Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/hsvqZMgkmcC3O5c6igml5rPG6Fc.roa
File:                     hsvqZMgkmcC3O5c6igml5rPG6Fc.roa (raw, json)
Hash identifier:          7boAv50rGAt6b4zo6MMKus5zC88u9ejscNQ4I21A0yA=
Subject key identifier:   86:CB:EA:64:C8:24:99:C0:B7:3B:97:3A:8A:09:A5:E6:B3:C6:E8:57
Certificate issuer:       /CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Certificate serial:       0183ECA52E5F58448AE80F0487C310C7E5A5
Authority key identifier: 47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/hsvqZMgkmcC3O5c6igml5rPG6Fc.roa
Signing time:             Tue 18 Oct 2022 19:49:51 +0000
ROA not before:           Tue 18 Oct 2022 19:49:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211439
IP address blocks:        94.103.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ec:a5:2e:5f:58:44:8a:e8:0f:04:87:c3:10:c7:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
        Validity
            Not Before: Oct 18 19:49:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=86cbea64c82499c0b73b973a8a09a5e6b3c6e857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f5:66:15:8a:54:b6:b0:fc:da:84:28:a9:92:
                    6f:3c:51:25:1c:8d:57:6f:45:31:62:8a:07:2b:52:
                    e5:fe:5d:bd:1e:ea:98:cc:a8:e0:9c:74:46:3f:37:
                    80:18:58:e4:66:49:84:23:18:70:24:03:47:75:b8:
                    08:d2:28:47:ba:bd:db:19:a4:5e:53:af:e2:4d:6a:
                    ee:6e:a4:80:5e:22:74:6c:2a:d2:12:47:a8:ea:eb:
                    77:ec:78:c9:0d:92:33:bc:64:d7:1d:e2:0e:66:15:
                    56:0a:9a:04:b0:61:c9:0a:e4:d0:d6:9c:da:25:10:
                    f2:c8:b3:f0:fb:a3:e0:06:e4:f4:9f:7c:7e:02:05:
                    8f:ac:93:b5:a3:9e:ca:33:26:1f:f1:27:43:cd:1f:
                    35:ae:bf:8f:d4:30:ca:fe:13:7a:06:4d:1e:59:d3:
                    60:f0:a9:c0:b4:fb:9f:77:b3:d9:86:69:9a:27:44:
                    b7:af:3f:72:a0:9e:08:54:30:ad:9e:4d:df:bc:37:
                    7c:c4:fa:e9:d8:eb:e2:37:21:6f:70:d7:cc:39:e1:
                    09:42:c3:d6:ba:23:80:8b:77:41:71:2c:b9:82:37:
                    da:78:da:9c:3e:df:d9:50:04:70:f0:0c:f9:f9:ab:
                    e4:87:06:11:91:42:59:68:4c:67:17:ca:f8:58:32:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CB:EA:64:C8:24:99:C0:B7:3B:97:3A:8A:09:A5:E6:B3:C6:E8:57
            X509v3 Authority Key Identifier:
                keyid:47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/hsvqZMgkmcC3O5c6igml5rPG6Fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R9n54WpBUwvCq6oY8Xp0VgF3IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:76:bd:55:70:8c:37:48:e2:d8:e1:ee:c7:97:e9:2e:05:b0:
         fb:e0:d5:8f:27:29:6e:51:28:6e:28:a0:9c:c3:2a:d5:df:91:
         2a:2b:09:10:a8:f9:aa:35:84:ba:83:71:a6:89:30:95:78:b7:
         c8:c3:a0:db:59:fc:94:03:78:ea:9e:17:70:f5:80:b4:e6:58:
         ae:78:76:22:a6:35:89:0e:fc:e5:1f:ee:57:05:5a:47:2f:64:
         de:fd:a0:6b:93:51:2a:d6:00:91:23:04:45:9d:2c:cc:5d:1d:
         19:ee:93:d3:ad:46:1e:06:71:41:45:59:e7:b2:dd:58:b5:08:
         7a:ad:56:68:b7:ef:e6:b3:b2:39:61:8e:c0:0d:24:04:42:4f:
         a9:28:b3:a2:b9:ec:c7:08:24:78:2b:28:99:d6:42:28:c8:ce:
         91:36:62:41:f9:0e:5b:f6:fc:cb:dd:cf:b5:e2:a7:54:c9:95:
         68:7c:92:1d:2a:38:70:fd:a2:8c:55:b2:fc:1b:d8:25:27:8a:
         e7:b6:ef:3c:16:c1:29:b4:6d:40:a6:a1:84:17:3e:b6:3d:d7:
         f7:75:f0:fb:4b:c3:0c:f7:c4:1c:2c:e5:25:d4:cb:b0:45:8b:
         54:34:ab:e0:84:b1:dd:a5:8b:1e:e2:f7:90:a0:b6:df:a4:9a:
         38:82:d1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:23 2023 by rpki-client on console-ams.rpki-client.org