Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/jzlW5sqpq4f3uQ41UXFOpu82YNs.roa
File:                     jzlW5sqpq4f3uQ41UXFOpu82YNs.roa (raw, json)
Hash identifier:          hdPxY7EQtRSheGLMomG/eXr66vhsVGpRS86m6xHZcAY=
Subject key identifier:   8F:39:56:E6:CA:A9:AB:87:F7:B9:0E:35:51:71:4E:A6:EF:36:60:DB
Certificate issuer:       /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial:       0905D869
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/jzlW5sqpq4f3uQ41UXFOpu82YNs.roa
Signing time:             Mon 21 Feb 2022 09:17:07 +0000
ROA not before:           Mon 21 Feb 2022 09:17:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209720
IP address blocks:        92.118.134.0/24 maxlen: 24
                          31.40.166.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151378025 (0x905d869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
        Validity
            Not Before: Feb 21 09:17:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f3956e6caa9ab87f7b90e3551714ea6ef3660db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:fb:2e:69:ac:20:a7:5e:dd:dd:2e:a8:81:
                    5b:12:9e:17:66:86:31:ff:8b:13:90:ff:86:75:18:
                    57:af:14:28:a6:ee:b5:a2:36:e6:ee:a4:da:e4:dd:
                    0d:09:f4:9c:5a:b7:6b:ea:9b:8a:fe:73:3b:21:93:
                    d3:bb:47:a5:9c:83:9a:3e:01:a0:c7:46:8a:93:f4:
                    65:98:75:75:f1:e9:cc:24:63:34:6b:de:0e:8d:4b:
                    9b:e8:71:51:01:e9:77:25:ea:c4:c5:53:80:ff:f1:
                    fe:71:9a:37:55:6c:e5:a5:b6:d3:ce:d7:a3:2c:1e:
                    22:69:c5:7d:f2:7a:9c:a3:59:88:6c:79:0e:64:c3:
                    8e:32:cc:0b:34:d1:fd:c4:2c:c7:93:f8:d9:96:8e:
                    9f:7b:59:a7:03:b3:01:f3:35:57:60:88:55:7a:7d:
                    fe:95:ad:3d:c7:9c:10:f5:80:4a:b5:06:92:49:47:
                    be:85:35:23:11:0c:6b:ae:7d:e0:90:27:c7:03:cf:
                    1f:1c:ba:99:f2:e2:8a:af:bc:32:22:ff:53:dc:7d:
                    fa:c8:91:35:cc:36:07:c3:6a:62:fc:47:dc:a1:70:
                    67:8f:45:0c:43:b7:a9:41:48:5d:d4:3c:6a:c4:ef:
                    44:7a:9c:48:fa:eb:37:03:bd:45:a1:f5:7a:c5:9c:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:56:E6:CA:A9:AB:87:F7:B9:0E:35:51:71:4E:A6:EF:36:60:DB
            X509v3 Authority Key Identifier:
                keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/jzlW5sqpq4f3uQ41UXFOpu82YNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.40.166.0/23
                  92.118.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:c4:b2:a0:32:9a:12:a1:39:1b:6b:71:c5:8a:7e:22:3a:
         25:3c:3c:92:e2:a4:d1:70:2a:4c:3c:b6:e6:e6:2d:6c:0b:a5:
         6a:9f:51:b4:8b:37:ef:77:ba:db:4e:68:2c:88:37:39:a0:f2:
         d0:0c:03:0a:f3:39:e0:cd:64:cb:07:c0:4e:37:f0:76:74:65:
         a8:96:88:b9:bb:be:03:ab:d9:31:64:2a:50:22:1f:d7:b3:18:
         7c:23:73:51:6d:db:87:c8:e8:7b:15:d9:71:0a:7a:21:78:9a:
         db:4d:d8:a6:21:59:89:4c:4d:4f:27:d7:5e:5b:f5:16:e5:bf:
         ed:fb:2d:c4:30:52:13:a0:44:dd:d6:9d:ce:05:3a:29:98:fc:
         f5:af:93:4b:06:22:d4:dc:2f:94:00:f3:f0:05:f4:de:5a:c4:
         b0:85:07:d2:04:44:db:60:de:b9:02:14:f2:66:e1:a9:db:26:
         b9:ee:93:76:a8:99:e0:ee:c7:89:6d:63:c9:37:81:83:0e:4e:
         61:cd:19:b2:df:70:ca:13:fa:40:47:30:a6:dd:9e:77:33:12:
         c6:85:08:53:30:82:57:2f:4a:d2:e9:29:2c:4f:3f:9a:4b:7b:
         fd:d7:9a:14:38:d9:13:3c:4e:7f:f4:00:4e:0c:84:81:48:22:
         6d:73:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org