Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GoshwrdbhiEE5OJ4y0mHRBBCyas.roa
File:                     GoshwrdbhiEE5OJ4y0mHRBBCyas.roa (raw, json)
Hash identifier:          yoymQztScIPSP4BV+gHLUeJjyieR8rC26HmqvmTyLYA=
Subject key identifier:   1A:8B:21:C2:B7:5B:86:21:04:E4:E2:78:CB:49:87:44:10:42:C9:AB
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0883DCC1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GoshwrdbhiEE5OJ4y0mHRBBCyas.roa
Signing time:             Fri 25 Mar 2022 08:39:54 +0000
ROA not before:           Fri 25 Mar 2022 08:39:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        93.186.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142859457 (0x883dcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Mar 25 08:39:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a8b21c2b75b862104e4e278cb4987441042c9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3c:42:41:b6:94:c0:5e:31:17:4b:71:02:57:
                    92:75:bc:07:99:7a:1c:4b:a7:a4:d6:2a:df:b9:17:
                    9d:33:19:8e:7d:aa:e8:36:ca:6b:06:59:31:91:39:
                    d8:f0:95:dd:c5:ec:49:d9:3e:8a:0b:48:69:d9:70:
                    05:34:65:cf:a4:82:e5:d4:ab:19:09:d5:1f:69:cf:
                    ed:49:ba:c3:f2:77:41:7b:ba:3b:1a:02:21:a2:e0:
                    ba:1a:72:90:38:5a:5a:8c:04:1d:c8:89:02:cd:08:
                    43:17:6a:9e:07:7f:6e:5d:bf:07:23:84:14:99:3c:
                    d6:96:09:19:7a:31:94:85:2e:c6:26:f7:e0:2d:c2:
                    b9:cb:e7:6c:a3:c3:9d:4f:3c:15:4c:60:48:60:36:
                    81:12:8f:02:a4:b4:77:02:a3:58:77:1d:62:fb:d3:
                    79:88:d3:a4:15:45:ce:3d:09:42:ca:ff:82:cc:e2:
                    1f:fe:2a:ba:51:b6:6b:9d:bc:5b:36:be:dc:a2:48:
                    74:ec:9b:c5:b7:dc:6f:ce:c3:41:fb:ff:db:f1:92:
                    8a:e5:c9:05:51:7e:11:69:40:45:a1:d1:d2:32:ba:
                    d4:cd:fa:bd:d1:1c:9c:d1:b0:0b:b9:df:e7:d2:68:
                    4b:a7:2b:fa:76:66:42:46:93:9a:96:e5:15:88:54:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8B:21:C2:B7:5B:86:21:04:E4:E2:78:CB:49:87:44:10:42:C9:AB
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GoshwrdbhiEE5OJ4y0mHRBBCyas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.186.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:30:2c:c5:b6:26:3c:9f:71:07:b5:c1:ce:53:f5:8f:15:
         49:31:20:11:79:18:72:3c:d1:6d:37:4c:c4:e9:5a:e6:01:e0:
         ad:77:1e:ef:9c:90:f3:ae:75:77:4d:49:3d:90:80:aa:56:11:
         d5:65:b3:09:d3:a6:26:60:b9:f4:ea:02:46:dd:a6:6b:42:1f:
         d7:bc:b3:f4:6b:1c:32:35:a7:91:ff:70:90:b8:99:59:a3:7c:
         69:34:42:4a:45:c3:94:a0:36:a7:49:bf:a0:7c:01:fc:9a:8f:
         b3:f0:d4:53:47:2b:03:02:08:fe:c2:7c:78:74:7f:b6:57:d9:
         c0:48:d5:2f:57:ca:c5:a0:6d:b2:55:e3:01:f4:61:3b:68:60:
         8d:e3:65:5e:dc:e6:b6:f6:1b:8a:32:6c:7b:40:be:03:2a:82:
         b2:02:46:ba:7a:e7:20:a4:62:37:b2:f6:f5:c3:0b:a0:58:c4:
         67:0a:9b:41:e3:df:14:5c:e9:72:c1:db:b2:5a:c8:77:07:23:
         79:80:a4:1f:12:bc:f6:a1:66:a4:8d:3e:b8:cc:26:91:f7:ac:
         b2:00:c7:46:e8:0f:50:54:be:03:9c:b9:aa:63:ca:72:06:73:
         e3:89:1d:2f:b0:ae:3f:74:7e:fb:11:0d:6d:60:bc:da:df:1e:
         53:ab:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org