Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa
File:                     XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa (raw, json)
Hash identifier:          hJmDADek7eDFvQdNR7VTtxzfOn+Nd8C8unGqLmirgcE=
Subject key identifier:   5C:17:28:FE:D5:C6:C2:D7:43:98:A1:CB:C5:9A:09:99:2F:1B:F9:38
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       0D28E632
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa
Signing time:             Wed 04 May 2022 14:13:17 +0000
ROA not before:           Wed 04 May 2022 14:13:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35478
IP address blocks:        195.252.180.0/22 maxlen: 24
                          195.252.184.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220784178 (0xd28e632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: May  4 14:13:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c1728fed5c6c2d74398a1cbc59a09992f1bf938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:94:c9:c5:f2:a5:11:b2:da:9f:c1:5e:81:
                    03:22:a0:01:16:bd:9a:c8:8f:c8:f7:80:aa:57:99:
                    dc:9d:83:09:ee:d4:b5:10:71:81:bc:a9:08:6b:23:
                    bd:91:86:89:ed:28:33:52:45:d6:ad:3c:e4:b8:ef:
                    b7:40:fe:d6:6a:b3:26:ab:3d:76:bb:9c:bf:8f:e8:
                    54:bd:68:62:7a:7c:38:fb:38:fc:b7:34:b5:a0:9e:
                    53:79:7a:28:05:c4:37:5d:c3:cd:71:c0:c0:0e:d3:
                    d1:42:cc:3c:cf:77:18:e6:07:ca:0c:68:31:ed:85:
                    70:44:70:d6:8b:b9:13:62:86:d8:3d:36:4e:b8:41:
                    ce:be:ce:ff:ba:f3:40:88:0d:e7:70:ce:e0:06:8b:
                    07:6b:ea:d8:5b:44:fb:68:3a:fb:63:ac:da:fc:46:
                    db:fa:db:59:40:96:27:64:bf:65:d4:cc:6d:e4:bf:
                    30:13:09:1f:44:6c:ec:23:12:70:51:79:2d:0f:dc:
                    65:05:ac:73:2b:17:1f:e2:94:1a:ee:e6:06:5c:2e:
                    e0:d3:68:01:cc:14:06:56:1d:17:d4:42:c5:d5:b2:
                    e9:6d:b0:cc:09:01:60:0f:62:0c:81:29:aa:82:09:
                    fc:f9:ac:19:81:e3:a3:eb:0e:e9:e6:aa:68:0f:3c:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:17:28:FE:D5:C6:C2:D7:43:98:A1:CB:C5:9A:09:99:2F:1B:F9:38
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XBco_tXGwtdDmKHLxZoJmS8b-Tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.252.180.0-195.252.191.255

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:df:46:8b:5f:b3:ab:66:eb:a7:2c:07:69:68:9c:46:8a:
         54:31:a1:61:ef:21:cc:66:3d:27:73:53:6e:10:8a:86:7a:fa:
         ba:e0:7e:72:6f:4c:c3:b8:7a:72:10:7f:6d:3e:c9:38:2a:64:
         1d:da:70:0a:1f:50:d3:31:22:14:49:b4:f7:1a:b8:87:9b:1a:
         2d:f3:f0:a4:16:c8:ef:93:93:41:21:81:df:a0:6a:d6:e7:f8:
         8c:c3:69:6f:0f:d0:1a:03:c5:69:c5:e3:0f:53:fe:15:fa:b1:
         4a:f8:20:0c:5b:66:51:fe:f7:0e:b5:47:82:86:25:9b:e3:65:
         a4:8b:f4:65:8d:96:cb:ae:4b:8e:e9:dd:49:49:fe:83:61:b0:
         a6:91:89:b5:4a:e0:37:75:53:d7:c5:a7:a1:3d:0c:18:9a:cd:
         8b:ed:30:bb:49:47:d6:46:f7:8a:6d:da:ab:07:03:37:3e:77:
         52:90:94:c0:f9:45:78:00:86:64:e7:4b:65:c0:8a:f7:80:35:
         d7:4a:19:c2:12:bc:30:df:b6:ef:20:8e:59:9d:6b:6c:5d:39:
         32:d5:a9:a9:1d:d9:67:4e:2d:d5:3a:3c:4d:4d:5a:b4:a4:74:
         14:d9:1f:fb:7a:51:e1:c8:20:35:7d:5e:0d:8b:03:8d:e1:9a:
         fd:65:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org