Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/so4gsYturwG_ImMNEYBfd--7cCs.roa
File:                     so4gsYturwG_ImMNEYBfd--7cCs.roa (raw, json)
Hash identifier:          e9Zdn9fQVsgmnZDeOcjUNaEAWXAuIvaNI/LnBsbHZdk=
Subject key identifier:   B2:8E:20:B1:8B:6E:AF:01:BF:22:63:0D:11:80:5F:77:EF:BB:70:2B
Certificate issuer:       /CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Certificate serial:       38193F
Authority key identifier: 29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/so4gsYturwG_ImMNEYBfd--7cCs.roa
Signing time:             Thu 24 Feb 2022 09:28:43 +0000
ROA not before:           Thu 24 Feb 2022 09:28:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        185.81.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3676479 (0x38193f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
        Validity
            Not Before: Feb 24 09:28:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b28e20b18b6eaf01bf22630d11805f77efbb702b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:2e:cb:64:53:29:ea:f2:61:2a:77:0e:d2:
                    37:e3:ec:3e:4e:5c:71:a5:b0:78:cb:75:35:25:2f:
                    c7:56:42:80:ee:13:6c:7d:c9:b6:1a:7a:26:31:be:
                    88:3e:30:ad:ff:d3:9e:e5:d0:64:80:db:28:10:2a:
                    15:a0:64:13:ea:66:01:a5:24:26:d2:72:f2:53:75:
                    4f:13:fe:d8:5e:d1:9f:ed:6f:d3:91:9b:3a:82:74:
                    fd:0f:9c:8d:8f:77:34:5c:14:c0:31:7f:a9:14:23:
                    6e:7a:02:80:39:9f:36:89:34:08:9a:62:75:33:d3:
                    60:05:18:55:99:8c:c6:52:9b:d9:6a:c5:58:a4:6f:
                    4c:e3:94:3c:ca:d1:f3:9d:1d:4d:c8:59:ac:93:d7:
                    40:1e:aa:01:12:ce:22:b9:d9:88:82:14:27:85:48:
                    ad:57:4e:a7:48:8e:c7:ad:23:83:f9:a8:45:d1:e4:
                    28:17:5b:54:74:45:60:60:5e:09:c6:39:8c:25:0d:
                    9e:d9:f6:11:f0:7e:80:00:56:75:c1:2d:77:30:b7:
                    c3:1a:42:6e:45:47:5a:28:a3:1d:06:fc:28:82:ff:
                    ae:57:8c:00:19:63:ce:99:1f:ae:8e:d7:b9:de:6a:
                    d3:4c:80:1f:63:aa:4c:7d:8a:4a:c2:0d:8f:47:5a:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8E:20:B1:8B:6E:AF:01:BF:22:63:0D:11:80:5F:77:EF:BB:70:2B
            X509v3 Authority Key Identifier:
                keyid:29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/so4gsYturwG_ImMNEYBfd--7cCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/KSxdNyMZ-mF15WynmIPRKwxuOOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:92:50:42:be:44:d4:b9:21:e7:5e:fa:58:25:ae:5b:37:
         5e:3f:86:1d:23:60:65:d7:58:62:0e:c4:28:e1:6a:2d:2f:ff:
         fe:49:17:6b:87:bf:b5:e6:52:45:a5:9d:a2:2c:22:17:21:3a:
         bc:eb:7a:c4:fc:34:09:2e:6a:19:25:2c:e0:78:80:13:fb:1f:
         46:6c:bd:4c:75:e7:e0:be:18:f4:13:7d:89:21:22:14:e4:cf:
         17:60:e9:94:0c:fc:95:73:1f:c4:05:b9:d5:15:13:78:ce:e1:
         e3:f9:54:de:2f:6f:32:09:df:75:aa:96:8b:53:7a:b6:e2:13:
         23:fa:66:e9:c7:cb:bd:35:84:2a:3c:fe:be:49:0d:5e:6d:e0:
         d2:40:40:47:9c:7d:01:9d:d4:07:a8:43:2a:bb:fb:aa:2e:6d:
         e9:18:45:ce:7e:59:b7:d0:c6:d0:1e:46:86:24:28:a3:90:44:
         d5:cb:b0:56:06:0f:72:af:ba:35:80:8b:d0:d9:08:98:b1:7c:
         16:9a:d1:c9:7e:92:fd:a7:a0:fe:c4:e1:a9:2f:16:e7:7a:03:
         76:cc:5a:2a:59:e7:1c:d7:47:35:1c:7f:28:ba:22:cb:46:f8:
         b0:7c:0f:24:f1:85:74:d5:11:b2:37:30:e5:c5:f3:de:5c:59:
         90:24:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-fra.rpki-client.org