Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/_zUoIQAGalVXnMqq3Bekxm2G1jA.roa
File:                     _zUoIQAGalVXnMqq3Bekxm2G1jA.roa (raw, json)
Hash identifier:          8MHYx8fC9YOiWYrQjFNZm+veytrjOeqMD39Avjom/qU=
Subject key identifier:   FF:35:28:21:00:06:6A:55:57:9C:CA:AA:DC:17:A4:C6:6D:86:D6:30
Certificate issuer:       /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial:       01821003A2B4EB3A827895E8517AE8A236BB
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/_zUoIQAGalVXnMqq3Bekxm2G1jA.roa
Signing time:             Mon 18 Jul 2022 06:34:09 +0000
ROA not before:           Mon 18 Jul 2022 06:34:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50592
IP address blocks:        193.105.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:10:03:a2:b4:eb:3a:82:78:95:e8:51:7a:e8:a2:36:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
        Validity
            Not Before: Jul 18 06:34:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff35282100066a55579ccaaadc17a4c66d86d630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:36:67:ae:9d:cf:5e:6b:b0:87:2f:d9:61:
                    48:67:4a:ee:9d:18:2c:c1:70:cb:83:07:10:ef:d1:
                    16:88:78:71:a2:1a:f5:4d:22:66:53:7d:ef:33:c5:
                    24:5f:4f:91:90:1a:4a:84:1c:a6:36:37:1f:fc:4b:
                    21:72:cb:58:cd:29:bc:b8:15:0d:06:0a:a8:af:37:
                    3b:a7:dc:0d:d0:d3:27:a6:8f:0f:8f:53:8e:8f:58:
                    4e:85:d7:27:14:13:6f:62:2b:bb:2d:de:86:2a:49:
                    6c:5f:97:d1:ee:c7:11:6b:76:18:ec:a4:a7:59:9a:
                    1b:55:9b:5d:9f:45:c4:89:3a:ab:90:ef:35:9e:e9:
                    b9:a7:f2:08:ea:2a:5e:64:ed:ee:b4:0d:c4:e3:7a:
                    38:03:70:ec:e0:16:23:65:08:ee:89:ba:42:0d:9c:
                    9f:87:47:de:8a:f3:fd:a3:08:6a:58:f0:2f:0a:9c:
                    4c:20:3f:22:60:e7:cf:39:ab:e5:08:ff:6a:97:6a:
                    f4:48:87:15:b4:56:68:33:3d:6d:7a:c0:c3:4b:a8:
                    04:c2:3d:15:57:0c:5f:97:9a:5a:fe:98:41:19:ee:
                    5f:2d:0b:64:1c:3f:6a:4e:ac:83:2f:59:e0:ac:65:
                    92:bc:92:8b:5b:07:89:30:9e:1c:9c:79:02:95:5a:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:35:28:21:00:06:6A:55:57:9C:CA:AA:DC:17:A4:C6:6D:86:D6:30
            X509v3 Authority Key Identifier:
                keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/_zUoIQAGalVXnMqq3Bekxm2G1jA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:ad:46:d6:7f:aa:5e:bc:14:80:27:d3:14:66:a9:81:01:
         38:04:1f:8e:0e:71:3e:51:2e:b8:4a:56:8a:f1:fe:27:a4:13:
         dd:d2:49:d2:86:68:f0:b5:e3:a4:16:c3:c7:a0:b8:ee:62:0a:
         b9:35:a9:cd:91:31:86:e4:1b:9d:13:cd:06:b1:ba:b4:9b:cd:
         2f:0a:37:98:28:5a:5a:36:0f:e8:1d:72:00:99:63:19:f6:dc:
         cf:98:1d:dd:aa:a0:2c:9c:3d:ff:ce:ce:ce:75:93:e6:ee:c4:
         b1:f5:eb:17:c6:7f:05:1e:01:b5:5e:2e:72:a2:d0:47:b2:39:
         f1:0b:e0:f4:7c:b9:b3:eb:db:a3:e0:90:89:d8:b3:31:b7:20:
         74:59:ac:4d:00:89:4d:28:00:1f:4c:d3:fb:ee:40:e2:47:3c:
         4e:83:96:b2:77:0d:9d:9b:b6:13:8b:4a:f5:1a:8c:59:40:a4:
         ce:92:2a:58:6a:ab:24:4a:0d:27:2f:e5:40:b0:09:d8:a3:de:
         96:c8:91:11:74:87:db:6f:84:3a:5b:6a:8d:80:d4:70:05:a2:
         ff:07:e5:3f:65:cc:51:6e:19:d6:30:3f:2a:9c:03:8f:ee:e7:
         30:79:c9:7e:ac:c9:25:be:18:e2:99:dd:37:03:e2:88:a8:41:
         08:24:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:58 2023 by rpki-client on console-ams.rpki-client.org