Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bIBagXfUFfP3yDmnL-cEGcnFmD4.roa
File:                     bIBagXfUFfP3yDmnL-cEGcnFmD4.roa (raw, json)
Hash identifier:          vLlFC/p1vPidr/xrHZ+vZ0maCgc0/VRM3aWFs4jSTPQ=
Subject key identifier:   6C:80:5A:81:77:D4:15:F3:F7:C8:39:A7:2F:E7:04:19:C9:C5:98:3E
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1ADAB0C7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bIBagXfUFfP3yDmnL-cEGcnFmD4.roa
Signing time:             Thu 28 Apr 2022 08:57:42 +0000
ROA not before:           Thu 28 Apr 2022 08:57:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205859
IP address blocks:        193.231.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450539719 (0x1adab0c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Apr 28 08:57:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c805a8177d415f3f7c839a72fe70419c9c5983e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:4e:0c:e0:c4:18:e6:09:11:f1:35:92:fb:
                    46:8d:c3:7e:d5:e3:ee:f1:b0:e1:0a:27:4d:f2:7b:
                    33:73:9d:73:1e:fd:da:4d:14:c0:16:ec:60:87:77:
                    28:34:11:ae:31:f4:90:6e:eb:77:5e:1f:f9:ce:4a:
                    f5:d8:e8:43:9a:a7:07:4a:45:18:36:78:fd:c2:3d:
                    8c:e5:7e:66:72:0d:15:35:f4:b4:dc:82:b6:6e:02:
                    d0:7a:17:5c:95:65:9e:02:75:54:ec:a3:5b:91:cf:
                    c3:0d:53:d3:c8:79:e2:b0:87:89:8c:f1:45:27:1c:
                    44:61:fd:9f:a0:fb:e3:5f:48:32:fe:c2:2c:1b:7a:
                    90:3b:83:73:69:c2:c1:96:68:06:3c:69:3e:43:f4:
                    36:ec:1b:71:f1:66:a2:96:e8:28:0b:6b:08:dc:5c:
                    dd:61:88:ab:1e:28:7a:a7:20:95:8d:04:56:33:42:
                    f1:78:1d:8c:85:8f:db:e0:dc:61:86:b3:61:a8:12:
                    db:49:1f:9a:b9:da:42:23:a1:ff:cb:d0:d3:62:af:
                    ec:12:c8:8d:3b:7d:9f:0e:e9:a1:a0:75:35:de:fe:
                    39:fb:c6:91:22:76:06:e4:71:e3:e1:a3:9f:19:c5:
                    63:65:32:dc:40:11:70:93:cf:46:dd:47:b0:01:a4:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:80:5A:81:77:D4:15:F3:F7:C8:39:A7:2F:E7:04:19:C9:C5:98:3E
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bIBagXfUFfP3yDmnL-cEGcnFmD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.231.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:95:c6:e1:3f:3a:18:fa:4d:9b:7d:c4:96:ce:16:26:a4:
         f4:74:90:0e:4c:0f:af:d9:61:f7:5d:bc:c5:4c:cd:47:6f:cf:
         f9:49:72:34:54:4f:8f:a0:f9:39:c1:b4:68:e1:ed:13:af:1d:
         c8:4d:40:ad:72:6a:81:0f:f0:70:93:ff:2b:14:d1:ee:11:64:
         46:82:95:a2:5e:e5:af:0f:8d:4f:9b:15:29:dd:3e:9d:80:86:
         8e:29:b1:f8:19:d3:22:ec:79:2e:9b:db:02:0b:fe:22:88:3a:
         f7:87:bf:75:f6:15:52:d9:a6:d2:8e:71:d8:73:90:83:80:ce:
         8c:50:61:b6:8e:0b:4b:7d:ec:15:a1:06:88:54:d5:3a:20:70:
         6f:a5:2a:09:ba:de:69:b9:3e:b2:76:90:56:d3:45:7b:31:39:
         9c:dd:98:27:31:55:03:4b:b5:35:5f:f5:79:af:d7:40:dc:3b:
         e4:3a:61:ec:50:de:c3:44:47:58:31:c1:c1:da:a7:25:eb:10:
         54:ca:7b:76:da:87:2c:7a:17:01:1e:ab:6c:39:5e:ff:63:de:
         a1:62:eb:d7:8e:2d:53:82:47:dc:cb:83:e3:82:dd:70:d4:b5:
         51:e3:b9:ca:69:cb:19:23:a6:97:a4:db:52:2b:81:ed:f8:9c:
         c2:90:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org