Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/F628SfVO0ITgZzuQxEAlbCNKNlg.roa
File:                     F628SfVO0ITgZzuQxEAlbCNKNlg.roa (raw, json)
Hash identifier:          v3IAR3fWei6WeIu9N4aCqie//OlNI3HIM5MNfnWLgGw=
Subject key identifier:   17:AD:BC:49:F5:4E:D0:84:E0:67:3B:90:C4:40:25:6C:23:4A:36:58
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       16ED5C04
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/F628SfVO0ITgZzuQxEAlbCNKNlg.roa
Signing time:             Sat 01 Jan 2022 09:03:33 +0000
ROA not before:           Sat 01 Jan 2022 09:03:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59673
IP address blocks:        185.79.118.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384654340 (0x16ed5c04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Jan  1 09:03:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17adbc49f54ed084e0673b90c440256c234a3658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:6d:88:a7:dc:5b:c4:23:5e:04:c5:c0:ae:
                    38:38:48:f1:2e:e5:01:53:cb:66:17:e9:e6:b0:ed:
                    b9:41:a6:1e:e5:37:34:0b:f3:a8:f0:0f:96:3d:2d:
                    c8:65:f3:32:73:21:25:ff:66:6e:6d:4a:03:8a:0f:
                    12:65:62:78:71:07:75:c2:a5:1b:b3:44:a0:86:ff:
                    75:51:b0:c7:59:0a:2c:7b:5b:c7:2e:9f:86:a4:b9:
                    ac:70:cd:6e:df:63:98:ce:6e:37:ff:86:a7:77:0e:
                    1a:2e:ec:d7:bf:29:ba:78:73:58:85:0d:ca:09:f8:
                    e4:d2:67:c9:5c:49:c0:f3:d2:39:d6:45:12:29:e3:
                    d4:51:15:12:63:c8:7f:79:b2:53:da:62:f6:85:23:
                    82:82:58:a1:f1:25:9a:ec:a5:f7:4b:b8:5c:15:93:
                    9f:0d:6a:8d:8c:dc:13:5c:55:36:d2:27:52:f8:df:
                    0e:94:10:e6:1e:84:61:34:4d:58:c5:3f:21:c3:c4:
                    1f:4c:e1:db:60:3c:97:b8:d1:6e:87:19:a3:17:6c:
                    50:d7:1e:45:4c:31:47:51:c6:1c:52:5c:e6:6e:08:
                    cd:5a:a6:4b:2c:fa:99:ee:c5:78:c0:dc:a6:55:a8:
                    f3:e5:12:0e:b1:7c:b1:ba:47:32:f2:e2:82:83:93:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:BC:49:F5:4E:D0:84:E0:67:3B:90:C4:40:25:6C:23:4A:36:58
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/F628SfVO0ITgZzuQxEAlbCNKNlg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:cf:bb:5c:11:5d:c8:1c:fd:53:91:64:a0:ef:b5:8b:cf:
         17:97:69:cd:e6:34:f3:91:d7:b2:18:d7:c2:ed:83:9c:64:19:
         46:1a:5a:00:66:35:87:88:68:d0:70:54:48:80:31:3a:45:9e:
         5f:7e:0e:01:02:d6:fa:21:70:80:f2:5b:8b:da:3d:9f:a7:ac:
         73:d9:30:e7:71:8b:c9:52:63:a4:5f:9e:83:cf:1f:88:a2:3c:
         a4:4e:0e:45:1f:60:75:eb:cf:0c:bd:4f:24:f3:ea:9b:cc:dd:
         58:d6:68:a6:d5:e2:dc:aa:ac:c4:2a:7d:92:4d:d6:74:e0:a2:
         47:7e:51:76:5f:7c:7b:49:2e:c2:04:1c:c7:c6:7b:9c:b6:35:
         c5:f8:78:fa:c1:48:a0:bb:38:4c:fa:df:f3:79:f0:66:6b:1f:
         17:f2:a5:ab:48:97:ca:30:94:46:a3:2a:9a:e9:4b:8d:02:6d:
         7b:de:10:c9:95:09:f6:fd:45:44:c4:7d:ed:9a:79:de:a5:ae:
         7c:35:3a:70:2b:72:53:10:aa:ef:ff:f1:dc:c2:ff:d3:7a:7e:
         75:63:4c:35:4b:4f:fc:c0:a6:98:b1:1e:17:d0:7d:cb:ae:7c:
         c7:05:c6:f7:57:87:c8:39:54:76:c6:e1:9a:00:ba:ab:0b:c1:
         d9:f2:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:29 2023 by rpki-client on console-ams.rpki-client.org