Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/6jgrh15TbPA9Jj52H8H9Xj08PXA.roa
File:                     6jgrh15TbPA9Jj52H8H9Xj08PXA.roa (raw, json)
Hash identifier:          YPtxuTndJ68ucc+jEyhW8/t4c+r8XjhdDEmhKJIWT2A=
Subject key identifier:   EA:38:2B:87:5E:53:6C:F0:3D:26:3E:76:1F:C1:FD:5E:3D:3C:3D:70
Certificate issuer:       /CN=b629abc8a764d7591ce8e0cbd0637ab54ddb41fc
Certificate serial:       AFB7
Authority key identifier: B6:29:AB:C8:A7:64:D7:59:1C:E8:E0:CB:D0:63:7A:B5:4D:DB:41:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/timryKdk11kc6ODL0GN6tU3bQfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/6jgrh15TbPA9Jj52H8H9Xj08PXA.roa
Signing time:             Fri 03 Jun 2022 23:26:20 +0000
ROA not before:           Fri 03 Jun 2022 23:26:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202448
IP address blocks:        193.201.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44983 (0xafb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b629abc8a764d7591ce8e0cbd0637ab54ddb41fc
        Validity
            Not Before: Jun  3 23:26:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea382b875e536cf03d263e761fc1fd5e3d3c3d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:71:34:0c:09:1e:c1:0b:b8:47:ff:c1:85:
                    00:26:97:a2:3d:7a:99:79:ad:b5:59:57:49:ac:08:
                    2f:07:1d:ac:22:fc:9b:05:1a:aa:f0:03:cd:28:f3:
                    af:a5:c4:84:0a:74:a6:d6:cb:06:17:49:9d:03:23:
                    40:a9:94:23:77:46:51:8f:be:92:a9:84:11:c1:7a:
                    d0:47:ee:79:2f:4e:60:99:ec:b2:01:14:09:11:2f:
                    30:08:03:f2:fc:d2:90:70:44:c2:de:6e:2b:67:ee:
                    90:b3:ed:99:a7:7d:10:cb:bb:dc:60:cf:77:31:26:
                    71:7d:e6:b3:c0:f3:0c:7f:8f:35:37:62:44:21:26:
                    67:db:cb:55:db:c1:92:e4:eb:40:03:82:b7:36:d0:
                    92:dd:2a:8e:d6:d1:49:27:f6:c3:2a:eb:8c:ce:20:
                    38:a8:2e:a7:52:14:9d:a6:8e:64:dd:2e:94:ae:c2:
                    af:db:bf:74:0a:fc:06:32:b5:3d:71:dd:59:33:92:
                    b1:36:64:06:8e:37:39:da:5b:c8:e5:63:c0:71:95:
                    e6:bf:fd:db:97:68:15:09:cf:52:f0:60:1a:f5:ee:
                    4f:1e:ae:b9:fd:74:f6:80:c4:88:0c:82:6a:69:96:
                    d7:6d:a3:c9:62:29:5e:f1:8d:31:7a:85:c0:aa:17:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:2B:87:5E:53:6C:F0:3D:26:3E:76:1F:C1:FD:5E:3D:3C:3D:70
            X509v3 Authority Key Identifier:
                keyid:B6:29:AB:C8:A7:64:D7:59:1C:E8:E0:CB:D0:63:7A:B5:4D:DB:41:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/timryKdk11kc6ODL0GN6tU3bQfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/6jgrh15TbPA9Jj52H8H9Xj08PXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/timryKdk11kc6ODL0GN6tU3bQfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:7c:2e:0e:ce:25:f2:68:ab:f3:ec:d6:30:76:18:eb:38:
         60:5d:d6:93:9e:9a:25:ae:a6:31:6d:a9:a0:36:cc:9d:2d:5e:
         cc:ba:1d:cf:d6:f0:be:9d:48:91:f4:a1:58:93:4a:d1:37:3e:
         7b:e4:f3:76:3a:36:aa:e2:59:7c:0a:e1:40:13:32:57:47:b1:
         73:5c:b7:18:ac:6b:8a:99:5a:e3:6f:97:aa:fb:ba:df:75:3c:
         24:b2:73:c0:07:4d:df:2d:ee:1b:14:18:dc:b3:54:40:b6:0f:
         3e:63:70:80:e6:ad:08:ce:c0:5b:18:14:b1:4c:07:dc:45:0f:
         e8:49:ba:72:ad:a9:ec:5d:4c:eb:a5:32:5b:dd:23:7c:b0:50:
         97:90:89:46:67:fa:47:d7:c6:32:d7:19:2b:16:9a:e2:ea:0c:
         d7:ce:4e:80:83:26:09:a3:06:76:f7:30:5e:4c:c3:80:89:a7:
         09:5c:4d:ab:3a:ee:03:3b:bd:10:58:2b:a3:ba:37:39:c4:56:
         f5:d5:e2:1b:c1:b3:f2:85:ae:05:51:c2:de:93:72:d0:b0:a6:
         2d:b5:45:d7:39:c3:e0:98:11:ba:03:09:63:96:20:0c:d3:ef:
         9f:06:60:94:70:a1:cb:26:f7:99:f1:33:37:88:27:6c:4f:0d:
         9a:9b:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-ams.rpki-client.org