Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gEYbv6muTELDwkhXR8GvwkYyyFw.roa
File:                     gEYbv6muTELDwkhXR8GvwkYyyFw.roa (raw, json)
Hash identifier:          ESjHXk0YPLC7JnJliZEgxGmF9XKfIhTgqmvl2mqs3+4=
Subject key identifier:   80:46:1B:BF:A9:AE:4C:42:C3:C2:48:57:47:C1:AF:C2:46:32:C8:5C
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27E93062
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gEYbv6muTELDwkhXR8GvwkYyyFw.roa
Signing time:             Sat 01 Jan 2022 16:09:07 +0000
ROA not before:           Sat 01 Jan 2022 16:09:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59888
IP address blocks:        93.170.15.0/24 maxlen: 24
                          146.158.74.0/24 maxlen: 24
                          146.158.74.0/23 maxlen: 23
                          146.158.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669593698 (0x27e93062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80461bbfa9ae4c42c3c2485747c1afc24632c85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:a8:31:90:7b:74:98:34:1b:0c:b4:6a:07:
                    f4:05:24:60:17:66:9e:be:d2:8e:ff:7e:4e:77:e5:
                    ff:8b:b0:db:1c:71:ab:29:9c:fa:8c:45:e1:c3:35:
                    aa:26:e5:b9:a0:14:77:5e:b6:c9:00:a5:2d:59:a8:
                    9b:7f:83:a0:d0:66:34:3d:32:8f:03:92:63:e3:4c:
                    f4:84:1a:70:19:79:db:aa:71:68:21:dd:f1:09:7d:
                    cd:34:8d:32:00:20:47:30:0d:36:70:8a:55:49:e0:
                    ae:bf:cd:4a:24:40:86:90:76:e5:61:5b:e4:83:ec:
                    00:b0:f6:8b:86:bf:d7:ef:78:8a:91:bc:3b:b0:6b:
                    5f:78:10:d4:20:1a:a5:3a:bc:ab:7e:01:38:a1:51:
                    a0:fb:eb:71:7a:13:9e:8f:79:4d:cb:34:0a:ad:3a:
                    34:e6:45:87:bb:54:76:20:a0:5e:fa:cf:25:d8:5b:
                    5d:f4:cd:f8:26:d0:3a:d4:12:19:16:4b:55:0d:8c:
                    25:53:77:6e:ea:6b:0c:e2:6c:d9:fd:93:d6:37:0e:
                    3a:db:d8:a5:ff:99:3f:85:cf:d2:d0:81:45:ff:ef:
                    63:ed:2e:8f:75:67:69:5f:c5:d7:d9:7a:1f:25:db:
                    56:a8:d3:ca:1b:44:8c:97:de:4d:0e:69:93:81:59:
                    03:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:1B:BF:A9:AE:4C:42:C3:C2:48:57:47:C1:AF:C2:46:32:C8:5C
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gEYbv6muTELDwkhXR8GvwkYyyFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.15.0/24
                  146.158.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:22:57:61:10:2e:39:dc:5e:5a:e2:a4:c5:bc:94:e2:93:ca:
         3b:89:d1:45:7a:ea:42:0d:5f:69:a5:f4:7a:a6:06:0c:bd:0e:
         42:37:1b:0f:95:fc:42:55:20:a2:ad:be:dc:86:53:06:d7:09:
         53:28:8f:9e:45:6e:b2:d7:4a:63:a5:45:e7:6e:be:35:0e:bd:
         de:53:d6:2a:d6:49:38:01:a1:0f:24:be:3e:23:77:5f:64:ab:
         fd:a5:7b:46:ca:d6:ac:88:65:8a:a3:31:36:7e:dc:e4:a4:cd:
         de:60:ae:56:9f:7c:25:a6:56:53:7d:9e:16:4c:dc:55:78:ab:
         3f:81:51:55:cd:74:b9:78:5d:6a:72:27:da:80:b5:32:13:cf:
         02:e1:00:84:d8:34:3d:5b:ef:9a:68:3f:c2:1b:2d:8c:76:08:
         fb:7f:b3:e5:71:39:67:30:a5:ab:f7:0a:7a:0e:2d:67:10:95:
         9c:a4:4c:f0:9e:9d:4f:e3:46:12:38:88:dd:ed:6f:27:22:0b:
         41:7b:a6:e1:0e:a0:04:b2:86:14:8e:50:34:8b:ba:fe:8e:d3:
         db:b6:70:c8:ad:a5:c0:10:53:24:f2:d0:df:12:23:b9:7c:0c:
         43:d9:32:2e:59:8a:a3:bf:4e:ee:44:8a:75:75:88:fa:4e:42:
         0b:23:f4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org