Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l8evfXPxUZEL9gjXP4Us6P8_I6A.roa
File:                     l8evfXPxUZEL9gjXP4Us6P8_I6A.roa (raw, json)
Hash identifier:          ifI5JGlVHhT18ViQcK6U6+oZFJeRjyNZdtx8ZAFQN84=
Subject key identifier:   97:C7:AF:7D:73:F1:51:91:0B:F6:08:D7:3F:85:2C:E8:FF:3F:23:A0
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       193393B3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l8evfXPxUZEL9gjXP4Us6P8_I6A.roa
Signing time:             Sat 01 Jan 2022 11:57:10 +0000
ROA not before:           Sat 01 Jan 2022 11:57:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50252
IP address blocks:        193.226.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422810547 (0x193393b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 11:57:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97c7af7d73f151910bf608d73f852ce8ff3f23a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:c8:28:e8:bd:b9:66:d0:86:59:dc:df:fc:
                    01:1e:06:11:53:7c:1c:68:d7:12:eb:ab:f0:7a:b6:
                    9c:04:55:29:4e:78:0e:fc:6d:a8:b4:b4:45:a8:0b:
                    eb:8c:76:40:1d:51:80:b8:93:87:c7:0c:b6:e1:d9:
                    3e:d2:12:79:68:f4:b3:3f:03:23:29:e4:88:b3:50:
                    14:1b:6d:0b:24:8c:d3:4b:23:9d:a0:fb:b4:e5:20:
                    a3:11:13:c7:7a:6b:a5:f9:02:b1:7c:a4:c1:96:55:
                    a8:8d:ca:ce:d8:2a:7e:4d:33:1f:d2:b8:c6:f5:6e:
                    2c:53:56:97:e6:60:10:c3:82:70:ba:c6:ed:c7:56:
                    5b:62:7e:51:93:2f:04:7e:46:df:33:8d:09:e9:47:
                    e0:21:ab:c5:78:d7:d2:37:14:41:98:24:03:16:2a:
                    ee:9d:84:c3:27:fa:4f:b4:37:ac:e0:81:a9:5d:21:
                    bf:ee:a8:bf:ed:32:5f:b7:26:10:e3:7f:a7:72:d2:
                    bd:2d:36:d0:c8:7f:cd:99:78:8e:96:9d:ec:46:f9:
                    03:d3:f5:29:ff:7d:8a:bc:20:47:ac:2b:5c:25:44:
                    77:00:f8:33:03:50:c4:aa:40:f0:29:9c:34:d9:8e:
                    fd:75:f5:f8:84:fb:57:22:e4:ae:34:1b:c3:97:38:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:AF:7D:73:F1:51:91:0B:F6:08:D7:3F:85:2C:E8:FF:3F:23:A0
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l8evfXPxUZEL9gjXP4Us6P8_I6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.226.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:60:17:1b:01:15:9d:9f:b8:0e:a8:e8:f9:6a:eb:0a:4c:
         1e:71:e7:6f:a3:1c:b1:27:56:72:92:ab:a1:25:5c:1a:0a:c8:
         5e:1e:68:16:5b:71:52:30:fe:c4:32:60:81:34:d2:5a:19:c5:
         5e:f5:e8:13:3b:a5:26:aa:f1:05:b1:9a:4f:27:14:2b:55:a8:
         01:85:20:6b:9b:81:d6:e0:6e:16:a5:c5:40:ec:7e:0f:e6:77:
         a4:36:e7:00:83:1f:3f:ec:dc:35:97:0a:57:73:71:8e:ba:2c:
         1c:93:da:be:48:2c:f7:79:6f:d9:ea:8b:97:33:03:1a:4a:7c:
         76:8f:41:56:81:77:eb:df:ca:23:41:69:3c:22:46:1c:25:f7:
         69:63:c4:e8:eb:3f:3e:c4:23:f1:31:94:f6:b0:09:43:7b:d6:
         36:05:43:b2:32:d2:ac:c4:0a:5a:2d:e8:01:d2:f3:60:6d:aa:
         8c:f3:67:59:eb:90:2c:80:ec:02:9f:18:0d:98:fd:0b:c3:d6:
         e0:fc:09:ab:78:22:30:a4:5d:e9:7a:27:e3:05:a5:b1:00:74:
         5a:08:51:92:a5:51:fd:9b:a9:57:a6:f5:2e:31:65:4a:4d:e6:
         bc:6b:c0:b8:5f:03:48:81:48:f7:23:7a:15:fb:f3:3f:ac:ed:
         bc:f6:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org