Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Ihjvwjd05JMnX-3t88LEuSNYOUQ.roa
File:                     Ihjvwjd05JMnX-3t88LEuSNYOUQ.roa (raw, json)
Hash identifier:          pfx4G26EgVNSrRDXOaj0P61opIItdqUJbFj04kyScF8=
Subject key identifier:   22:18:EF:C2:37:74:E4:93:27:5F:ED:ED:F3:C2:C4:B9:23:58:39:44
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       395F212A
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Ihjvwjd05JMnX-3t88LEuSNYOUQ.roa
Signing time:             Thu 12 May 2022 14:09:48 +0000
ROA not before:           Thu 12 May 2022 14:09:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206445
IP address blocks:        178.175.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962535722 (0x395f212a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: May 12 14:09:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2218efc23774e493275fededf3c2c4b923583944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:d3:46:df:c8:c2:11:45:4a:3e:90:53:e6:
                    bc:a9:b8:d7:86:16:ee:5a:4a:d4:e8:ba:a9:a5:62:
                    9e:3d:e9:f2:73:07:a6:f1:3a:47:13:38:fb:dd:e4:
                    60:eb:cf:73:4e:00:43:9c:84:b2:03:c0:cb:d1:94:
                    cd:b4:42:0a:c4:45:4a:00:25:6a:31:d6:9c:00:ee:
                    5d:93:a7:38:d1:ae:e5:ef:00:26:89:2b:c7:ef:42:
                    2f:f0:17:19:6b:35:b3:8c:d9:4f:d5:99:72:00:de:
                    07:a2:fe:61:78:20:17:9f:43:40:49:d9:d0:12:2a:
                    0c:6d:2b:66:2d:ac:2f:9f:3c:59:fb:3b:32:46:a6:
                    9f:6e:80:20:3c:ae:ea:3d:84:57:23:26:d4:7a:98:
                    ba:2a:2c:24:f5:ee:57:fd:69:dc:cb:73:73:6b:64:
                    d4:3c:37:f8:36:e1:41:db:28:c0:d1:bf:15:b4:07:
                    30:3e:08:b9:0e:28:ed:00:2a:c2:ef:ba:ee:bf:92:
                    73:02:f3:00:32:39:82:b3:99:ce:f6:23:f2:5b:68:
                    0d:df:05:b7:f1:45:6b:4e:9a:fc:6a:3b:c6:fd:9d:
                    d8:49:35:7d:8b:48:3d:60:de:46:58:d1:93:3e:4e:
                    5e:a5:9a:08:5d:cf:3f:b5:76:8d:5b:b9:64:aa:28:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:EF:C2:37:74:E4:93:27:5F:ED:ED:F3:C2:C4:B9:23:58:39:44
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Ihjvwjd05JMnX-3t88LEuSNYOUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:3a:cc:25:07:d0:4a:56:b6:f5:fb:bd:b0:4b:c6:e4:7e:81:
         48:15:7e:3a:60:3a:5f:ef:99:8d:cc:fa:18:16:cd:ca:ea:cf:
         7e:08:d1:5c:03:d0:33:92:b4:6b:64:23:31:69:20:a9:b7:ac:
         76:6a:f5:0b:52:d8:ed:5e:0d:af:8d:09:8d:48:3d:d6:ea:14:
         c4:02:88:5c:ae:7c:48:b8:fd:52:a2:23:05:1c:0e:c3:83:71:
         0e:9b:c0:ac:7e:96:d3:cd:eb:39:07:d5:6c:29:5e:82:79:6a:
         47:17:b4:24:60:8f:12:00:df:ba:0a:f3:9f:9e:ef:f3:a4:4c:
         3b:6e:09:8c:26:b8:77:98:c2:99:3d:1b:84:a4:60:de:f7:18:
         39:2c:dd:f7:09:95:af:26:55:9f:86:3f:70:c3:0c:be:9d:e5:
         76:87:1e:c7:af:a9:7f:81:2f:ee:05:2f:78:2d:93:d2:28:60:
         38:23:41:b7:4f:5a:a8:3b:da:4c:cd:3e:49:1f:e8:63:a5:b2:
         32:7c:0f:d9:51:57:6b:56:aa:63:ff:4d:1b:c3:6a:c1:63:bf:
         fb:32:92:18:c2:cc:f1:96:c9:d6:d3:16:a0:ce:57:6b:53:05:
         17:a0:94:de:d4:31:bd:0d:56:13:d6:25:4f:21:73:b1:e0:3a:
         ca:74:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org