Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Tdd6ByfoxHzhZj61CRBMtMJB8Hk.roa
File:                     Tdd6ByfoxHzhZj61CRBMtMJB8Hk.roa (raw, json)
Hash identifier:          fJ/e4p9Oh3NOsdZjSLYSLTaX7d4wQp4SdFwgbuEzWA0=
Subject key identifier:   4D:D7:7A:07:27:E8:C4:7C:E1:66:3E:B5:09:10:4C:B4:C2:41:F0:79
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       0C36A463
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Tdd6ByfoxHzhZj61CRBMtMJB8Hk.roa
Signing time:             Tue 15 Feb 2022 12:32:45 +0000
ROA not before:           Tue 15 Feb 2022 12:32:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211287
IP address blocks:        194.163.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204907619 (0xc36a463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Feb 15 12:32:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4dd77a0727e8c47ce1663eb509104cb4c241f079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:dc:97:f9:54:a1:52:cc:b1:c5:1c:57:39:
                    01:1b:a0:03:7c:8f:b3:01:33:c2:29:d7:a2:f0:34:
                    9c:11:5e:32:ac:f7:43:7d:8b:73:3c:86:4a:22:54:
                    01:3b:c0:62:fc:2d:99:fa:90:6d:c0:e6:d6:a8:a7:
                    42:de:94:5e:a9:91:8a:e3:91:71:5e:77:48:2a:2d:
                    59:e2:4d:5f:bb:21:3b:80:9e:8b:f5:bd:3d:83:1e:
                    cb:ce:f6:45:7a:5d:6c:c7:fa:4f:ef:32:89:3a:fc:
                    43:9a:58:29:58:d2:6f:24:08:7c:28:98:fb:2f:a1:
                    f0:b9:50:d4:0e:0b:d4:d2:9a:86:5d:3f:79:94:3b:
                    de:c4:42:8e:6f:c9:07:80:95:3a:80:e1:b4:da:4a:
                    bb:f9:b8:a7:98:bf:d3:c6:99:dc:1a:39:1a:47:e8:
                    f2:59:28:b6:dd:08:64:93:a1:02:ed:db:a3:6f:2d:
                    ec:6b:05:ad:1b:10:bf:f8:ed:fd:5c:c2:49:06:19:
                    b2:04:4d:1e:c0:69:bb:c3:8a:a4:d5:f0:70:34:cd:
                    f3:39:ec:94:d3:ad:e4:70:1a:c7:9d:45:2d:00:66:
                    af:ef:86:84:0a:4b:53:c6:49:88:e3:a5:13:35:f6:
                    1e:fb:e6:d5:98:22:94:cd:c3:48:e6:52:a6:fd:19:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D7:7A:07:27:E8:C4:7C:E1:66:3E:B5:09:10:4C:B4:C2:41:F0:79
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Tdd6ByfoxHzhZj61CRBMtMJB8Hk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.163.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:21:12:a6:4c:84:8f:71:c2:04:32:91:54:be:a0:9e:ce:56:
         ac:d9:5c:5d:da:29:05:6d:c0:a9:28:e3:f7:c8:a7:42:02:e4:
         04:e2:44:75:83:95:2d:38:d3:70:32:62:d1:1f:e9:35:f8:6b:
         2d:93:4b:87:34:17:3d:f2:10:13:63:7c:9f:77:cc:11:f7:2b:
         cd:a9:e1:67:92:de:6b:7c:6c:d3:6d:58:85:6a:46:db:f3:4d:
         90:9b:90:20:ad:9d:ae:32:47:e2:5e:40:7e:e7:af:c2:99:f9:
         36:6d:94:5c:56:e4:d8:e1:af:cf:ab:31:c7:ba:03:15:df:f3:
         38:00:98:3b:eb:d0:dd:bf:b6:14:b6:10:2c:4c:83:26:bf:3a:
         29:1f:47:d8:e5:09:09:08:94:c3:3a:d5:31:7b:53:6f:62:f5:
         05:d3:c9:e9:9c:bc:15:e5:d2:c8:47:85:76:60:e7:16:3f:c0:
         d7:45:2d:50:35:7d:25:dc:46:e4:be:64:72:e0:5a:68:49:a6:
         a7:6a:a7:a1:ce:8d:87:34:d9:50:ef:7a:33:40:a1:77:05:a5:
         d5:2b:0d:ed:3a:1a:3d:da:f6:07:f9:5d:e9:26:01:35:ef:cc:
         e1:63:be:f0:e8:0c:2c:3e:8e:e6:41:1d:a9:88:8a:bc:bc:76:
         4a:43:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org