Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/dB1jMdLEKz6xRDkVcvI8EJ3Brww.roa
File:                     dB1jMdLEKz6xRDkVcvI8EJ3Brww.roa (raw, json)
Hash identifier:          MJ0I502sjybhxXX9NBF7WCg8fkbQrFyn+5WoJJH0ekk=
Subject key identifier:   74:1D:63:31:D2:C4:2B:3E:B1:44:39:15:72:F2:3C:10:9D:C1:AF:0C
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       034A93F4
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/dB1jMdLEKz6xRDkVcvI8EJ3Brww.roa
Signing time:             Tue 21 Jun 2022 12:52:45 +0000
ROA not before:           Tue 21 Jun 2022 12:52:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        141.98.240.0/24 maxlen: 24
                          141.98.241.0/24 maxlen: 24
                          193.31.72.0/24 maxlen: 24
                          193.31.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55219188 (0x34a93f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jun 21 12:52:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=741d6331d2c42b3eb144391572f23c109dc1af0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:d6:bd:9e:07:d3:9d:10:62:fe:82:ba:68:
                    9b:a6:cb:a6:37:21:4c:af:65:b1:fa:ab:df:fe:04:
                    dc:b3:18:92:b1:0d:02:f1:d1:b8:a2:1a:0c:fe:5d:
                    e2:b7:20:2f:b7:f9:32:aa:d5:2a:a9:2f:b5:0d:3b:
                    fe:74:1a:72:8c:70:4f:10:9e:7c:89:12:f1:c8:3e:
                    92:f6:6e:d5:20:dd:10:2b:26:d4:e7:86:ea:4f:49:
                    91:64:53:e6:21:f4:22:84:da:0d:fc:5e:ed:e3:de:
                    60:63:cd:ff:a5:79:16:05:8c:80:39:e2:e5:ef:1a:
                    7b:80:81:bb:dd:d1:01:c2:05:83:f5:50:84:56:80:
                    91:7b:3a:d1:95:60:1c:d3:64:8d:b2:95:ac:bc:98:
                    11:0e:9b:0c:5b:ee:a6:70:2f:a0:f3:85:0e:ea:9a:
                    df:88:b0:23:bb:f7:a8:e5:f3:3f:e8:c6:98:a5:8c:
                    9a:40:36:b7:a1:b4:54:50:ba:c7:2d:1c:78:03:0a:
                    e3:96:73:9a:2c:e1:f7:07:de:fb:a3:c2:e6:75:c6:
                    39:34:a7:01:c4:8d:1b:81:2a:b3:ce:90:91:2e:71:
                    ae:7c:87:89:ff:30:fe:67:6a:9b:bc:cb:88:b3:fe:
                    ce:3b:62:df:00:f9:bc:60:4a:ed:c7:69:e9:93:8f:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1D:63:31:D2:C4:2B:3E:B1:44:39:15:72:F2:3C:10:9D:C1:AF:0C
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/dB1jMdLEKz6xRDkVcvI8EJ3Brww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.240.0/23
                  193.31.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:75:4f:47:39:36:3f:26:58:b5:e6:a3:f4:ef:b8:12:c4:2f:
         a3:89:ad:b6:be:74:89:88:92:b0:e0:81:61:ca:9b:8e:79:93:
         0f:e8:e0:58:83:50:88:8f:e4:4a:98:69:60:31:8f:72:44:73:
         74:0d:6c:f1:b9:90:fd:27:45:4f:02:8a:42:cf:1d:0a:ab:06:
         4b:ae:8e:83:7e:6a:b6:b2:63:68:eb:76:27:d6:6e:7a:e8:9f:
         49:37:93:ed:af:7f:6b:2c:c9:c1:b2:2e:68:7b:95:43:ee:68:
         ba:24:dd:5f:36:7f:39:50:98:c1:74:2b:27:c0:e5:d1:9f:e7:
         e3:26:3c:b4:2a:75:50:4c:39:95:b0:a9:fa:db:56:2f:07:89:
         d2:0a:ae:22:e2:be:05:74:75:45:bc:6e:af:85:b9:8f:a1:2a:
         55:b0:e4:50:17:ad:38:81:c1:1b:d2:09:94:9d:67:c9:43:4b:
         42:20:41:1e:28:c0:38:86:62:ac:7e:94:ec:04:2f:1e:43:12:
         e9:86:c6:01:3c:30:23:07:bf:a0:b7:5d:5f:50:06:a1:6c:5a:
         a1:a2:6b:3f:06:89:f0:ad:62:5e:1b:b8:a8:26:e8:1f:43:d9:
         e6:13:ac:85:94:a6:38:3f:27:dd:a3:6d:3a:2c:43:ca:13:59:
         b1:8b:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org