Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iUt4RC54yxilq96B3SHyY1jskfQ.roa
File:                     iUt4RC54yxilq96B3SHyY1jskfQ.roa (raw, json)
Hash identifier:          f7UQBYisFVPUadafDgRmRJcft43q3zol1zKMpOXbU0Q=
Subject key identifier:   89:4B:78:44:2E:78:CB:18:A5:AB:DE:81:DD:21:F2:63:58:EC:91:F4
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       08CD50C9
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iUt4RC54yxilq96B3SHyY1jskfQ.roa
Signing time:             Sat 01 Jan 2022 14:57:14 +0000
ROA not before:           Sat 01 Jan 2022 14:57:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6724
IP address blocks:        185.127.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147673289 (0x8cd50c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Jan  1 14:57:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=894b78442e78cb18a5abde81dd21f26358ec91f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:a4:db:f7:bd:4c:7f:e3:8a:24:36:ae:73:
                    99:6b:94:6a:64:31:b2:5f:89:ce:6e:63:22:3d:d1:
                    75:74:6b:2d:93:22:5e:07:23:66:3c:f2:cf:d9:e5:
                    ea:09:7a:a4:d4:bb:97:3f:18:dc:e7:06:c1:85:4f:
                    eb:28:af:7b:03:e4:64:39:79:30:12:89:7f:67:58:
                    c7:29:e9:81:c7:aa:b9:9a:0d:a2:1a:39:f8:ee:09:
                    58:ce:fc:ca:06:06:6b:e3:cb:80:1f:cf:90:b0:1a:
                    2c:06:c8:a2:7c:af:cb:ca:f5:82:5d:97:a0:94:1a:
                    05:ca:7e:b7:9b:2e:11:04:1b:91:73:9a:ff:5c:d0:
                    0f:fd:36:95:2c:84:01:ee:17:49:0f:c3:7c:16:7d:
                    63:64:2c:fb:c7:9a:84:8f:a9:c6:3f:29:2a:34:7d:
                    7a:c6:0b:91:4a:9f:37:1d:d5:be:6c:05:28:f0:97:
                    1b:5e:26:09:01:00:95:a1:0e:db:8e:ff:a7:89:d2:
                    d9:64:05:31:dc:5c:d6:cc:49:4d:22:11:ef:23:c0:
                    3c:e1:51:19:d2:8b:30:df:66:2e:ba:1c:53:6e:6e:
                    f4:63:95:0f:ea:bf:3d:c1:dd:32:df:12:cb:41:a6:
                    b9:2e:3b:83:01:13:e4:ae:e0:91:f2:af:db:0f:d9:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4B:78:44:2E:78:CB:18:A5:AB:DE:81:DD:21:F2:63:58:EC:91:F4
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iUt4RC54yxilq96B3SHyY1jskfQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:8d:6b:1c:85:db:e8:6c:50:a4:b1:4a:56:ae:51:e4:be:3d:
         02:58:05:7f:80:63:ec:7f:79:3e:2d:df:5b:65:63:2a:88:04:
         31:0d:09:3a:c4:62:0c:5a:80:20:86:44:bd:7b:cc:8d:bd:02:
         39:11:a6:23:37:79:52:3d:b4:cd:95:7c:e3:e1:0a:30:92:7b:
         fb:7e:d9:3c:16:75:4c:1f:f8:ad:ad:e9:9c:e0:13:f7:b8:db:
         45:a9:90:a0:03:ed:c8:bd:b8:cc:68:7a:fb:f3:4e:d3:42:b4:
         eb:1c:f6:21:8a:11:e7:37:dd:89:28:20:d7:39:01:5f:0b:c0:
         3d:21:5e:c5:26:ba:c5:58:ff:b0:dd:65:ad:54:5c:82:1c:97:
         01:be:d9:44:4d:ec:4e:a2:cd:74:8b:ea:1e:8d:6a:97:f5:25:
         50:fe:a1:f1:b1:e9:38:fb:d4:5c:96:2e:24:75:93:11:69:1a:
         68:d0:01:cf:d0:4c:82:cb:f8:d8:87:99:e3:71:8a:f3:87:04:
         7f:a7:69:78:1d:dd:1c:c4:cf:7b:17:ae:c4:b5:3f:4b:dd:0f:
         95:f8:1a:45:c5:60:01:f0:5d:7f:5f:91:db:2c:dd:ec:32:6e:
         19:87:9a:d1:94:1b:9a:6e:4b:5f:e9:d2:48:0c:5d:16:10:5c:
         b1:f0:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org