Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/0HObUF6YjNj4zb2joMifzHnDyOI.roa
File:                     0HObUF6YjNj4zb2joMifzHnDyOI.roa (raw, json)
Hash identifier:          ZpOUVs2MeN9yyqxh2eUneko+tOvmTQDOFoDGrN6Xqvo=
Subject key identifier:   D0:73:9B:50:5E:98:8C:D8:F8:CD:BD:A3:A0:C8:9F:CC:79:C3:C8:E2
Certificate issuer:       /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial:       03C7EAD6
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/0HObUF6YjNj4zb2joMifzHnDyOI.roa
Signing time:             Sat 01 Jan 2022 09:03:44 +0000
ROA not before:           Sat 01 Jan 2022 09:03:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42927
IP address blocks:        91.217.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63433430 (0x3c7ead6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
        Validity
            Not Before: Jan  1 09:03:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0739b505e988cd8f8cdbda3a0c89fcc79c3c8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:07:8b:6c:e5:9a:94:7c:28:16:ae:b6:e0:
                    74:19:cf:74:9a:9a:8f:e5:b0:16:ce:80:ff:97:4b:
                    56:26:9a:cb:97:82:9f:17:2b:5d:c0:7b:25:37:7e:
                    da:fc:13:11:db:39:11:44:cc:6b:2d:36:72:cf:07:
                    c1:9d:fc:1f:2b:b7:c0:46:6a:17:79:3c:23:7e:1e:
                    63:01:c4:a5:6b:78:1f:51:f0:7e:4c:60:27:fd:c4:
                    2b:0d:1e:24:bd:63:df:79:92:b7:34:84:1d:bb:84:
                    16:9b:82:78:7c:80:b1:61:2b:5a:55:c4:5f:9c:a9:
                    2f:70:27:62:03:06:14:ed:3a:60:19:48:a9:be:c1:
                    20:aa:8e:65:16:ae:74:f1:63:ad:0b:7a:70:61:75:
                    6a:6f:82:e3:ca:30:ea:1c:ef:62:a2:52:9b:2c:70:
                    3f:b6:16:ae:bd:10:a4:2c:90:37:d0:46:c2:e6:d9:
                    07:81:91:75:33:5e:f1:0d:26:d5:02:71:39:c7:cd:
                    7b:1c:dd:00:1c:11:ba:98:4c:0b:b5:b4:42:3d:6d:
                    d6:d6:2c:34:4e:65:73:de:11:6d:c6:75:39:13:a5:
                    4e:8e:50:3b:da:64:4a:d5:e5:59:60:0b:61:71:45:
                    37:a4:3f:2d:3e:9b:a6:9e:2f:18:8a:57:94:90:d4:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:73:9B:50:5E:98:8C:D8:F8:CD:BD:A3:A0:C8:9F:CC:79:C3:C8:E2
            X509v3 Authority Key Identifier:
                keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/0HObUF6YjNj4zb2joMifzHnDyOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:cb:ac:ef:54:5e:47:18:cc:4f:dc:80:4b:0c:ec:55:cf:
         8e:1e:9d:84:9c:7c:1b:2a:dd:5c:24:75:3c:3e:ec:a1:42:e8:
         1d:e9:45:46:5f:d8:2f:80:38:0b:07:ef:28:8f:0c:50:71:49:
         6a:c7:43:9e:e9:3e:c8:ee:de:13:c7:b2:f4:fb:44:a5:5d:9d:
         91:90:42:90:34:5c:6a:25:3e:c6:a8:a2:c7:2f:30:5e:9c:32:
         8f:b3:1c:9f:99:55:75:80:6e:69:54:23:18:cc:0c:6e:d9:84:
         d0:1e:fc:a2:cc:7a:66:0b:8b:ed:dd:d9:04:40:8b:10:27:2a:
         5d:e0:6d:d2:86:01:02:53:2c:09:53:f3:ac:2f:6d:fb:20:35:
         24:7c:a8:cf:ed:b3:f6:5e:51:bd:ab:f2:98:6c:10:31:46:08:
         97:72:42:bf:dc:51:8b:0c:5a:59:f5:ec:4f:80:d7:d8:33:05:
         26:f2:ff:25:a5:9b:b1:1f:d7:b3:02:20:57:e3:21:39:38:ea:
         c0:59:14:bb:7e:df:31:56:15:0b:21:cc:bf:39:24:11:a9:42:
         60:24:30:75:61:26:f9:47:b5:07:19:1e:70:ed:d8:92:0d:e5:
         e9:fb:70:06:35:a8:f1:08:f1:f0:43:eb:a4:6c:a3:f5:e8:21:
         80:29:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org