Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FeBjpyTNfBTCV0vPlwT-5fpCYE0.roa
File:                     FeBjpyTNfBTCV0vPlwT-5fpCYE0.roa (raw, json)
Hash identifier:          88NeiqLingz1D+d7ncYKc5OLB4HfcCWBK9zrS7sVhjQ=
Subject key identifier:   15:E0:63:A7:24:CD:7C:14:C2:57:4B:CF:97:04:FE:E5:FA:42:60:4D
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       19E92E07
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FeBjpyTNfBTCV0vPlwT-5fpCYE0.roa
Signing time:             Fri 18 Feb 2022 12:55:31 +0000
ROA not before:           Fri 18 Feb 2022 12:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3333
IP address blocks:        193.230.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434712071 (0x19e92e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 18 12:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15e063a724cd7c14c2574bcf9704fee5fa42604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:b2:26:fe:a6:b6:a4:a6:7a:f9:95:70:94:
                    f3:1d:0c:2d:89:bc:28:61:20:5f:c5:81:f7:ab:2d:
                    1e:84:96:a3:f6:07:0b:a2:62:ab:75:f6:cc:ea:14:
                    9b:96:b4:34:95:8a:e7:f5:1b:f4:00:0c:34:e1:c6:
                    8d:d2:a3:c2:00:1d:ab:da:b2:4e:87:b9:cb:a9:9b:
                    59:05:c8:a3:32:32:13:5a:eb:3e:4a:d3:df:19:93:
                    b9:50:8d:75:28:88:d4:b9:18:7a:ca:fc:78:10:43:
                    0f:92:94:6d:f2:5e:87:6d:dd:15:bb:b9:1f:fd:f8:
                    a4:60:70:e3:d4:dd:f0:cd:c8:a2:e4:bc:09:80:c6:
                    a3:c9:ef:8d:48:ff:e8:f4:b9:a6:8c:13:13:bc:34:
                    5c:a2:78:c5:5a:0b:e1:db:90:39:98:30:c2:9c:07:
                    61:bf:a7:84:aa:27:41:9e:c7:b3:08:57:b5:07:53:
                    8d:42:29:bc:f5:91:31:49:b6:43:2e:9b:5f:55:e1:
                    73:fe:67:32:3c:78:2b:d3:60:87:23:e5:64:0d:4e:
                    b9:2c:88:05:de:fe:41:07:92:b0:09:df:73:01:23:
                    cf:e7:18:7f:d2:50:b5:dd:2d:28:0c:d8:83:20:77:
                    9e:43:d6:12:0c:1b:e7:d4:8d:52:5d:1a:ba:e4:cc:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E0:63:A7:24:CD:7C:14:C2:57:4B:CF:97:04:FE:E5:FA:42:60:4D
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FeBjpyTNfBTCV0vPlwT-5fpCYE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.230.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:21:54:89:7d:41:f0:68:86:2d:7e:80:4e:ec:b4:37:74:2b:
         23:9b:e7:95:bf:45:da:29:f8:55:1b:59:2c:80:a8:a6:2f:84:
         6b:48:76:40:03:15:b8:22:35:eb:85:99:03:38:95:c4:e2:77:
         06:12:ab:c7:25:ff:6c:e1:a1:a8:b6:38:32:a9:b3:87:1d:5b:
         3e:b5:72:63:b8:2b:44:52:ec:cc:47:91:e9:15:26:00:bf:34:
         d4:a7:56:27:ca:72:e9:4c:3d:e5:65:a4:ce:3c:da:8d:26:40:
         99:30:77:ac:96:63:06:45:2c:9e:0e:16:37:df:bd:93:d7:83:
         4d:51:13:12:05:34:92:ff:87:e5:f7:29:e7:9d:b1:b4:b5:f5:
         6d:c7:02:3e:be:c6:00:8a:31:30:ad:a2:33:81:40:e7:d6:01:
         84:da:0c:67:ca:2c:35:ab:67:42:84:82:c3:ec:00:76:99:4c:
         ab:7d:f3:2b:d8:2d:5e:5f:15:96:64:89:2d:9a:d2:dd:46:cd:
         02:b3:b0:9b:1c:e8:c5:72:e7:6a:68:3b:80:f4:ef:9f:5a:aa:
         f7:09:e6:d5:15:9b:4a:b2:21:1a:ea:0d:48:e9:a1:7a:e2:e7:
         8e:3c:9e:71:e4:76:9b:0d:a4:70:51:6a:3c:81:c2:1d:73:79:
         0a:0b:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org