Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/m41o1WmUPRqDdmmh1t4_TDnTmko.roa
File:                     m41o1WmUPRqDdmmh1t4_TDnTmko.roa (raw, json)
Hash identifier:          M48ROEXQx0jh38ITbxt3IAEIkSyf8oq8QsTCkYZiBFs=
Subject key identifier:   9B:8D:68:D5:69:94:3D:1A:83:76:69:A1:D6:DE:3F:4C:39:D3:9A:4A
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       10B63B46
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/m41o1WmUPRqDdmmh1t4_TDnTmko.roa
Signing time:             Sat 01 Jan 2022 13:02:15 +0000
ROA not before:           Sat 01 Jan 2022 13:02:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12741
IP address blocks:        82.160.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280378182 (0x10b63b46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Jan  1 13:02:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b8d68d569943d1a837669a1d6de3f4c39d39a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:09:23:e0:5c:81:53:1f:37:e8:61:5c:e1:
                    2e:f8:a1:da:42:ad:88:b3:72:08:c2:41:fa:18:28:
                    85:7e:91:cc:55:20:32:e0:a3:42:76:82:f7:43:2c:
                    1d:65:61:71:44:e0:87:c7:4f:42:96:76:8a:94:ba:
                    d6:01:41:4c:df:cb:e8:0a:c1:08:b9:63:2e:df:7b:
                    3d:db:7c:88:cf:a3:dc:d5:93:fa:8d:ee:89:8b:08:
                    7b:6f:03:2f:9b:be:4a:86:6d:40:cc:50:e1:4e:20:
                    ad:24:9d:34:7e:22:4b:f0:80:7a:47:13:dd:a8:03:
                    29:2d:6c:c1:23:d7:ae:12:d3:fd:6e:37:92:19:75:
                    6b:b8:52:10:91:9a:30:36:cd:d0:32:7f:9e:bd:65:
                    1e:98:14:2a:5c:44:e1:b0:9d:dc:b3:c1:5f:34:68:
                    fd:c2:98:c5:06:27:ff:1d:36:8d:d5:47:4f:05:47:
                    ca:9b:33:10:26:21:d4:b8:46:a6:96:2d:45:85:c8:
                    d8:55:ad:94:fc:cc:5c:54:f9:f8:1a:cc:6e:ba:0a:
                    27:b0:3b:01:37:f2:f5:4a:b8:1f:af:05:f1:0e:cd:
                    c7:3b:b2:e4:a9:f9:c7:0b:7b:38:8a:74:f9:1e:8e:
                    1b:fc:28:c6:ee:b0:cc:f7:41:b9:ce:1f:24:5d:e0:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:68:D5:69:94:3D:1A:83:76:69:A1:D6:DE:3F:4C:39:D3:9A:4A
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/m41o1WmUPRqDdmmh1t4_TDnTmko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.160.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:b6:08:23:ae:68:05:02:fd:d9:2b:3f:61:37:79:66:61:
         ea:d6:61:9c:27:f4:b5:2b:3b:f3:a1:bc:13:b1:59:d1:c7:3b:
         53:7b:4d:eb:cc:36:25:83:46:17:d3:e2:e6:07:9b:8e:a1:44:
         00:dc:75:69:ee:e0:56:80:ca:dd:bc:43:a9:3f:4c:69:c1:04:
         72:1a:9d:bf:80:50:51:53:0d:e3:0c:b3:a3:9b:a7:0b:6f:4d:
         d9:3a:b0:5f:af:35:80:d2:84:cf:83:28:fc:4c:ca:92:1d:26:
         f8:dd:ea:26:94:f2:78:0e:99:ba:e6:cc:b1:ac:4c:89:ee:9c:
         e9:20:4d:bf:54:45:4a:37:a2:5e:9d:91:a5:54:18:15:13:fc:
         50:16:54:36:e7:b9:13:c4:17:45:43:76:b2:97:01:63:29:37:
         31:e5:c1:b8:a5:02:9e:9a:17:b0:82:67:d5:9b:4f:6f:0a:4a:
         ba:65:dc:8a:4a:5e:af:3e:0e:fb:1b:84:4d:0e:d3:1a:14:74:
         e7:db:cc:90:f8:95:87:4a:f2:2f:4a:c6:35:1b:8f:36:b5:94:
         1b:3b:8c:ae:93:8b:7f:b6:77:4b:62:02:a8:1c:df:c8:cd:b7:
         79:f0:16:aa:3c:87:77:8c:77:07:ef:3b:0e:ca:cf:74:03:0e:
         7f:a9:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org