Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8V_65umxPPjEwINdbmf1WOJP47c.roa
File:                     8V_65umxPPjEwINdbmf1WOJP47c.roa (raw, json)
Hash identifier:          xUFNPci5F1wLkBr+veaVnLEHNXhjOgsE42xeRlUYn4c=
Subject key identifier:   F1:5F:FA:E6:E9:B1:3C:F8:C4:C0:83:5D:6E:67:F5:58:E2:4F:E3:B7
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       01827F2F4CDF040101D090A81E4AF4026F14
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8V_65umxPPjEwINdbmf1WOJP47c.roa
Signing time:             Mon 08 Aug 2022 20:39:42 +0000
ROA not before:           Mon 08 Aug 2022 20:39:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206361
IP address blocks:        79.172.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7f:2f:4c:df:04:01:01:d0:90:a8:1e:4a:f4:02:6f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Aug  8 20:39:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f15ffae6e9b13cf8c4c0835d6e67f558e24fe3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:74:0d:7b:df:7f:1a:1c:f9:47:e0:17:9a:
                    d7:55:e3:46:a2:bb:cc:cc:07:a6:7e:9e:a3:ad:b8:
                    17:1e:5c:1e:04:92:75:53:40:ba:21:d8:4e:c5:2a:
                    31:88:3d:e7:fa:57:a9:65:12:02:c6:0e:a8:1b:c9:
                    bf:5c:b2:46:1d:ee:df:fd:6e:28:05:d2:0c:85:37:
                    14:3b:58:72:67:97:99:ca:1a:43:eb:e0:cd:29:e1:
                    68:0b:3e:3d:94:b0:aa:3e:15:05:7d:c6:f6:41:ba:
                    05:75:b4:99:90:47:0e:0c:97:62:a8:4f:79:06:1a:
                    2f:34:19:8a:78:1d:30:62:7b:eb:fa:b9:ac:af:81:
                    ff:82:ba:3f:33:83:f6:6d:e8:ec:dc:b8:53:e4:e1:
                    25:ed:37:a2:28:dd:a8:a6:c0:77:d0:31:a1:05:a2:
                    24:5e:ba:a8:3c:a6:da:44:1e:65:3f:47:ef:3a:85:
                    1a:32:79:41:b5:41:90:18:19:d3:b1:ee:1f:ad:64:
                    54:c1:cc:ce:3f:3a:d1:51:96:11:42:f2:14:7b:22:
                    b5:28:b7:a5:f2:4d:ca:88:52:db:43:eb:1b:65:79:
                    b6:8f:e5:72:43:79:9d:21:3c:93:16:2d:69:fe:69:
                    d1:fd:bc:a9:95:37:1a:4b:44:89:76:a3:bb:ca:68:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5F:FA:E6:E9:B1:3C:F8:C4:C0:83:5D:6E:67:F5:58:E2:4F:E3:B7
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8V_65umxPPjEwINdbmf1WOJP47c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.172.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:f8:6a:61:10:fe:48:1b:a8:cb:1a:ba:fc:32:dc:99:d3:
         5c:85:a4:34:b6:cb:5c:e8:eb:59:ab:fd:82:39:8a:bc:fe:45:
         30:01:c7:91:f3:7b:74:90:c8:26:4e:98:78:0c:30:d5:07:3d:
         bc:41:84:69:03:35:f9:5d:65:aa:28:4e:ce:80:a0:fb:42:27:
         ab:24:6e:98:6b:e3:99:96:0c:67:70:d6:42:7a:be:4f:de:9c:
         4e:8d:94:89:f2:95:4c:48:ae:e6:a8:c4:2a:c4:ab:f2:51:03:
         d7:13:3b:a8:b9:9d:41:47:18:67:6c:20:ef:bd:31:bb:52:ef:
         f3:9a:55:24:bd:b9:9c:55:ba:6a:0c:6b:36:66:27:30:2b:84:
         a0:c1:21:fd:73:71:5a:7c:74:a5:ae:12:2d:4f:7f:49:94:40:
         2b:f3:6e:6a:d7:fb:a2:6f:39:da:2f:b8:0f:61:89:98:96:f2:
         ae:58:b4:f1:63:e4:5f:a7:3b:e8:08:75:4f:e9:55:ad:9d:23:
         5f:88:4d:dc:04:8c:1b:9d:32:c6:76:67:0e:e5:22:b8:1e:02:
         76:56:c4:94:c9:8a:18:5b:86:16:93:00:69:88:9d:a9:d5:92:
         f1:2b:40:dc:dd:5f:e7:88:85:9a:78:14:40:d0:d8:8a:67:0d:
         a8:35:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-fra.rpki-client.org