Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/dqYuACcAIy06aUedjJfM8GN6ZYs.roa
File:                     dqYuACcAIy06aUedjJfM8GN6ZYs.roa (raw, json)
Hash identifier:          RvmFHoVg8JO61stJS20w9/5tdV7yuv31xCm7KiXnLaQ=
Subject key identifier:   76:A6:2E:00:27:00:23:2D:3A:69:47:9D:8C:97:CC:F0:63:7A:65:8B
Certificate issuer:       /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial:       06360977
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/dqYuACcAIy06aUedjJfM8GN6ZYs.roa
Signing time:             Mon 07 Feb 2022 08:06:24 +0000
ROA not before:           Mon 07 Feb 2022 08:06:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        94.137.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104204663 (0x6360977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
        Validity
            Not Before: Feb  7 08:06:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76a62e002700232d3a69479d8c97ccf0637a658b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:da:44:f3:e0:52:ee:9c:75:e2:93:98:5f:
                    99:83:0a:2b:99:85:39:a7:45:a7:ae:b8:60:e1:22:
                    67:a9:d9:fb:35:b0:46:94:60:23:83:e1:af:e6:8c:
                    e0:d4:43:36:f4:96:96:f5:ca:48:e4:f7:d1:bb:70:
                    f6:3e:be:2e:06:76:1b:66:4f:3d:c6:16:8a:41:ed:
                    20:31:1a:50:df:ec:de:7f:99:ca:4e:42:74:1c:4b:
                    8b:4a:4f:ca:38:36:69:1d:5c:df:ec:06:22:c3:95:
                    3c:b5:fa:d7:53:13:bc:0b:0f:59:e0:2d:90:6c:96:
                    9d:aa:1e:ed:24:06:3a:a7:87:2b:c2:42:4a:95:99:
                    0a:c6:67:f4:18:ca:db:50:68:41:50:b3:75:4b:e1:
                    0d:9f:18:09:17:81:4a:12:dc:3c:94:d9:c7:97:2c:
                    45:95:d7:4c:24:d7:98:51:5b:f4:b6:c5:51:5c:7f:
                    2c:8e:7b:cb:57:8a:a2:c8:ee:01:90:60:93:67:27:
                    47:53:0e:38:6d:39:18:c7:47:a2:07:eb:f3:b7:ad:
                    65:cb:ca:96:e6:1b:d6:d0:a0:32:a6:8f:e6:20:17:
                    5e:c4:0c:da:d1:7a:f4:1b:d3:b9:82:6d:d1:8e:bd:
                    f2:09:57:30:5c:cd:27:32:88:c7:83:2e:a3:ef:53:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A6:2E:00:27:00:23:2D:3A:69:47:9D:8C:97:CC:F0:63:7A:65:8B
            X509v3 Authority Key Identifier:
                keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/dqYuACcAIy06aUedjJfM8GN6ZYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.137.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:94:5c:7c:46:c6:11:58:57:d1:f3:df:11:87:a7:e7:f8:30:
         46:38:c7:60:b9:aa:30:35:e5:86:92:99:af:8b:86:0d:73:43:
         fe:8a:d2:4e:e7:4d:fe:cc:37:cd:0f:81:cd:ca:78:a0:54:f5:
         0c:b5:77:21:dc:46:3c:5d:bb:ee:17:3f:be:6b:5f:f2:ce:b4:
         5a:22:0e:f1:b0:f9:c0:81:61:12:5d:ed:19:86:87:d9:b8:31:
         21:13:96:ea:1d:7a:d8:2d:17:ce:8b:25:dd:80:99:ee:f1:00:
         ce:fd:6c:fd:cf:34:c8:aa:94:65:f2:4a:94:dc:04:09:c5:f2:
         bb:c1:77:4a:f4:f8:8d:b8:f9:e1:e6:a3:81:42:f6:58:95:06:
         76:95:36:2d:0f:ed:bb:23:86:f8:23:fa:38:0a:cf:08:66:6e:
         e8:f7:72:a7:f4:f6:8b:c6:57:e0:53:8a:b8:99:ef:c1:c5:28:
         7b:a5:82:37:11:18:f2:ca:ac:d9:18:30:6d:f6:4e:bc:fe:d3:
         f9:ec:4c:4a:5b:f6:5c:1d:ea:6b:72:10:57:9a:d5:66:5a:09:
         29:4e:0b:37:a0:59:ad:8c:79:96:78:49:aa:90:50:7b:36:ef:
         7e:e7:9f:0b:50:b5:6e:c8:b5:d9:82:a4:13:6c:51:40:c7:e8:
         9a:1c:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org