Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/k__fEuXqL-pHWGqVwnF4hy4cR9Q.roa
File:                     k__fEuXqL-pHWGqVwnF4hy4cR9Q.roa (raw, json)
Hash identifier:          zfQcgVAkcmCeCImSmC1mPnTJlgJtyYHHQb955LDqmTM=
Subject key identifier:   93:FF:DF:12:E5:EA:2F:EA:47:58:6A:95:C2:71:78:87:2E:1C:47:D4
Certificate issuer:       /CN=8b10ac33e2036d2ab633417170fd546a86deb142
Certificate serial:       FB394D
Authority key identifier: 8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/k__fEuXqL-pHWGqVwnF4hy4cR9Q.roa
Signing time:             Mon 07 Mar 2022 17:31:17 +0000
ROA not before:           Mon 07 Mar 2022 17:31:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        146.19.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16464205 (0xfb394d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b10ac33e2036d2ab633417170fd546a86deb142
        Validity
            Not Before: Mar  7 17:31:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93ffdf12e5ea2fea47586a95c27178872e1c47d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:e6:48:e5:ea:a0:c9:c5:cc:23:6d:f3:78:
                    c1:8a:41:49:50:01:5b:dd:50:26:a5:51:b4:3d:33:
                    47:7e:09:ff:1f:55:0a:9a:6b:2c:cb:b9:1e:97:cd:
                    3c:fa:dd:ad:fc:10:75:67:ec:ff:d2:59:51:59:51:
                    85:ad:8a:dd:aa:5c:a2:cf:ff:a3:0d:b3:28:a0:4d:
                    61:e1:a1:59:cb:e4:f9:0d:8e:dd:7c:48:0e:5e:a8:
                    88:6f:17:77:fa:b1:af:58:c9:a5:24:eb:bb:20:dd:
                    dd:d4:3a:a6:ec:5f:05:5b:2a:3c:e6:2b:55:17:01:
                    a3:5a:64:dd:8a:c6:ad:a0:c7:e2:23:1f:4a:3e:1b:
                    27:1a:80:0b:31:55:01:3a:6e:73:f2:42:c7:bc:d0:
                    13:4f:69:6d:87:65:19:a5:53:b2:6d:96:df:a2:77:
                    ee:93:59:d4:4d:55:fb:85:8d:7d:1a:7c:f9:b7:3a:
                    cc:f1:b5:58:21:54:96:11:3f:ef:07:a0:39:d6:f4:
                    04:16:72:fe:13:34:f3:70:6f:a9:0c:46:9b:b9:ce:
                    ed:d0:ca:fa:6d:ed:57:d7:e1:7f:69:cd:09:80:50:
                    d9:c4:8b:32:0a:4c:60:53:ca:7d:9d:60:d7:77:16:
                    f4:3c:65:c1:c9:f4:19:b8:ff:1b:fd:9c:c5:18:75:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FF:DF:12:E5:EA:2F:EA:47:58:6A:95:C2:71:78:87:2E:1C:47:D4
            X509v3 Authority Key Identifier:
                keyid:8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/k__fEuXqL-pHWGqVwnF4hy4cR9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:79:5c:03:91:58:d1:4e:cf:ca:b3:db:16:d1:a2:35:d2:
         28:a9:64:05:7a:76:74:22:6c:49:7a:bd:02:bf:22:4a:62:bb:
         fc:55:04:1b:e0:fc:96:6d:12:58:b5:65:98:59:93:fa:97:ad:
         31:14:28:09:a9:d2:95:da:a4:85:31:56:a4:d7:9f:a8:af:2e:
         b5:bd:00:d0:ff:07:89:34:06:d7:3e:ca:d0:1f:6f:fd:49:1b:
         0f:97:28:95:8d:f6:4f:f2:81:25:8e:e1:27:7e:02:a7:58:a6:
         bc:6b:eb:db:f3:ec:65:29:10:37:79:c2:14:1a:4a:de:73:cd:
         a6:85:50:19:3a:17:02:36:d9:bb:1c:b2:8c:2c:16:83:77:ee:
         7b:84:47:d3:c5:d9:99:53:d5:f8:f9:4a:40:80:e4:74:ff:a2:
         03:54:eb:d6:df:66:38:6c:d1:66:6d:f7:0b:b6:e5:2a:e6:20:
         66:9a:00:1c:01:68:fd:59:5d:b0:7e:b0:62:93:e9:d6:72:e5:
         cd:f3:4f:7d:6b:da:b6:68:f1:d2:9f:22:7c:0d:12:a1:49:a2:
         61:45:27:a0:7a:87:a8:57:a4:6b:17:f8:cc:9b:bc:24:61:51:
         4c:92:2c:01:1d:0a:ce:9f:bb:74:17:af:42:80:2e:48:46:2a:
         4c:7d:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org