Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/FccL8d3EzXrgEbA5KnED4rrmR0U.roa
File:                     FccL8d3EzXrgEbA5KnED4rrmR0U.roa (raw, json)
Hash identifier:          1rP6cPjBaukxwm7bNaHVISYohI3EQ1/PSuylRG3mrK0=
Subject key identifier:   15:C7:0B:F1:DD:C4:CD:7A:E0:11:B0:39:2A:71:03:E2:BA:E6:47:45
Certificate issuer:       /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial:       307ED722
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/FccL8d3EzXrgEbA5KnED4rrmR0U.roa
Signing time:             Sat 01 Jan 2022 05:56:50 +0000
ROA not before:           Sat 01 Jan 2022 05:56:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34370
IP address blocks:        193.227.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813618978 (0x307ed722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
        Validity
            Not Before: Jan  1 05:56:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15c70bf1ddc4cd7ae011b0392a7103e2bae64745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:d6:08:bd:32:c0:ec:08:37:fb:c3:6f:2d:
                    5a:1b:48:18:2a:22:f4:d7:3a:91:f5:fe:86:25:8c:
                    ee:60:a4:33:f6:84:72:d1:2d:db:53:0d:8a:9d:9d:
                    8f:75:70:1d:2c:eb:a4:72:5c:b0:f8:06:12:61:7a:
                    81:21:23:15:9a:eb:90:27:6e:fe:c3:84:28:a6:c9:
                    4c:09:15:e3:ec:4c:3d:b4:bc:ca:1b:86:99:91:47:
                    a8:99:09:ef:6f:73:01:3a:29:55:7e:2c:85:ab:03:
                    c4:f0:b7:bc:67:9d:6b:9b:a0:86:3f:56:67:49:98:
                    7b:e5:6e:92:7c:d7:05:e4:3b:fa:ad:0d:3f:99:d7:
                    bf:39:63:02:c0:cf:6a:eb:ff:2a:27:15:36:dc:5c:
                    8b:16:01:e6:60:6c:fc:80:92:b5:be:35:6f:ff:51:
                    90:ff:16:7c:09:2f:9a:f8:19:de:9f:66:f9:58:b5:
                    b7:8f:3c:8c:47:c5:da:93:3c:62:3f:3d:f2:2e:e7:
                    55:73:f2:09:29:be:46:2c:97:ef:0f:62:5a:c3:03:
                    41:7c:2c:c4:4f:09:f3:72:80:17:8c:6f:f8:a2:4c:
                    c8:81:00:18:40:48:49:ed:ac:64:16:50:98:6e:6f:
                    5d:ad:3a:95:54:7a:9c:e0:8d:a7:8f:48:f1:73:47:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:0B:F1:DD:C4:CD:7A:E0:11:B0:39:2A:71:03:E2:BA:E6:47:45
            X509v3 Authority Key Identifier:
                keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/FccL8d3EzXrgEbA5KnED4rrmR0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:05:53:06:40:d7:b3:83:b0:92:93:bf:c7:00:6c:f6:52:58:
         de:1c:6f:09:34:23:e1:d7:17:f9:76:c0:a5:d2:fc:38:63:bd:
         5c:c7:2b:e8:db:a6:b2:e0:eb:f7:0f:f2:19:cf:c1:b8:3e:6d:
         93:ed:56:8d:e3:69:f2:60:62:7f:50:83:13:a8:40:80:7a:5f:
         82:65:35:4f:22:d5:3b:2b:8b:0b:f8:bc:e5:07:19:36:1d:28:
         7a:49:e8:2f:9c:f6:62:bf:08:88:56:1e:2c:88:d1:ac:2d:0c:
         b2:45:b6:8a:d0:79:d6:13:88:d2:a9:59:46:1d:ec:44:41:23:
         3f:1f:20:88:90:37:9f:69:89:f7:76:9e:f8:79:03:5e:fe:76:
         6a:ac:93:fc:67:ca:de:b6:50:ef:2d:d1:17:ef:58:32:66:a4:
         e4:63:47:9f:ca:2b:4b:b2:e4:4d:30:39:ff:c6:64:d2:89:df:
         12:f8:7d:76:75:02:87:b0:26:f9:a5:ef:cb:7b:d7:8c:f3:dc:
         cd:42:bd:da:41:b4:e3:ce:b4:cb:8f:67:6a:51:85:9e:8e:30:
         23:d3:2b:3e:37:27:74:8e:01:e7:05:2c:95:13:44:2c:e2:4d:
         25:5e:f8:3c:c4:06:52:2e:44:ec:b1:a3:67:7b:56:af:f5:d7:
         f9:0e:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:20 2023 by rpki-client on console-fra.rpki-client.org