Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa
File:                     eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa (raw, json)
Hash identifier:          IEnubwb/VjkUs3ooNN1q4pTgD3QhchK7RTJtI36AVQU=
Subject key identifier:   78:83:23:FC:AF:0E:3D:B2:82:49:87:2C:52:95:C4:9C:52:CC:D7:0E
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01852AD9F7F029E12E4A7DA3FCA9A928215E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa
Signing time:             Mon 19 Dec 2022 14:46:45 +0000
ROA not before:           Mon 19 Dec 2022 14:46:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212166
IP address blocks:        193.30.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:d9:f7:f0:29:e1:2e:4a:7d:a3:fc:a9:a9:28:21:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Dec 19 14:46:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=788323fcaf0e3db28249872c5295c49c52ccd70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:04:bf:e2:f5:55:62:92:64:e6:8f:00:f6:
                    a6:d7:e8:8a:f6:18:d9:8d:29:65:85:af:8a:d5:27:
                    07:7e:d6:dd:e1:cb:9e:c8:b5:28:f8:5b:d5:44:48:
                    1e:54:d8:70:56:c1:a0:21:49:90:20:d3:27:37:01:
                    f4:ec:6a:a9:31:ef:1e:c7:f7:ee:a8:58:3d:4d:d0:
                    05:26:aa:a4:00:f9:0b:b8:41:0e:78:51:85:48:cc:
                    56:ee:f0:a7:42:c0:5a:6e:88:9c:ec:90:51:15:dc:
                    64:22:01:d1:1d:1b:6e:8e:77:9c:78:d3:40:40:54:
                    64:9b:a1:d4:81:54:94:52:18:2d:0c:a5:bd:66:cf:
                    01:96:43:eb:89:b4:61:74:5b:d3:c9:b1:a5:f1:00:
                    b1:d2:12:9d:5a:38:2f:f6:51:f1:49:59:61:05:c6:
                    6e:84:ae:29:8f:0f:e3:25:5c:78:c0:89:f7:10:df:
                    c3:b9:f8:8e:a3:ad:f7:9b:5c:1c:cd:9d:86:c1:a6:
                    87:7a:68:8d:5d:b0:7b:00:96:d3:92:73:5c:0b:bd:
                    2c:61:13:a5:9f:91:87:a6:b2:48:b2:a6:ee:a7:4d:
                    53:af:6b:c8:48:30:91:cf:4a:c3:1d:3e:e5:81:69:
                    25:8b:24:57:c1:d6:97:13:31:6c:e5:cc:a1:14:db:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:83:23:FC:AF:0E:3D:B2:82:49:87:2C:52:95:C4:9C:52:CC:D7:0E
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a9:5c:42:df:67:8a:2e:54:21:1d:5f:cd:fb:49:30:af:02:
         c6:5e:ae:90:dc:63:f0:87:b8:30:75:d3:22:04:11:0b:db:a1:
         e9:1c:f9:81:4f:c8:81:d5:56:7e:c2:41:20:fa:b2:ec:86:a7:
         e7:4c:c7:51:4f:76:42:90:c5:e8:6d:4e:4d:1a:b8:15:0f:9e:
         1f:16:55:0d:ff:f7:c4:7b:8b:c5:87:9c:0a:41:58:19:18:5c:
         52:ff:1c:30:21:fd:4c:59:49:1e:43:85:60:1d:30:f8:af:d8:
         74:1d:93:41:81:e5:d3:2e:a8:47:8a:4a:fc:24:05:4a:20:43:
         c0:1b:dd:5e:65:15:26:91:2a:1c:0c:87:43:33:ef:fc:ce:fb:
         18:c2:70:e6:1b:d2:51:c8:94:22:ce:24:8b:88:1b:ea:8d:90:
         01:18:17:45:7c:e2:8c:73:96:ad:f7:a4:e9:0f:93:c7:70:1c:
         e8:1c:14:19:32:5c:13:15:4d:95:c6:0d:36:ff:fd:a3:cf:ec:
         a2:41:a4:34:fc:77:7e:1d:22:e7:ce:e4:95:a6:44:b9:af:d8:
         6f:8d:2c:8d:c0:23:bf:a2:93:46:72:02:45:da:a1:ee:0e:6a:
         55:8a:e1:f6:c9:f6:dc:b3:1f:15:94:08:1e:1b:32:df:4c:09:
         2c:cb:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:48 2023 by rpki-client on console-fra.rpki-client.org