Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/cyVsTTeXhU9VVEEp482rvmHnChQ.roa
File:                     cyVsTTeXhU9VVEEp482rvmHnChQ.roa (raw, json)
Hash identifier:          VHGei0FenyuUZHoVidrVu0LP1zpt4jtzxO61W2kedW8=
Subject key identifier:   73:25:6C:4D:37:97:85:4F:55:54:41:29:E3:CD:AB:BE:61:E7:0A:14
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       1F8FBB27
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/cyVsTTeXhU9VVEEp482rvmHnChQ.roa
Signing time:             Sat 01 Jan 2022 14:06:37 +0000
ROA not before:           Sat 01 Jan 2022 14:06:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44066
IP address blocks:        37.114.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529513255 (0x1f8fbb27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Jan  1 14:06:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73256c4d3797854f55544129e3cdabbe61e70a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:8f:5d:28:30:c6:27:5d:0a:20:02:36:71:
                    f6:0d:71:4d:dc:40:9a:f5:5b:f8:06:6c:5b:d4:11:
                    cd:67:bf:91:22:b0:72:a1:8f:4e:c7:d0:61:f3:75:
                    c1:33:70:1f:56:8b:d5:ec:69:16:ea:d4:95:7a:75:
                    74:ec:20:45:82:33:16:89:ec:4c:d4:42:76:ba:23:
                    e7:dd:6a:14:3a:d1:87:98:89:a3:2f:43:de:ae:2a:
                    b0:75:7f:2b:7a:6b:b3:07:5b:4b:24:b6:70:ed:9c:
                    24:45:22:05:77:f4:f9:11:44:e9:8f:06:14:ae:92:
                    e9:92:4f:a0:8a:01:b3:76:86:fb:e7:63:ee:be:53:
                    72:ea:5d:6b:db:06:cf:27:0d:2a:23:67:9a:a6:1e:
                    94:b2:99:23:a1:9b:0f:73:88:12:46:1f:47:af:eb:
                    cb:c9:04:d1:1f:67:2f:87:12:58:42:aa:12:5b:c9:
                    e8:10:4e:11:df:97:aa:de:db:e8:9e:e4:f1:49:87:
                    03:b7:b6:e2:3b:0b:6a:31:b5:5a:4d:ca:70:5f:b7:
                    bb:c3:3f:40:1b:74:f1:3a:3c:df:ed:1e:fa:22:ae:
                    08:4b:ac:0a:67:89:5a:19:a3:b4:57:ee:b3:38:01:
                    d8:24:71:2d:6b:ce:bd:cb:92:46:30:a0:4d:95:97:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:6C:4D:37:97:85:4F:55:54:41:29:E3:CD:AB:BE:61:E7:0A:14
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/cyVsTTeXhU9VVEEp482rvmHnChQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.114.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:10:33:bb:62:39:c3:49:47:87:9a:3f:f9:82:60:64:db:76:
         11:d1:b7:4c:c3:b1:33:a7:25:d3:a1:98:46:9b:85:4f:ca:95:
         f8:4f:28:5a:48:8e:10:a6:cb:ca:03:c2:73:c3:71:c5:28:7a:
         4e:bf:98:d6:8a:13:28:ee:33:96:d6:cc:ca:1b:b1:6e:e1:7e:
         16:9b:ea:47:c8:dd:a4:b5:3a:b9:d8:18:12:37:94:42:38:72:
         88:e0:be:61:38:3f:09:9f:d2:d0:68:ed:77:ec:ad:73:37:65:
         8f:b7:ef:57:18:2e:90:03:b6:e7:c9:4c:d0:e6:d5:0f:66:5c:
         88:bd:11:cd:f7:8e:21:0e:0f:06:87:da:a6:db:02:5d:bd:70:
         c6:84:92:62:cf:61:72:d9:18:4f:bc:ba:05:63:24:e0:c1:fe:
         5f:00:f0:ca:60:05:54:85:b9:04:87:bf:49:b4:0c:94:ce:85:
         a5:f5:02:0f:da:a4:50:55:c2:c4:58:cf:55:7f:d7:3b:5a:04:
         8b:67:f4:3b:19:fc:e1:28:6e:68:a5:2e:07:6d:05:b0:ed:da:
         d5:1a:3e:29:46:50:cf:5e:e2:21:9b:d9:da:bc:d8:35:59:49:
         b6:8a:8e:16:cd:11:82:4f:45:27:59:9b:64:79:a5:41:ef:d4:
         a1:26:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org