:b8:54:ea:1f:
                    1e:f1:8d:f4:5b:19:d6:a5:29:96:c9:e5:3f:ca:39:
                    82:ff:1a:f7:53:c8:2e:4e:b0:79:5e:6b:ec:b3:58:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B2:19:45:3E:3B:1D:D9:07:AB:4D:83:35:5C:4F:5E:4E:BB:68:BF
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/X7IZRT47HdkHq02DNVxPXk67aL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.28.37.0/24
                  185.28.39.0/24
                  185.126.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:f8:5c:af:e7:bd:9a:9c:e1:07:66:f3:ee:c4:b1:19:71:
         ef:5a:19:de:73:fb:40:46:0e:3c:48:23:89:8c:65:2b:24:ab:
         1c:b3:2d:b0:76:9b:fc:ac:77:26:66:54:2d:90:07:44:ea:13:
         0c:54:01:80:3a:9d:e3:47:7f:eb:ce:9e:7f:14:74:ea:36:1c:
         a7:cc:f6:b8:e9:30:84:5f:97:ee:ba:1b:53:59:83:f7:62:12:
         bd:87:d1:82:dc:8b:eb:c1:05:e9:d2:e0:f4:6d:d9:79:53:2d:
         b7:9d:f9:f6:e0:7e:0a:0d:e9:e9:bf:2c:b0:e1:cd:22:d1:19:
         38:14:28:12:7e:52:c9:3a:bb:fd:52:07:fd:15:62:56:2d:bc:
         83:34:9c:a5:9f:2f:e4:21:49:c5:1a:c4:2c:4b:b5:0b:09:2c:
         fe:42:89:6e:49:d9:ec:9d:2c:55:ac:29:02:56:6b:47:0d:dc:
         c7:52:95:bd:0e:d2:c1:97:31:6b:c7:bf:62:89:16:50:9b:3e:
         4f:c3:51:cb:9b:a8:96:41:e5:b9:a4:79:09:be:5a:57:a8:fa:
         53:c2:b4:7f:e4:21:e1:30:79:c1:b5:30:35:af:60:8a:31:4b:
         2c:54:f7:07:78:8e:8e:6b:de:4c:59:23:9b:f8:11:1f:33:2f:
         93:f6:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:32 2023 by rpki-client on console-ams.rpki-client.org