Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/DqXvTPlxY1YYjsqJ4656IccbZ4Q.roa
File:                     DqXvTPlxY1YYjsqJ4656IccbZ4Q.roa (raw, json)
Hash identifier:          SMldgWpW003v2THrUQkphqdEMFx3CW2pBXIINYpl3w4=
Subject key identifier:   0E:A5:EF:4C:F9:71:63:56:18:8E:CA:89:E3:AE:7A:21:C7:1B:67:84
Certificate issuer:       /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial:       026D13FF
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/DqXvTPlxY1YYjsqJ4656IccbZ4Q.roa
Signing time:             Sat 01 Jan 2022 06:54:21 +0000
ROA not before:           Sat 01 Jan 2022 06:54:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        195.85.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40702975 (0x26d13ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
        Validity
            Not Before: Jan  1 06:54:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ea5ef4cf9716356188eca89e3ae7a21c71b6784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:f9:18:b7:c2:2b:0b:a3:eb:20:65:c9:bc:
                    bd:7c:88:83:f1:b2:59:5e:22:ba:03:19:b8:5a:88:
                    77:e0:13:d2:7f:94:8b:18:f8:30:76:52:64:8e:ca:
                    73:51:85:77:de:cf:45:f1:9f:e6:57:2d:b7:fd:0b:
                    a2:dd:3d:7a:d8:3d:f7:e7:8a:e0:e2:91:a5:66:a9:
                    c4:aa:bc:68:e1:56:1a:b9:d9:a1:21:07:bf:c8:b1:
                    c6:7d:d3:80:51:66:eb:fe:f6:50:50:e9:18:eb:ee:
                    86:c9:b3:d8:86:b2:3d:d5:59:82:64:43:a6:32:3e:
                    0d:7a:8e:77:79:88:40:e7:16:3f:b4:8c:d9:3d:4b:
                    5c:a7:72:eb:d4:29:0c:39:4d:e2:21:8e:76:03:c2:
                    8f:73:7e:d1:bb:6b:31:ac:7e:c6:70:49:8d:7d:7e:
                    80:6e:ee:c6:37:14:94:28:bd:1e:79:92:34:df:0b:
                    33:d8:1d:c7:70:39:89:a2:23:b3:e8:6b:27:28:d8:
                    cf:c2:08:30:16:91:6b:e0:ff:03:ed:e0:24:14:7d:
                    ce:b1:14:23:ad:ba:72:c9:92:a4:ab:e0:d4:1c:ff:
                    9a:fd:d5:74:83:97:be:86:06:6c:96:63:10:bd:f6:
                    bb:81:7a:8c:f3:b4:63:42:be:cf:86:d9:d0:49:1b:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A5:EF:4C:F9:71:63:56:18:8E:CA:89:E3:AE:7A:21:C7:1B:67:84
            X509v3 Authority Key Identifier:
                keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/DqXvTPlxY1YYjsqJ4656IccbZ4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:fb:cf:8f:d9:27:67:13:cb:48:f6:0e:e7:c0:ff:9c:4f:b7:
         92:2b:b2:45:7f:0c:c6:02:c6:74:08:87:6d:61:ce:be:31:68:
         c2:a2:99:5a:ee:6b:4a:45:ea:a3:31:ad:f4:c3:3b:db:44:a6:
         b9:75:9c:cf:e4:56:a6:0d:40:00:42:10:b7:c2:29:ef:f1:3b:
         5d:45:07:42:bc:3d:5c:2a:05:46:70:38:e0:85:56:bf:bf:0a:
         50:9e:de:cf:91:8e:1d:6e:16:0e:8d:a8:ce:3b:e9:ac:0f:ef:
         da:d3:a0:8a:0b:55:f4:8c:49:ef:32:ac:12:cd:fa:f8:4b:4a:
         57:1f:c5:ff:87:73:15:39:ed:49:80:29:78:d1:64:8a:f8:dc:
         11:ff:78:1d:46:10:f1:fb:c2:f2:25:40:52:42:84:c6:9e:58:
         2c:fd:39:0c:6e:d0:7a:b4:d9:0e:10:81:13:24:ca:8e:35:87:
         66:ba:96:09:76:5e:80:c7:03:0c:03:82:99:66:93:5c:b1:33:
         75:cc:0d:05:d8:3e:d6:c9:4b:08:52:3a:8e:0d:41:29:6c:c0:
         5a:03:22:39:55:51:a8:7c:cc:af:f7:82:dc:18:36:63:f9:cd:
         61:fd:e9:5d:2a:ee:af:be:bc:ca:23:a4:6f:2c:67:76:94:36:
         60:6d:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:21 2023 by rpki-client on console-ams.rpki-client.org