Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/GZxxHOhnbiXHDhnN5MNCt0_gurw.roa
File:                     GZxxHOhnbiXHDhnN5MNCt0_gurw.roa (raw, json)
Hash identifier:          wL2me5nrgrhTKkw7YMwtMD9vedsJWTJcRxsl4AftiCQ=
Subject key identifier:   19:9C:71:1C:E8:67:6E:25:C7:0E:19:CD:E4:C3:42:B7:4F:E0:BA:BC
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       377A31C0
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/GZxxHOhnbiXHDhnN5MNCt0_gurw.roa
Signing time:             Mon 07 Feb 2022 09:30:24 +0000
ROA not before:           Mon 07 Feb 2022 09:30:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43665
IP address blocks:        193.10.30.0/23 maxlen: 23
                          193.10.29.0/24 maxlen: 24
                          193.10.160.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930755008 (0x377a31c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Feb  7 09:30:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=199c711ce8676e25c70e19cde4c342b74fe0babc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:25:30:8a:9f:3e:e8:ff:f0:44:b7:3f:b4:
                    fb:7c:9b:01:81:23:39:81:5d:a2:78:3e:d9:41:c3:
                    9b:bc:20:3e:61:83:19:a8:89:45:88:8b:1a:0a:8f:
                    24:b0:83:98:ef:2b:45:14:85:4e:77:66:ae:c9:19:
                    05:91:a2:d6:49:b2:a3:27:ae:ee:04:6c:a5:71:a0:
                    4a:86:bd:5f:a4:4a:4c:85:a4:f2:97:d6:ce:34:90:
                    38:ad:cf:7a:a7:63:6d:bf:8a:9b:ba:01:c3:73:0e:
                    1e:9d:07:93:35:5d:b9:09:c2:a1:a4:88:c3:27:63:
                    80:73:86:10:2e:ef:b8:ff:25:d5:f3:c7:9a:4f:1e:
                    ff:5a:f7:86:a1:a4:2d:1f:97:43:28:6f:36:2f:8a:
                    e6:31:bd:6b:c8:25:09:a6:44:08:7e:8e:0a:0f:b4:
                    57:b5:e0:22:28:91:6a:8d:1e:b2:a4:1a:b3:b8:bd:
                    2e:a2:48:ce:de:53:97:b1:24:fc:7f:2f:b7:7e:cd:
                    c3:02:25:9e:90:5c:fb:59:b6:81:7d:08:4f:ef:1d:
                    c8:39:06:b6:f9:16:68:b4:f7:47:70:13:90:28:9f:
                    09:00:4d:39:2b:cc:dc:e7:c0:b4:50:d1:37:2c:04:
                    21:c7:9c:4b:1c:f2:50:97:1b:cd:49:33:0d:b0:c8:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:71:1C:E8:67:6E:25:C7:0E:19:CD:E4:C3:42:B7:4F:E0:BA:BC
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/GZxxHOhnbiXHDhnN5MNCt0_gurw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.10.29.0-193.10.31.255
                  193.10.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:1f:e9:69:5a:1a:e0:98:ea:a8:de:81:52:21:67:af:1f:
         eb:8f:4c:ee:7f:1b:36:26:1a:43:af:a4:e6:9d:dd:bf:62:04:
         16:31:76:03:29:1a:c5:ee:68:b3:ce:a6:23:8d:fe:a3:fe:a5:
         d4:a7:48:ea:fc:cd:80:b5:29:49:0b:17:b4:a5:78:bf:aa:b4:
         07:95:d0:77:2e:2c:38:e5:27:37:83:70:e8:31:70:fe:86:a2:
         dd:9c:6b:4f:32:16:64:19:a9:a6:2b:01:32:9d:06:4a:c4:28:
         d0:43:bd:cd:14:9b:14:96:2a:47:f6:0b:ba:0e:9e:af:93:a0:
         b7:dc:dd:ac:88:7b:56:19:15:a0:d3:c4:5f:e9:a8:dd:a6:c3:
         84:89:2e:7d:c3:09:82:01:e6:63:7e:9a:a6:f3:64:60:1d:51:
         d1:92:cb:99:db:e9:a0:66:b4:b6:ea:27:60:86:aa:a5:7f:d5:
         a0:9b:26:c9:bc:56:08:64:22:5b:6a:8c:e5:ba:49:b0:78:e3:
         b0:ad:7d:64:4f:b9:ed:d3:11:a3:2d:e1:17:94:2e:b3:69:ab:
         48:37:74:45:7b:d8:b9:dd:09:11:e9:4d:a3:d3:6c:3f:f8:01:
         28:a7:dd:c8:0f:c1:92:ee:9d:f6:7c:ac:fc:dd:10:69:e6:2f:
         68:9c:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org