Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/evAd6y-tS_tHns-fiD5fncRFrJo.roa
File:                     evAd6y-tS_tHns-fiD5fncRFrJo.roa (raw, json)
Hash identifier:          QWHcQgxmD6mQP9oX3dBF//4lzPdfnI81D0UIfkX8lXw=
Subject key identifier:   7A:F0:1D:EB:2F:AD:4B:FB:47:9E:CF:9F:88:3E:5F:9D:C4:45:AC:9A
Certificate issuer:       /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial:       0539BAAB
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/evAd6y-tS_tHns-fiD5fncRFrJo.roa
Signing time:             Sat 01 Jan 2022 13:01:43 +0000
ROA not before:           Sat 01 Jan 2022 13:01:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51088
IP address blocks:        193.53.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87669419 (0x539baab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
        Validity
            Not Before: Jan  1 13:01:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7af01deb2fad4bfb479ecf9f883e5f9dc445ac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:e0:86:96:a5:7c:fb:10:8e:d6:13:aa:74:
                    ad:14:c9:c2:57:f6:49:66:8a:0a:bb:52:a9:04:73:
                    11:40:90:7d:12:9a:8b:6d:b2:d4:92:08:6c:64:66:
                    bc:73:84:c2:18:d6:65:4e:49:1e:97:df:60:0d:be:
                    51:05:42:69:78:9b:32:af:63:47:0d:c7:72:0e:e6:
                    2d:62:58:81:de:11:cb:89:9a:cf:db:01:48:b3:c1:
                    b8:08:4d:37:cd:e6:1f:34:fd:b4:a7:77:44:2f:a6:
                    7e:30:ad:b6:1d:97:07:8a:ac:22:09:a7:d8:d2:be:
                    d7:c0:39:15:29:7a:09:4b:b4:05:91:c2:17:63:a1:
                    18:6e:32:21:cb:70:05:68:c4:2d:bc:90:52:28:45:
                    4a:d2:b5:e1:f6:da:83:fb:08:06:3c:f1:a3:ba:3e:
                    90:b9:48:c7:59:8d:bc:cf:8e:cf:ce:c0:3c:5b:53:
                    54:4b:65:68:d0:3a:cd:b3:5b:35:99:97:12:e3:2f:
                    9b:d3:88:f0:49:b7:f8:ed:8d:03:42:c6:b1:89:42:
                    fb:c1:36:dd:02:2f:64:3b:74:68:f6:df:4b:77:79:
                    ed:b9:e0:77:24:1e:f6:c2:1a:0f:e6:0e:49:d0:96:
                    49:09:35:b9:ab:d6:5b:a5:2c:7e:13:8e:29:57:43:
                    95:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F0:1D:EB:2F:AD:4B:FB:47:9E:CF:9F:88:3E:5F:9D:C4:45:AC:9A
            X509v3 Authority Key Identifier:
                keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/evAd6y-tS_tHns-fiD5fncRFrJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.53.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:71:26:4a:64:8c:cf:07:00:94:8e:99:7b:f3:6a:a0:a4:
         f4:45:f8:c4:6d:2b:c7:35:9e:dd:98:4b:e1:9b:27:5d:02:9f:
         53:6a:04:d9:70:86:77:34:40:73:fa:bc:de:1e:04:34:7b:d9:
         1d:b4:44:41:c3:fc:ee:3f:47:08:10:5d:53:d8:f2:3e:e3:b3:
         1b:df:fd:07:d3:6f:cb:47:5c:04:b2:c7:b7:1d:86:e0:bd:b0:
         d7:e6:d4:5e:69:7d:53:19:d2:00:27:85:ca:0a:35:b8:b7:75:
         f5:ce:9d:96:40:f3:12:db:1a:b6:1f:ce:a4:8f:99:48:23:ba:
         72:15:17:0d:f3:26:f0:ce:77:a3:1d:70:45:83:da:5f:27:32:
         ed:32:da:e8:29:a5:c9:e9:e6:77:17:95:51:27:e3:f1:da:23:
         e1:0a:ac:57:c9:74:ad:1c:b5:62:c6:9b:8b:44:b8:1c:69:15:
         4d:d5:a9:30:5f:c6:c2:1d:d4:15:0d:10:13:07:0c:6c:02:5d:
         26:18:9d:0b:f9:97:23:ba:e3:50:46:a7:e0:8e:7c:58:4c:cb:
         ed:57:f5:fe:c6:44:f4:c0:5f:49:dd:e4:e8:c5:66:24:ca:15:
         c5:c1:f7:76:88:37:af:89:f6:ff:74:1a:8d:31:d1:80:29:33:
         8a:14:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:12 2023 by rpki-client on console-fra.rpki-client.org