Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/mEi1-XoP5sBeEAq5JOQNm7Eq27o.roa
File:                     mEi1-XoP5sBeEAq5JOQNm7Eq27o.roa (raw, json)
Hash identifier:          Rmp9uWz6cyWL5/eXfmHaVENJN0pPNIwKePzK/VoKB+s=
Subject key identifier:   98:48:B5:F9:7A:0F:E6:C0:5E:10:0A:B9:24:E4:0D:9B:B1:2A:DB:BA
Certificate issuer:       /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial:       04D2DDE0
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/mEi1-XoP5sBeEAq5JOQNm7Eq27o.roa
Signing time:             Sat 01 Jan 2022 13:01:25 +0000
ROA not before:           Sat 01 Jan 2022 13:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213183
IP address blocks:        194.147.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80928224 (0x4d2dde0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
        Validity
            Not Before: Jan  1 13:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9848b5f97a0fe6c05e100ab924e40d9bb12adbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:60:fc:06:f3:ce:0c:90:8f:3a:12:6e:8f:
                    c6:50:30:0f:4c:ee:6b:26:38:01:5a:97:15:93:44:
                    46:e7:d3:09:83:6c:ab:0d:5b:69:aa:a1:b3:a4:b2:
                    73:df:b4:e2:59:b6:7b:60:16:2c:c3:0c:8b:8f:79:
                    f3:cc:61:5f:ea:08:51:be:2b:03:e9:39:b3:56:7f:
                    82:c1:94:67:bb:8d:60:0f:8c:18:dc:61:de:2f:ee:
                    63:6c:b6:43:57:b2:4e:fb:e2:9c:dd:44:82:eb:81:
                    a1:fc:5b:46:39:65:6d:68:7f:95:35:9a:64:3f:79:
                    6c:b5:9e:9d:2d:00:bb:0f:f8:67:ec:84:b2:6a:b4:
                    1b:56:17:cf:fe:2f:73:1a:ab:ae:3f:da:d5:4c:5f:
                    a6:69:3e:2d:95:32:da:88:8c:ad:f0:d2:eb:af:72:
                    43:61:d9:26:12:3b:8a:eb:a6:79:5e:f3:ec:b2:be:
                    bb:c0:19:65:db:fa:f5:bf:f5:12:44:ae:fe:4e:b5:
                    14:e7:09:91:f7:a3:d7:f9:d2:68:bf:2b:91:8a:80:
                    41:db:c6:3a:3c:88:c1:af:93:e2:0d:6d:22:f8:94:
                    1c:3a:da:32:2b:d0:9d:15:dd:26:fd:65:bf:89:6d:
                    33:ba:4b:6f:1b:ea:95:8f:de:ea:0a:6d:a3:37:2c:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:48:B5:F9:7A:0F:E6:C0:5E:10:0A:B9:24:E4:0D:9B:B1:2A:DB:BA
            X509v3 Authority Key Identifier:
                keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/mEi1-XoP5sBeEAq5JOQNm7Eq27o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:48:85:64:56:00:9b:e3:2f:aa:52:b6:5f:42:c2:59:a9:8a:
         2f:80:bf:7b:a1:60:47:59:0f:b3:16:29:20:d8:56:bd:02:22:
         c2:45:87:70:32:b1:2f:83:37:a9:e8:b8:25:04:aa:42:2c:45:
         e3:1c:99:53:f7:b8:4a:96:e7:7b:64:0f:46:b1:f4:70:85:2b:
         91:e4:91:a7:94:ba:e2:12:d9:e3:77:73:d5:42:58:b3:b3:42:
         39:14:a7:5b:04:1e:e4:bb:42:c7:fa:86:95:c7:5f:bc:1a:1f:
         64:ec:79:ea:a8:a0:16:fe:22:15:a0:a7:3a:15:9b:25:11:44:
         b3:e4:d1:07:20:38:81:26:fe:0a:8c:71:95:ce:88:cc:92:32:
         65:40:40:98:39:e0:f2:e5:40:64:78:95:53:f8:a3:18:4f:ac:
         40:ca:9b:aa:07:c6:39:a3:c5:f6:65:5d:b3:f2:47:df:b8:5f:
         8e:0e:51:0d:85:2a:44:72:c1:b7:b7:92:7f:b0:ff:17:52:8e:
         b8:89:1d:47:b1:4f:81:2c:21:12:a2:9a:f7:32:9e:66:6f:fb:
         64:1c:be:9d:1d:7e:5b:65:99:74:33:38:c2:4d:13:06:06:c6:
         3c:29:03:14:e7:7e:72:ba:83:ec:96:28:de:90:bf:2b:5f:23:
         31:a6:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org