Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FbEuiBVZfxvkZ9AY1TTqQrKLRAA.roa
File:                     FbEuiBVZfxvkZ9AY1TTqQrKLRAA.roa (raw, json)
Hash identifier:          Puj5JZi/k9FXL3GDYxSWKfgtwJA7FgR+19RY0P2xCMs=
Subject key identifier:   15:B1:2E:88:15:59:7F:1B:E4:67:D0:18:D5:34:EA:42:B2:8B:44:00
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       0892E98A
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FbEuiBVZfxvkZ9AY1TTqQrKLRAA.roa
Signing time:             Sat 01 Jan 2022 03:51:03 +0000
ROA not before:           Sat 01 Jan 2022 03:51:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209250
IP address blocks:        195.168.219.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143845770 (0x892e98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Jan  1 03:51:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15b12e8815597f1be467d018d534ea42b28b4400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:60:98:93:77:bf:c8:02:cd:e6:57:72:0f:
                    62:8c:34:a2:2f:ec:19:10:84:49:89:f1:4d:f3:de:
                    64:0e:ce:01:4d:83:3c:d4:63:6f:b3:de:91:a2:0b:
                    86:3c:6f:50:be:e7:9b:a3:a3:ed:a4:2d:e5:66:00:
                    e7:db:21:1f:86:04:77:f1:8a:64:d0:fa:0a:2c:a1:
                    c1:0b:9f:38:df:18:f3:b7:dc:b7:50:70:5e:6c:50:
                    55:0e:61:8a:46:15:16:2b:fb:49:1d:07:ef:81:8e:
                    1c:52:3f:df:89:e1:b9:11:6c:c3:ce:fc:d5:7d:b1:
                    c6:21:99:fb:ee:1f:73:e0:72:5a:fa:fe:a5:30:88:
                    8c:35:0c:3f:28:c1:b0:b5:e8:49:91:69:e7:d1:d9:
                    d1:19:69:8c:3b:3d:00:a8:17:5b:71:40:4f:2d:4c:
                    f6:1b:3c:a5:9b:41:80:8e:94:a9:08:e2:6e:d9:8b:
                    f6:f6:a6:8e:1f:7a:fd:8e:78:12:db:c1:36:ff:4f:
                    e3:32:a5:45:06:b1:cc:32:76:f1:b3:6c:d3:d5:59:
                    0c:96:b6:45:a2:b8:ca:ad:24:61:40:cc:47:85:65:
                    65:47:4b:19:ae:37:8c:d8:d3:be:5b:91:20:1e:3f:
                    10:e0:8c:01:9e:a2:fe:50:7c:dd:2c:d0:57:3b:ac:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:2E:88:15:59:7F:1B:E4:67:D0:18:D5:34:EA:42:B2:8B:44:00
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FbEuiBVZfxvkZ9AY1TTqQrKLRAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.168.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:40:93:d9:a4:41:9a:16:8c:0d:b4:eb:2b:8d:98:9a:a7:95:
         ce:b8:a6:90:70:d6:97:f2:ad:07:08:bb:7a:8b:70:72:f9:6a:
         5a:22:a8:74:f3:aa:c7:6f:c4:bb:5f:67:38:9e:64:d6:15:10:
         10:30:be:5e:8e:ed:f5:48:62:eb:42:87:4f:46:82:50:92:cc:
         65:bd:89:d0:18:71:1b:e5:be:36:b4:ef:dc:29:91:3b:c0:d8:
         1c:86:00:3a:a0:4a:2f:d1:e3:2d:2b:8f:0e:fb:f1:de:6c:99:
         1b:a1:7f:56:bf:42:c6:68:26:a7:87:65:14:32:77:80:4e:ec:
         d9:36:ac:15:c5:6a:19:b7:da:29:8f:64:02:28:bd:f3:62:4c:
         a8:f6:11:e9:36:7d:76:c3:b9:40:c3:8c:cd:0e:cb:f0:ca:4c:
         65:c7:32:94:b7:ff:66:90:aa:0f:8f:8c:a4:34:b9:f6:d1:91:
         8d:f6:68:30:92:3e:d7:4e:5a:78:e0:5c:85:65:8c:6b:6c:dc:
         80:83:15:5b:41:71:59:5d:b9:d8:b2:c9:94:e2:eb:dc:1e:3b:
         c9:84:fa:4f:bb:e7:0c:6d:bb:db:ba:66:20:d1:d1:5c:31:4f:
         32:58:f2:35:30:e0:53:1b:eb:6a:9f:98:d7:c6:8d:a1:98:95:
         e1:e9:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:04 2023 by rpki-client on console-ams.rpki-client.org