Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Gi7iko_m8IDwbfgnOkosr9T0kB8.roa
File:                     Gi7iko_m8IDwbfgnOkosr9T0kB8.roa (raw, json)
Hash identifier:          yidTiol3/hGuz0/FnZdIpYJZipEOyCkbHO5fLZ5v1pY=
Subject key identifier:   1A:2E:E2:92:8F:E6:F0:80:F0:6D:F8:27:3A:4A:2C:AF:D4:F4:90:1F
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       155ECAD9
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Gi7iko_m8IDwbfgnOkosr9T0kB8.roa
Signing time:             Sat 01 Jan 2022 08:04:50 +0000
ROA not before:           Sat 01 Jan 2022 08:04:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        185.92.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358533849 (0x155ecad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Jan  1 08:04:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a2ee2928fe6f080f06df8273a4a2cafd4f4901f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:54:8e:fb:35:a7:6a:5d:a1:49:19:5d:95:
                    87:75:bd:5b:36:1a:ae:2c:c5:13:49:05:24:75:ef:
                    6d:63:be:ae:20:01:85:ed:d7:d1:c0:bd:c2:9f:15:
                    4a:4b:cc:db:4a:85:a0:09:41:74:2a:9c:5b:55:b0:
                    73:f3:1c:6b:82:99:5e:e3:38:96:6e:44:93:eb:fe:
                    55:c3:f3:76:25:79:d6:74:1e:e7:72:37:13:0c:4f:
                    de:95:66:97:88:97:c1:7e:67:41:c0:58:10:d3:15:
                    bc:a5:74:41:03:2e:06:11:3d:4c:10:58:35:e1:f0:
                    64:fe:23:88:ab:17:63:b2:98:94:72:e7:58:08:6b:
                    4c:e8:c6:48:da:1a:50:de:b8:06:0c:21:c5:a5:0b:
                    e0:b7:85:a7:57:dd:7a:57:2d:d8:08:88:24:a4:81:
                    b8:f6:95:4b:6d:a2:e8:f3:64:cd:11:aa:a0:f4:6f:
                    08:5f:54:f3:7a:e4:23:65:98:ca:95:b5:1f:17:ab:
                    57:c2:af:00:19:07:da:4b:9e:54:24:21:75:b5:44:
                    99:44:9f:2a:e6:3b:a2:49:d1:c2:66:09:12:fc:d1:
                    5a:55:ee:93:7d:40:9c:47:e9:19:6a:a2:22:89:c1:
                    c6:04:82:85:d7:66:32:ef:0b:87:53:62:ef:55:e4:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:E2:92:8F:E6:F0:80:F0:6D:F8:27:3A:4A:2C:AF:D4:F4:90:1F
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Gi7iko_m8IDwbfgnOkosr9T0kB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4e:46:21:fc:48:27:30:26:2c:94:7b:bd:40:64:0a:61:af:
         df:4a:32:8d:82:6e:90:0b:7e:5b:19:04:42:35:4b:8e:ba:1e:
         c2:ff:80:d6:b0:55:4b:96:2c:f0:15:df:f8:c4:8b:ee:7c:49:
         11:8a:95:97:24:19:ac:49:d4:54:d0:32:05:a0:2a:f0:89:83:
         ae:c7:9c:7d:ee:b2:d3:7c:21:41:75:dc:47:04:60:12:ce:50:
         b4:65:bd:3b:5f:49:98:f7:a5:35:77:b9:e1:a8:3c:b9:bd:cc:
         80:c3:cf:b0:74:a1:52:68:56:7b:ef:19:e9:95:c0:53:a3:c3:
         99:e7:6f:d1:7a:f0:f0:a0:43:44:60:69:fe:1b:f1:c2:56:bd:
         31:f6:6c:00:02:74:ea:cd:5e:80:d5:24:53:32:d3:88:56:a5:
         80:a5:07:b3:ad:b8:7b:27:25:3a:4d:d2:8f:b3:c5:18:cf:73:
         66:93:d5:13:ee:ad:b7:51:52:6c:0d:f0:0b:db:8d:4e:37:33:
         42:3f:b2:ec:a0:a6:bc:f1:ce:d5:bd:1f:6a:0c:84:20:8b:d2:
         af:70:88:ea:b0:a7:52:b6:ac:cf:a5:35:f7:6e:7d:b1:f5:c5:
         c3:0a:dd:19:d3:6f:42:d5:e5:99:25:33:04:ce:c1:e1:a0:12:
         f4:38:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:26 2023 by rpki-client on console-fra.rpki-client.org