Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/weoKMAlQnqXWFdIHCzLD_CK-UhU.roa
File:                     weoKMAlQnqXWFdIHCzLD_CK-UhU.roa (raw, json)
Hash identifier:          53+ZKmle5sdzATJBsZe5wItdQ3uSMhv+yFXlB+mltks=
Subject key identifier:   C1:EA:0A:30:09:50:9E:A5:D6:15:D2:07:0B:32:C3:FC:22:BE:52:15
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01824E74A8A0C4714C446AB8404FFFB72657
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/weoKMAlQnqXWFdIHCzLD_CK-UhU.roa
Signing time:             Sat 30 Jul 2022 09:34:04 +0000
ROA not before:           Sat 30 Jul 2022 09:34:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        87.237.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4e:74:a8:a0:c4:71:4c:44:6a:b8:40:4f:ff:b7:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Jul 30 09:34:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1ea0a3009509ea5d615d2070b32c3fc22be5215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:f2:c6:23:52:c6:7a:71:0f:c1:80:a3:64:
                    e1:d3:85:24:35:d3:c8:b9:63:6a:ea:a7:79:69:8d:
                    ed:4c:56:67:31:8c:eb:8a:6c:cc:dd:4d:18:af:7a:
                    14:0f:82:9c:d8:ab:57:18:15:0e:9e:cc:11:17:3b:
                    5c:8c:9c:aa:36:22:86:d9:a6:d5:7a:c3:58:f0:7a:
                    2c:de:c6:63:a5:b8:3c:59:78:1d:6c:53:d8:5a:cc:
                    6d:cd:ef:2b:d3:4d:07:97:b5:51:c7:46:0d:e0:c0:
                    bd:99:11:04:3e:8a:6d:99:71:f5:93:e9:e4:1f:df:
                    2b:8d:2d:fa:7a:a6:da:bc:48:9b:3d:21:46:e8:77:
                    31:18:4d:0f:f5:5c:95:e7:4f:33:78:31:9f:3b:eb:
                    d5:52:21:be:21:65:ae:10:98:97:aa:b9:c1:cf:aa:
                    22:c8:f9:64:9a:d3:9c:ec:99:b7:dd:94:76:b5:ed:
                    c1:6e:ba:74:51:98:6b:83:0a:72:83:6b:a5:af:1b:
                    20:69:1d:27:6b:3f:f1:63:ab:e0:6d:d3:76:3c:db:
                    c9:cd:75:07:e2:fa:ab:41:b5:7d:fb:0d:52:fc:3c:
                    94:fb:0c:83:94:5d:50:41:60:60:2b:9d:c3:2c:7b:
                    ee:79:71:94:83:a2:7d:a9:d0:e9:5c:04:2b:7d:c6:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:0A:30:09:50:9E:A5:D6:15:D2:07:0B:32:C3:FC:22:BE:52:15
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/weoKMAlQnqXWFdIHCzLD_CK-UhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.237.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:26:6e:73:0e:a3:9b:a4:fd:37:f6:fa:55:c2:e2:99:84:4f:
         5b:19:65:4a:80:f4:7b:cf:1a:41:ef:7e:72:86:64:42:02:c9:
         51:79:b5:19:79:99:b6:ea:f5:d4:0e:c4:d3:89:c4:be:ad:08:
         b1:7d:0e:49:8d:b9:ea:37:95:57:a1:70:f8:cc:95:01:15:d0:
         16:3b:8e:3b:6e:82:3d:47:10:93:4d:75:d9:61:b3:3e:04:0e:
         df:5f:48:30:9d:8a:fd:cd:dc:73:b6:23:d3:2a:62:92:e4:60:
         5e:e7:a1:bc:88:e3:5c:dd:62:b0:a9:42:6b:50:c3:58:08:37:
         68:53:1f:07:b3:90:ac:d0:73:a5:f8:6d:c7:5c:b7:8e:93:bb:
         f9:25:60:c0:03:a7:07:db:c5:15:cc:1f:8c:7d:33:d6:8e:90:
         da:c9:21:ff:ab:25:7e:ad:82:97:0f:10:1a:fc:6b:2d:02:4b:
         72:71:8b:32:4d:8d:18:28:9a:89:3a:5c:2a:54:a2:d5:74:81:
         e4:df:d4:c6:a5:d5:f0:6d:87:a2:db:8e:2e:e4:60:26:e3:11:
         18:cd:6d:d1:52:1c:ba:8a:3b:2d:c9:02:f8:37:89:09:5a:2e:
         24:5f:da:2a:46:83:d1:ad:b7:f8:b5:45:d9:4a:86:36:51:93:
         05:34:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:47 2023 by rpki-client on console-ams.rpki-client.org