Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/I_RCmE2s22JOaWjYd9M9MjK_JUY.roa
File:                     I_RCmE2s22JOaWjYd9M9MjK_JUY.roa (raw, json)
Hash identifier:          ZLBVk62fYSWpNMe4cTETzW8L4GMlE67Wo2RzZnTCbGY=
Subject key identifier:   23:F4:42:98:4D:AC:DB:62:4E:69:68:D8:77:D3:3D:32:32:BF:25:46
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       01842E1F8EC7207AF158F05F8F0E4ECBEF0E
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/I_RCmE2s22JOaWjYd9M9MjK_JUY.roa
Signing time:             Mon 31 Oct 2022 12:58:50 +0000
ROA not before:           Mon 31 Oct 2022 12:58:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202965
IP address blocks:        178.175.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2e:1f:8e:c7:20:7a:f1:58:f0:5f:8f:0e:4e:cb:ef:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Oct 31 12:58:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23f442984dacdb624e6968d877d33d3232bf2546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:ee:5c:92:68:f9:33:46:76:59:14:90:d2:
                    2d:5e:c0:01:71:8d:f5:5b:e8:4e:5f:83:68:1d:e1:
                    40:d9:61:68:d0:8b:dc:2e:ff:73:fc:78:a3:c8:94:
                    22:e5:17:ec:3f:9e:1b:b2:bc:90:8c:1f:f0:29:22:
                    ea:7e:5d:8e:34:35:e5:c7:b5:f8:0e:6d:f8:70:c2:
                    76:78:b7:5b:fc:cd:4a:71:66:fc:48:f1:2c:0e:20:
                    bb:fc:f4:f0:74:11:ea:01:f9:d6:f8:75:9c:e9:3a:
                    69:61:24:80:77:e1:2a:08:15:6c:f8:81:56:1d:98:
                    68:72:d4:02:b0:d1:bf:f2:26:64:73:79:fb:81:dd:
                    db:80:92:2a:ca:95:31:5f:ea:32:ca:e3:17:c0:06:
                    66:68:f8:52:5f:aa:f9:5c:66:f8:93:31:92:70:80:
                    ee:54:d6:44:3a:24:d5:ef:d3:1b:21:25:50:d7:e0:
                    39:cf:97:62:81:cf:c5:3a:51:1f:43:92:e9:f2:dc:
                    6f:f6:ac:06:ac:f6:7d:30:a8:91:39:5e:d0:48:e7:
                    f9:b2:ce:cc:56:83:a4:5c:8d:cf:3c:7e:58:31:4c:
                    db:b0:18:a9:9b:63:3c:5d:1f:1b:af:2c:9d:b7:b4:
                    84:22:6b:4c:24:70:2d:a8:33:89:0b:a2:91:61:fd:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F4:42:98:4D:AC:DB:62:4E:69:68:D8:77:D3:3D:32:32:BF:25:46
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/I_RCmE2s22JOaWjYd9M9MjK_JUY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:bd:0e:7f:05:43:26:71:a7:24:9b:12:5e:55:6c:e7:0d:21:
         3e:07:54:2c:34:0a:cd:81:72:95:3f:94:a0:74:86:78:64:5c:
         44:91:31:fd:87:bb:f5:59:1d:3d:32:0a:f7:4c:41:e9:78:10:
         b5:4a:3b:db:09:5e:4f:9b:74:af:6f:56:8c:4b:cd:4e:2a:a1:
         91:38:f7:86:0a:bf:20:c5:80:65:90:a2:0e:53:de:06:07:cf:
         31:11:fc:95:d6:ce:58:5d:1b:a2:36:07:1d:03:4b:36:d7:04:
         89:54:71:db:c4:5b:a8:5e:62:6a:63:98:a1:77:f4:28:bd:17:
         72:0b:6c:69:d3:c1:c0:76:3d:01:07:e6:af:d1:16:b2:f6:97:
         b9:64:67:e3:0a:5e:5b:cb:bf:5e:18:0f:f7:6a:4a:60:3a:4b:
         5c:fb:1c:58:56:85:ef:81:b2:f0:24:0c:da:87:0a:0d:4d:54:
         d6:8d:54:06:38:ff:c5:4f:bb:1f:ef:bf:47:06:c1:fc:bd:b6:
         af:9a:6a:3d:6b:06:93:15:90:f3:39:ca:7d:c0:b0:da:24:78:
         86:0c:b8:14:79:2d:7c:b7:6d:0c:bf:15:81:10:86:7b:f9:4e:
         4a:c4:fd:90:1b:29:96:56:31:0e:2d:9e:f8:86:1d:54:a9:f4:
         90:41:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org