Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EBg3kb_WZ1fYSr7Vhf_AAaptJ8I.roa
File:                     EBg3kb_WZ1fYSr7Vhf_AAaptJ8I.roa (raw, json)
Hash identifier:          xjpno6+zLRsoofMsowkbZr+f5y0w4XliKwmUkVPgO1w=
Subject key identifier:   10:18:37:91:BF:D6:67:57:D8:4A:BE:D5:85:FF:C0:01:AA:6D:27:C2
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       03E8B18A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EBg3kb_WZ1fYSr7Vhf_AAaptJ8I.roa
Signing time:             Sat 01 Jan 2022 13:04:12 +0000
ROA not before:           Sat 01 Jan 2022 13:04:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209835
IP address blocks:        185.227.100.0/24 maxlen: 24
                          185.227.100.0/23 maxlen: 23
                          185.227.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65581450 (0x3e8b18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 13:04:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10183791bfd66757d84abed585ffc001aa6d27c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:05:f2:33:3c:ba:a0:10:0a:2b:2b:d6:07:
                    a9:3e:b8:8c:fa:04:8d:dd:c1:68:b4:8b:ca:43:3f:
                    d6:55:13:10:64:11:a3:4d:3e:c9:13:ad:68:6a:83:
                    a2:66:e8:62:f8:88:29:2d:14:24:d9:75:68:ea:7f:
                    7b:e5:8e:8a:d9:e1:ee:74:db:b1:22:a3:3c:3f:2e:
                    5c:0e:75:e9:ca:79:38:83:e8:b1:75:b3:57:a0:aa:
                    19:3b:54:67:4a:b4:02:ea:3d:5d:73:01:5d:f4:64:
                    1b:8d:37:65:3e:e1:03:42:57:cf:b1:ad:f6:1b:18:
                    fe:f2:aa:28:b7:40:17:fc:f7:a8:a7:ad:38:a9:56:
                    56:2a:b1:00:3f:28:3d:62:63:91:02:4b:10:3e:6a:
                    89:e4:ed:f0:b7:b1:b7:7c:3c:5f:b9:c7:b4:a5:fc:
                    ef:c4:ce:9a:6b:a7:04:f8:fb:49:36:99:1a:ba:b9:
                    47:72:88:4b:c8:c3:e4:96:2e:bd:14:89:c9:0c:65:
                    f9:e6:a5:00:f5:3d:1c:f8:3b:e2:d5:41:3a:ba:b6:
                    0a:55:26:fb:c8:a2:be:a9:71:91:56:72:88:eb:0f:
                    f4:a9:6d:21:89:10:30:f3:72:53:13:e1:4a:05:85:
                    52:f5:17:86:54:7d:3b:65:d6:d9:e2:45:dc:96:3c:
                    81:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:37:91:BF:D6:67:57:D8:4A:BE:D5:85:FF:C0:01:AA:6D:27:C2
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EBg3kb_WZ1fYSr7Vhf_AAaptJ8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:b9:3f:44:c8:ac:08:68:7e:c6:be:6b:cd:49:3d:7c:c2:
         40:f7:9f:d6:ee:a6:cb:3f:93:51:86:47:be:0a:5e:18:b2:7e:
         79:26:93:80:6e:46:51:09:0c:03:73:a1:6b:30:be:dc:58:a3:
         02:24:01:ee:e4:6d:6c:53:c1:aa:7d:3c:0a:be:07:c4:d1:55:
         c9:17:4b:b7:f7:54:a0:f6:00:ca:02:0b:9b:7a:0b:b7:e6:12:
         f4:74:13:4c:64:a2:dc:61:0d:b5:1e:44:4d:8c:90:6d:e5:76:
         45:3c:40:2d:ac:47:23:d4:83:b3:1e:0a:97:f5:13:c3:87:e5:
         10:d1:10:f0:bc:6e:06:f1:6f:4f:05:c0:04:1c:27:e5:97:76:
         14:1a:ad:3c:f3:76:1e:bc:a0:a1:04:fd:08:a2:b0:d4:9c:e8:
         ba:5c:34:19:ad:f0:2c:31:90:9a:f2:e0:57:b5:0c:db:c0:46:
         0f:b3:1a:e5:11:81:78:be:0b:4a:22:48:da:af:44:67:21:9f:
         a2:60:50:0e:dc:52:d1:80:27:e3:00:41:b9:c0:20:00:d8:e1:
         10:a6:a2:83:8f:3b:d7:34:a6:52:bb:d9:71:22:8a:34:a7:56:
         3c:eb:a3:a6:4a:d1:40:9b:a1:c7:cc:8c:ed:93:34:4e:b7:a3:
         56:22:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org