Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ZHmlZj-f3L-jBIZFZShvr414Dj4.roa
File:                     ZHmlZj-f3L-jBIZFZShvr414Dj4.roa (raw, json)
Hash identifier:          hebKBXE0YqwFirgoCaF80F0M4sevzsfOdXPhp1sLxl0=
Subject key identifier:   64:79:A5:66:3F:9F:DC:BF:A3:04:86:45:65:28:6F:AF:8D:78:0E:3E
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       0AD39E49
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ZHmlZj-f3L-jBIZFZShvr414Dj4.roa
Signing time:             Sat 01 Jan 2022 03:02:41 +0000
ROA not before:           Sat 01 Jan 2022 03:02:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     479522
IP address blocks:        194.127.117.0/24 maxlen: 24
                          194.127.118.0/24 maxlen: 24
                          194.127.116.0/24 maxlen: 24
                          194.127.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181640777 (0xad39e49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 03:02:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6479a5663f9fdcbfa304864565286faf8d780e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:cb:8b:29:86:32:03:77:9b:a9:d3:78:48:
                    be:8c:63:e8:4d:60:58:25:f8:6e:50:34:5e:4c:8c:
                    d1:08:5c:f1:01:07:2f:28:36:bc:b3:a4:35:d2:05:
                    b6:46:3d:2b:34:96:1e:c6:89:6b:a6:9c:d8:ce:90:
                    ae:49:6a:5e:97:e9:67:9a:62:98:b7:04:86:f3:88:
                    c8:71:21:78:00:25:44:36:10:42:c0:b2:0f:65:27:
                    83:00:0f:b9:8c:7a:b1:4d:e4:8c:8d:5d:d8:3c:c0:
                    58:ab:4f:fc:9f:96:b2:6c:3a:b1:4a:ce:01:0d:c5:
                    79:38:6d:45:ce:ed:ac:13:99:c7:1f:f5:7b:3c:cc:
                    80:a2:b9:b9:9a:e1:66:ff:48:b3:fb:01:cd:71:2b:
                    55:da:e6:cc:73:35:f9:08:d3:df:88:c2:96:b6:61:
                    20:98:c6:ec:27:8b:3e:a5:ee:09:e0:ba:f2:90:e6:
                    c6:8c:77:cf:72:0e:79:33:ec:cf:84:69:db:13:02:
                    8c:02:1f:35:b5:f1:bd:93:d1:73:7f:01:7e:b3:68:
                    30:bc:34:69:0b:9e:7d:fe:4c:84:28:9e:74:01:d6:
                    be:55:54:b2:87:57:a6:25:f7:00:97:9b:bd:ec:ce:
                    2a:b4:77:73:55:9d:01:3c:8d:74:61:47:4b:e6:d7:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:79:A5:66:3F:9F:DC:BF:A3:04:86:45:65:28:6F:AF:8D:78:0E:3E
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ZHmlZj-f3L-jBIZFZShvr414Dj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:57:9a:61:0b:72:68:9b:4f:a7:a9:15:c2:96:b8:c0:74:
         6a:a5:f9:71:b4:63:7c:6c:10:63:2f:48:bd:bb:82:07:89:55:
         99:c2:78:43:26:80:54:57:ca:ad:e6:58:16:ee:d4:72:cf:69:
         cd:cd:d9:da:6a:9a:32:61:3d:28:8f:43:c8:cd:ac:78:d3:bd:
         00:03:4a:3a:c3:12:26:52:4d:49:77:ac:b0:c7:73:c6:70:51:
         59:72:f0:c5:b3:d4:ff:d7:d7:b0:8b:a3:67:f6:6f:c1:d0:27:
         e8:4e:81:6d:65:d1:68:dd:57:09:4f:24:50:50:79:9c:3a:2b:
         11:b0:9a:b9:5b:7e:e5:94:25:3d:e8:4c:5d:7a:01:0b:27:56:
         f1:29:c7:02:7f:00:12:18:4b:56:bf:e5:fa:67:8f:60:48:e5:
         f5:da:1d:11:c4:46:1e:9f:e6:5a:83:fc:d2:83:d1:18:c9:ad:
         cf:76:4c:78:d7:79:e2:ae:43:db:c9:09:3f:81:e6:5f:33:5c:
         88:bd:62:a8:f8:89:24:7e:59:97:84:2f:eb:91:0b:b7:03:73:
         d8:d9:45:e6:18:19:de:65:8a:d0:e5:75:ac:39:f4:85:db:d6:
         d7:a5:77:be:32:2f:dc:60:0f:57:75:f2:21:11:84:a7:df:c1:
         fa:66:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:09 2023 by rpki-client on console-ams.rpki-client.org