Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/BVXEUbC1b8fjnjkrIHNWTEfY7gI.roa
File:                     BVXEUbC1b8fjnjkrIHNWTEfY7gI.roa (raw, json)
Hash identifier:          DKrG1aMN79fQhK++rIWR2IdC+uXFX8AufnDIeEXNj5c=
Subject key identifier:   05:55:C4:51:B0:B5:6F:C7:E3:9E:39:2B:20:73:56:4C:47:D8:EE:02
Certificate issuer:       /CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
Certificate serial:       C4ED6C
Authority key identifier: B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/BVXEUbC1b8fjnjkrIHNWTEfY7gI.roa
Signing time:             Tue 26 Apr 2022 14:45:33 +0000
ROA not before:           Tue 26 Apr 2022 14:45:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        93.177.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12905836 (0xc4ed6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
        Validity
            Not Before: Apr 26 14:45:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0555c451b0b56fc7e39e392b2073564c47d8ee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:ae:b9:e0:50:1c:35:a5:9b:18:f8:1a:15:
                    f2:30:28:10:e6:15:00:a7:83:1b:98:bf:2b:f9:38:
                    9a:54:bd:e8:44:70:10:0a:8e:a8:8a:ac:0b:4b:30:
                    ef:c7:27:bd:0d:c6:51:9e:39:ab:dd:ac:38:1d:7d:
                    4a:02:b3:de:aa:50:92:b8:9b:22:57:03:cd:3b:67:
                    0a:74:3d:83:4d:c8:01:29:5d:42:a0:80:ab:56:d2:
                    f9:fc:24:1e:75:1f:b5:1a:6e:32:52:fc:18:63:c0:
                    ac:d7:9e:26:c6:63:47:0f:ee:fe:58:35:2a:14:93:
                    49:0b:9c:0b:39:1f:4f:8e:95:48:eb:5b:61:ea:22:
                    53:00:3a:50:b9:59:e8:51:51:10:66:b4:2a:2d:2d:
                    ff:47:d0:fd:37:51:d5:9c:37:11:43:9b:d1:83:33:
                    6a:35:21:fc:7e:61:e0:2c:83:41:8c:a2:1a:f9:80:
                    c9:11:93:d9:35:f3:fb:e0:24:43:ed:c0:e6:a8:0c:
                    ed:d0:10:45:40:de:f9:3d:f5:de:28:bd:8e:50:2e:
                    53:58:2c:7e:61:da:02:86:ee:0f:72:30:ba:ed:46:
                    41:2a:01:bc:90:c3:ff:28:f7:d3:fb:42:be:8a:d5:
                    43:98:e2:ce:ae:09:96:6f:71:86:bd:e2:a1:c0:95:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:55:C4:51:B0:B5:6F:C7:E3:9E:39:2B:20:73:56:4C:47:D8:EE:02
            X509v3 Authority Key Identifier:
                keyid:B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/BVXEUbC1b8fjnjkrIHNWTEfY7gI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:54:95:bb:73:7e:0a:b7:f6:40:a1:f1:19:3d:db:09:57:51:
         7d:e2:f7:8f:83:9f:3b:6b:b6:ed:70:20:f2:6a:6e:7b:68:de:
         ec:7c:cd:30:65:1d:9e:f7:0e:91:24:e3:e9:8f:ca:a7:7c:14:
         a9:bd:4f:8c:14:d1:cc:67:89:85:74:dd:0a:6e:1b:8c:65:c3:
         91:75:26:22:5e:10:2a:ed:d1:5c:36:10:c4:d6:c6:24:1b:d0:
         e7:80:bc:3b:3f:1e:ad:e1:c1:38:b2:a9:f4:85:bd:d3:e9:e4:
         77:d7:d4:72:33:f5:ba:3c:fa:f7:fe:e4:7f:dc:62:90:c3:97:
         e9:b2:54:71:fd:02:b7:d4:13:0a:20:2f:e2:b7:7e:58:39:5c:
         9f:b7:d2:dc:c2:b3:1f:1b:22:ff:06:d0:6f:69:2b:7d:2b:4f:
         e5:17:59:3c:eb:63:88:d9:22:b4:2a:bf:76:99:04:1d:df:e7:
         aa:50:83:53:42:db:19:98:54:b2:87:90:81:6b:aa:f1:c3:09:
         3b:f3:de:59:40:dd:33:34:4b:ef:cd:da:02:70:50:d2:26:4f:
         f6:9c:98:72:4b:62:93:0a:00:b4:d8:7f:a2:4d:d0:ac:99:82:
         14:3c:a7:9d:f3:5d:6b:6a:cd:0a:4e:f8:b7:70:81:90:43:26:
         54:3c:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org