Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/BR8c1-8WN0NIJQ70FkkXLL5g9vs.roa
File:                     BR8c1-8WN0NIJQ70FkkXLL5g9vs.roa (raw, json)
Hash identifier:          IY7Ky3GSRSXcV9S8RDglrB629ay7Vpk2fZpqaBGWvEM=
Subject key identifier:   05:1F:1C:D7:EF:16:37:43:48:25:0E:F4:16:49:17:2C:BE:60:F6:FB
Certificate issuer:       /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial:       0181E348BF5B250FA64BF45873116FC83D28
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/BR8c1-8WN0NIJQ70FkkXLL5g9vs.roa
Signing time:             Sat 09 Jul 2022 14:06:44 +0000
ROA not before:           Sat 09 Jul 2022 14:06:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62343
IP address blocks:        93.115.209.0/24 maxlen: 24
                          93.115.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e3:48:bf:5b:25:0f:a6:4b:f4:58:73:11:6f:c8:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
        Validity
            Not Before: Jul  9 14:06:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=051f1cd7ef16374348250ef41649172cbe60f6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:52:c8:f7:6a:2a:33:28:72:d4:ed:41:cf:96:
                    ff:ea:c8:14:cb:2c:82:1a:2b:52:0d:f8:cf:27:eb:
                    ee:66:f2:5c:92:0f:57:83:e7:d6:ea:ce:c6:ff:a8:
                    8c:65:ab:e9:c5:29:3d:aa:67:5e:35:cc:df:94:2b:
                    35:00:12:3c:f1:23:e3:29:55:80:df:f6:04:1a:e3:
                    37:7a:08:f2:dd:41:ff:4f:0f:8d:41:81:75:ec:a7:
                    1f:cf:d6:c4:13:71:2f:45:4e:d2:60:1b:ca:7c:21:
                    61:5d:27:42:85:33:ad:8b:19:b8:50:8a:90:95:4e:
                    3f:5f:e6:7c:86:7a:cf:14:c9:6d:a3:9e:9b:1c:53:
                    89:77:a7:71:eb:90:b7:5b:56:6c:a9:07:ae:2e:70:
                    f7:a7:45:61:3c:1e:d6:04:bb:51:f8:bf:bf:07:6a:
                    a0:38:42:29:2b:8f:90:c3:6e:d5:5a:51:0f:a8:45:
                    56:55:72:bf:74:4a:63:f1:ee:cd:0b:bd:a9:5e:7e:
                    60:6f:7f:b0:67:b3:b9:fc:6a:00:82:1f:2d:44:ca:
                    4d:fe:e7:66:1c:a8:37:58:41:61:32:86:84:68:1d:
                    58:fd:e9:ce:50:e0:0d:bd:8f:14:9b:2b:9c:91:3b:
                    af:63:01:d7:13:69:96:26:ae:99:c5:8f:bf:5f:db:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1F:1C:D7:EF:16:37:43:48:25:0E:F4:16:49:17:2C:BE:60:F6:FB
            X509v3 Authority Key Identifier:
                keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/BR8c1-8WN0NIJQ70FkkXLL5g9vs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:65:83:84:89:44:a4:3b:52:7b:1f:c6:48:3b:8e:d6:b5:57:
         8f:3f:14:a2:ca:84:56:ef:d9:f1:c8:b5:00:ef:b6:73:03:2b:
         60:c0:a3:6f:59:d7:6d:7e:14:ba:a3:2d:65:b0:06:ff:c1:e3:
         64:d4:aa:12:73:9e:1d:25:93:d8:9e:30:9a:81:27:5e:10:47:
         ce:29:3d:67:e6:2d:b9:62:ff:3c:df:df:02:b3:81:c2:14:6d:
         11:f0:1e:f2:5d:48:3e:d0:da:59:13:7a:18:3d:95:13:b0:4b:
         1d:30:a2:2e:f3:55:ce:16:79:35:95:55:b4:dd:43:d9:96:a0:
         79:96:53:ca:d6:21:97:c1:0d:6f:91:06:78:13:95:8c:e7:83:
         f9:36:bc:21:22:e4:a5:8a:43:38:d8:42:b1:ac:b3:c9:af:17:
         3c:c9:7e:2b:28:d3:28:10:a4:39:08:b9:1f:3b:0f:6c:ea:53:
         f4:c9:6d:f6:cc:3d:1d:87:b0:2e:17:60:ba:c5:ae:2b:04:cb:
         57:31:77:62:18:61:88:d5:39:04:9e:9f:01:dd:d6:f3:6a:7b:
         1e:f0:e9:af:0d:0c:91:2b:a8:5d:97:b1:3e:e1:0d:14:71:8f:
         0c:8b:5f:20:7b:09:42:66:4b:2d:4f:1f:08:8c:1c:1b:8d:d3:
         5e:8c:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-fra.rpki-client.org