Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/TrM_tXQMt9cbcYt0ptaIpeJa9Cg.roa
File:                     TrM_tXQMt9cbcYt0ptaIpeJa9Cg.roa (raw, json)
Hash identifier:          JogTcn3f8+JDdDquydLHXOAfKBvrIyW0HTi/GZ2D4Ks=
Subject key identifier:   4E:B3:3F:B5:74:0C:B7:D7:1B:71:8B:74:A6:D6:88:A5:E2:5A:F4:28
Certificate issuer:       /CN=983dd29a579875009dbc4139668b148b8884b637
Certificate serial:       038E87B3
Authority key identifier: 98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/TrM_tXQMt9cbcYt0ptaIpeJa9Cg.roa
Signing time:             Thu 30 Jun 2022 14:42:02 +0000
ROA not before:           Thu 30 Jun 2022 14:42:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41354
IP address blocks:        185.179.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59672499 (0x38e87b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983dd29a579875009dbc4139668b148b8884b637
        Validity
            Not Before: Jun 30 14:42:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4eb33fb5740cb7d71b718b74a6d688a5e25af428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:26:07:18:4e:d8:d8:6d:cf:00:d8:4d:80:
                    6f:c5:52:93:09:0f:a1:22:6d:e2:40:85:5d:79:f0:
                    49:4a:16:b1:fd:48:a3:ad:7b:d6:b5:aa:26:f5:2e:
                    49:4a:c7:05:db:75:f3:d3:2f:3e:0c:05:94:9b:99:
                    1d:37:98:fe:39:39:5c:33:02:31:2c:92:46:05:c1:
                    90:e5:d8:6a:fe:91:82:1d:35:2c:4d:27:08:e2:cb:
                    a2:91:8b:3d:f3:92:79:bc:1b:01:e0:f8:a1:1c:ae:
                    6a:a6:2c:df:7c:b0:77:10:16:8d:02:14:5f:d0:5d:
                    27:da:b6:86:43:7b:53:6c:93:e1:77:c3:1c:96:cb:
                    c2:4b:db:67:64:4b:2a:50:cd:a7:0f:8b:93:44:b0:
                    00:df:31:6a:3a:4d:c5:54:7f:fa:3a:fe:81:db:72:
                    2c:5e:ce:dc:7e:20:43:7a:09:c3:01:2f:ec:f4:60:
                    9d:ab:ba:cf:2f:02:34:62:4e:c4:66:9c:98:23:8e:
                    3b:88:21:16:09:c9:10:e5:aa:52:63:12:f0:96:ec:
                    91:cb:53:f3:7c:55:0e:7f:85:a4:7f:9b:64:9a:6b:
                    9b:ca:ee:6b:62:64:dc:3d:f0:c8:71:7e:a3:6a:eb:
                    ca:94:ac:35:e2:0e:f0:de:9b:70:f0:db:89:70:3c:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B3:3F:B5:74:0C:B7:D7:1B:71:8B:74:A6:D6:88:A5:E2:5A:F4:28
            X509v3 Authority Key Identifier:
                keyid:98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/TrM_tXQMt9cbcYt0ptaIpeJa9Cg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/mD3SmleYdQCdvEE5ZosUi4iEtjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:94:64:85:3a:37:bf:cd:e6:fc:82:ee:46:8f:53:15:af:
         b3:3a:91:70:98:ac:2c:51:43:94:82:be:1e:2b:7a:a9:5a:7e:
         dc:cf:6a:70:48:ee:8d:d2:71:1a:a9:c8:8e:fe:5c:e2:23:0a:
         f2:a6:f2:54:86:a5:7a:88:0d:86:54:19:91:8a:3c:49:0b:ac:
         0d:4b:39:37:8a:31:fa:89:73:b0:a8:43:c3:17:d2:de:df:b3:
         99:ea:8f:e2:30:66:02:91:db:5f:7f:0e:47:ba:04:07:ae:36:
         d4:96:7e:1b:7b:cf:f2:e9:ea:81:f4:08:5c:42:19:b1:d5:93:
         b7:1d:ae:9e:23:76:29:f6:8e:fd:dc:86:bf:48:eb:5d:cd:cc:
         7a:d5:77:b1:62:c1:6a:cf:95:d5:21:05:34:ef:ab:13:b3:c7:
         2b:39:d8:4a:10:d4:d7:8e:f7:9d:9b:16:f7:11:9e:83:6c:48:
         57:f7:95:88:81:fc:2d:d6:35:31:d5:85:1d:93:94:13:2a:2c:
         8c:c7:0d:7d:28:57:a5:52:c1:a3:e1:d8:33:a2:aa:23:15:83:
         70:40:9b:22:b0:a7:38:ba:86:20:67:08:80:61:ba:a6:42:8f:
         ea:43:29:92:a0:f1:34:4f:02:ec:f4:61:f4:cd:18:23:1a:5e:
         90:f6:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org