Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7P6Do4nEar_9KUD5D0OXAFiSgms.roa
File:                     7P6Do4nEar_9KUD5D0OXAFiSgms.roa (raw, json)
Hash identifier:          U2S8uSiWK2i+v/NUZcpP7Bqt0mazv/JAw3x7dLPP3+c=
Subject key identifier:   EC:FE:83:A3:89:C4:6A:BF:FD:29:40:F9:0F:43:97:00:58:92:82:6B
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1B83C7B9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7P6Do4nEar_9KUD5D0OXAFiSgms.roa
Signing time:             Wed 08 Jun 2022 11:02:06 +0000
ROA not before:           Wed 08 Jun 2022 11:02:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13059
IP address blocks:        193.231.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461621177 (0x1b83c7b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jun  8 11:02:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ecfe83a389c46abffd2940f90f4397005892826b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:86:96:e2:7f:ef:49:ea:13:3e:1c:64:88:
                    b2:3e:f1:81:2d:38:ff:ee:bf:1b:cd:5c:ff:df:a6:
                    43:9d:00:1f:6f:9f:fd:49:45:88:de:c2:bd:ff:38:
                    d4:a7:4a:f8:7b:72:96:59:dd:51:eb:b1:8c:10:2a:
                    b2:36:4b:4c:b6:21:7f:25:bf:40:cd:01:32:d3:a0:
                    0b:35:19:24:42:3a:1d:41:2e:d2:eb:c1:7d:79:07:
                    28:7a:d8:ef:14:8b:7c:0f:db:e1:7e:01:d7:40:30:
                    56:41:94:5d:ad:e3:71:ec:08:98:ea:17:af:a1:65:
                    5f:bd:24:07:74:06:19:f2:48:cb:b2:aa:51:ea:93:
                    a7:c2:84:89:02:4f:8c:31:d8:54:3e:ee:16:5c:e7:
                    6e:1b:d1:bb:b8:20:81:bd:05:91:45:01:c9:74:87:
                    46:2f:dd:19:06:16:f5:8f:d1:2a:84:08:90:84:f1:
                    2d:54:7f:ac:34:a9:3f:b4:e8:cb:09:18:20:22:03:
                    5b:ff:ca:22:52:dc:0a:4e:0b:7a:ca:2f:a5:e7:95:
                    33:2c:84:6a:8d:85:e0:d8:4e:b6:31:c1:19:70:63:
                    bf:85:a8:4a:92:49:71:d3:e5:8e:8a:36:1b:cd:6f:
                    77:ea:ce:ba:87:f1:b2:47:5b:db:c7:58:50:60:51:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FE:83:A3:89:C4:6A:BF:FD:29:40:F9:0F:43:97:00:58:92:82:6B
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7P6Do4nEar_9KUD5D0OXAFiSgms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.231.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:d2:f7:d7:f7:b8:29:78:fe:08:64:61:76:d1:71:4d:bd:
         97:30:a0:fe:79:7e:df:5a:1f:90:95:e8:63:68:8c:6f:d3:45:
         5f:1a:bb:68:44:8a:10:2d:e0:87:cc:69:58:db:b5:1b:1f:d8:
         c2:fd:3a:25:54:62:9b:b0:86:77:fb:1b:d7:b6:c8:2b:eb:e9:
         ce:bd:00:8b:3d:d1:6f:07:f9:a2:15:f9:06:2a:b3:5a:fc:71:
         bc:b3:52:8c:33:46:0b:dc:68:3c:7e:40:be:99:34:a7:0d:13:
         63:c8:e6:d9:92:e7:f9:ce:df:a7:5e:71:b5:50:0f:cb:e5:68:
         fd:bb:2a:5b:6c:ce:d1:29:c7:43:94:dd:95:d9:e5:d4:ba:93:
         19:d0:24:69:ac:3b:1b:97:44:6b:9c:96:64:d4:0c:74:7e:63:
         35:05:30:e4:34:d3:0a:ea:40:9a:30:6a:ce:59:b2:b7:06:df:
         a2:0d:c6:95:43:c6:2d:c5:9f:bd:ad:36:7e:03:40:71:61:98:
         9c:af:fc:5a:65:4e:e2:cb:9f:0f:ce:1d:0b:96:de:c4:78:79:
         c8:11:bc:e4:5e:d6:72:26:06:c3:ff:f2:ef:35:57:8e:b6:ad:
         b8:c0:55:2c:c0:b8:37:6e:df:4e:6e:f8:0f:9e:97:d9:3b:f7:
         2b:2f:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org