Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/DVt_ZaIqfG0xmxjeAKAvUfV96wY.roa
File:                     DVt_ZaIqfG0xmxjeAKAvUfV96wY.roa (raw, json)
Hash identifier:          mibIqj7KU0iRqGKBNlMBVBY8B+dMWRPyHCuuNgPgmSM=
Subject key identifier:   0D:5B:7F:65:A2:2A:7C:6D:31:9B:18:DE:00:A0:2F:51:F5:7D:EB:06
Certificate issuer:       /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial:       015E2B1B
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/DVt_ZaIqfG0xmxjeAKAvUfV96wY.roa
Signing time:             Tue 22 Feb 2022 10:12:21 +0000
ROA not before:           Tue 22 Feb 2022 10:12:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        194.69.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22948635 (0x15e2b1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
        Validity
            Not Before: Feb 22 10:12:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d5b7f65a22a7c6d319b18de00a02f51f57deb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:88:9a:52:1a:da:0f:f0:29:be:b9:e1:9b:
                    67:6a:ea:26:f6:93:e3:cb:24:1d:b7:c2:c1:a6:f2:
                    26:7e:22:a9:80:93:b5:23:17:b0:e7:89:2d:30:4e:
                    0b:43:ed:95:b1:1a:d2:e4:bb:20:cb:b3:6f:f0:25:
                    ca:e7:19:31:2c:ff:ad:62:c6:98:57:35:15:09:20:
                    77:ba:3c:bf:9f:ad:3e:41:76:a4:fa:ac:42:b3:56:
                    d8:b6:1b:e4:1f:09:39:1b:3e:c8:a6:f8:e7:53:d4:
                    97:3d:0e:81:b2:b7:9c:8f:fb:18:9a:c0:e2:68:a5:
                    87:fe:5f:27:b8:f3:3b:66:3f:25:ec:e2:b6:dd:63:
                    89:3a:0d:e9:07:17:91:1a:5f:39:72:17:ee:17:22:
                    e4:dd:1f:5d:4a:e2:60:7c:15:7a:74:05:26:ce:00:
                    58:c8:8b:27:2b:2a:73:c3:9c:76:e1:81:5c:1c:7a:
                    bb:c1:a2:e3:73:93:ae:da:fc:22:c3:d6:24:12:d1:
                    26:4e:ed:12:39:20:cd:c8:98:e1:67:f6:78:c8:78:
                    f1:c9:1c:ac:b7:12:78:94:34:92:c3:4b:21:ce:8b:
                    94:ba:f5:63:50:ca:14:1e:78:5d:61:ac:ae:f8:1b:
                    ed:9f:5f:8c:d5:70:68:c7:8f:86:87:aa:1d:c8:ec:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:7F:65:A2:2A:7C:6D:31:9B:18:DE:00:A0:2F:51:F5:7D:EB:06
            X509v3 Authority Key Identifier:
                keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/DVt_ZaIqfG0xmxjeAKAvUfV96wY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:1e:f2:44:77:8d:2b:1c:ce:f5:0f:bb:8f:e7:f4:7d:d9:
         1e:8b:3a:ad:de:60:c6:28:63:c2:bb:ed:0a:c9:77:f7:09:74:
         b5:31:74:98:59:ba:ec:22:f2:72:67:99:52:25:b6:e3:ea:4c:
         33:ec:5b:e5:35:88:42:28:b5:d2:ac:91:4d:c0:3a:62:38:29:
         f8:07:93:65:f7:60:ff:9d:ce:e3:62:85:03:0f:df:88:db:2c:
         2b:a5:85:a5:52:0d:36:d2:30:d8:e8:19:0d:a9:6c:b7:52:0e:
         c6:2c:c9:1e:1f:0e:06:e3:54:ac:49:ff:05:51:86:51:40:d0:
         c0:58:21:c1:86:a5:5a:f8:d1:38:ec:af:22:5c:a5:82:03:79:
         e0:f9:42:65:14:85:b7:8a:54:2b:03:97:4a:e5:42:a8:8d:c9:
         2f:b5:5a:55:47:59:5d:9b:fa:9b:09:51:75:44:a4:11:07:d7:
         a5:59:d7:ed:ef:6e:11:9d:08:11:a8:ca:e1:b7:40:66:b1:80:
         3d:e7:69:5e:69:fc:a9:7e:b3:c7:a2:7f:e0:69:5d:41:fe:51:
         8a:17:0a:b0:b0:97:c9:43:91:d8:3e:f4:2c:b0:91:8c:1b:1f:
         05:80:8e:f8:5a:b3:56:4f:5a:3c:0d:cd:b3:5d:6e:1e:25:50:
         89:30:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:32 2023 by rpki-client on console-fra.rpki-client.org