Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/HSpuiGENmHIgCxQ76vRIiL0kFKQ.roa
File:                     HSpuiGENmHIgCxQ76vRIiL0kFKQ.roa (raw, json)
Hash identifier:          2oH7rbk3CCZiHO4fkK5LUV0T/U3i+lPWbL4k8Dhft18=
Subject key identifier:   1D:2A:6E:88:61:0D:98:72:20:0B:14:3B:EA:F4:48:88:BD:24:14:A4
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       486F6566
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/HSpuiGENmHIgCxQ76vRIiL0kFKQ.roa
Signing time:             Sat 01 Jan 2022 03:00:32 +0000
ROA not before:           Sat 01 Jan 2022 03:00:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57010
IP address blocks:        37.139.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215260006 (0x486f6566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan  1 03:00:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1d2a6e88610d9872200b143beaf44888bd2414a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:c1:a8:3f:47:76:7b:80:70:a5:5a:32:9e:
                    f9:85:60:f9:a4:2a:a2:63:4e:02:fe:a3:ae:92:d3:
                    5f:43:47:88:a0:67:22:22:2b:a6:c8:06:58:bd:36:
                    63:de:0b:76:07:95:06:c5:e1:67:3a:7e:69:17:85:
                    ac:33:3a:3d:3f:1b:c8:fd:20:06:60:0e:43:65:b7:
                    1a:86:67:b1:5d:a0:8e:16:38:c4:2e:ca:7e:18:91:
                    c8:e0:77:f3:2a:bb:8e:8e:0c:48:db:96:90:89:36:
                    af:d7:1f:35:84:6c:74:9c:dc:2c:ba:fc:cc:69:f1:
                    f1:1f:75:1b:e7:50:db:97:1a:5a:3f:40:9a:fa:02:
                    e9:d5:a8:13:78:d8:b7:cd:73:e9:95:dc:01:71:c3:
                    f4:25:09:e9:11:94:2e:6b:47:2f:ef:4a:dc:89:d7:
                    a4:8c:bd:f8:dd:f3:48:b3:df:e1:4b:ef:8b:27:8d:
                    07:48:75:a8:b8:f5:31:82:0f:68:70:75:ae:fb:6d:
                    e0:b6:09:e1:76:42:d0:cc:31:ab:48:93:23:86:1d:
                    96:c9:b4:33:ef:b7:77:69:85:78:5c:12:4b:d8:a5:
                    ba:2d:15:5d:9e:10:a8:ff:6b:94:c9:21:cb:81:bf:
                    38:bc:a3:be:6b:2f:52:f6:76:ff:72:95:93:31:85:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2A:6E:88:61:0D:98:72:20:0B:14:3B:EA:F4:48:88:BD:24:14:A4
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/HSpuiGENmHIgCxQ76vRIiL0kFKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.139.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:d9:df:df:58:76:75:5a:df:c4:c1:da:33:29:07:93:5f:8a:
         a4:9c:fb:e3:44:fe:39:9b:ca:7d:1b:b2:07:b7:ba:a5:4b:4c:
         d9:89:65:d8:d3:2e:7d:9e:15:c8:b7:f2:ff:89:9d:94:10:7b:
         08:e3:62:0c:c8:72:94:d2:84:ce:a3:0d:18:45:86:3c:64:95:
         74:79:e3:53:1a:2a:f8:56:f6:77:58:e8:66:f5:cf:3c:f3:fb:
         86:d6:61:4c:9a:d8:62:b4:3e:10:0b:96:13:d6:08:54:67:9d:
         00:c4:56:33:cd:63:b4:19:83:73:fc:2e:b4:00:01:81:a9:3a:
         a8:28:83:0d:93:53:60:20:00:0d:ce:5c:0e:c0:f6:a0:09:61:
         24:00:71:6d:15:1a:00:13:82:39:33:e0:63:e6:c4:e2:53:1d:
         66:fc:11:9e:44:4f:58:a6:fc:f7:39:97:ed:8a:8e:e3:ef:05:
         38:74:1e:58:3e:76:c6:b4:82:2e:bc:ad:99:0b:57:d1:3c:dd:
         8c:3d:46:50:b6:68:59:db:dc:4e:85:86:0d:96:45:20:d9:6c:
         bb:41:a9:15:b0:bd:9b:99:b2:bf:5f:d4:f4:f6:fd:31:a5:2e:
         3f:e4:2b:ef:11:32:e7:c2:5a:2b:aa:d1:1e:16:90:a7:eb:aa:
         6e:2b:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org