Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_uePQMjOsipFjVXugvkRZIYfZp8.roa
File:                     _uePQMjOsipFjVXugvkRZIYfZp8.roa (raw, json)
Hash identifier:          /RtNw/ygBr5HH3tGHxgefLHjQrIn0DlLe3b4m+21Grk=
Subject key identifier:   FE:E7:8F:40:C8:CE:B2:2A:45:8D:55:EE:82:F9:11:64:86:1F:66:9F
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01821207FF6FFE4DC45E082F9229B076AB53
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_uePQMjOsipFjVXugvkRZIYfZp8.roa
Signing time:             Mon 18 Jul 2022 15:58:10 +0000
ROA not before:           Mon 18 Jul 2022 15:58:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60149
IP address blocks:        93.113.126.0/24 maxlen: 24
                          86.107.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:12:07:ff:6f:fe:4d:c4:5e:08:2f:92:29:b0:76:ab:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jul 18 15:58:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fee78f40c8ceb22a458d55ee82f91164861f669f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:79:99:e7:21:24:27:1e:a1:c4:ad:35:4e:
                    fb:9f:db:bb:18:c9:1e:21:40:e7:fa:88:b3:00:b2:
                    34:c2:5b:e4:2f:1d:a8:b2:52:7f:20:13:03:1b:bf:
                    01:b0:f1:a2:27:55:25:18:ba:b1:f3:27:b1:f1:ad:
                    7c:5f:6b:4a:8d:c1:33:b9:57:3c:b0:1d:6a:41:28:
                    f9:51:93:ab:56:4d:ee:a7:0e:33:90:41:f5:cd:5f:
                    f2:2c:59:26:6d:4a:e4:7a:47:35:c5:d0:9a:cc:2b:
                    0e:8f:fc:de:bf:75:78:72:a9:a1:04:2f:49:a5:a6:
                    f8:b0:bf:2b:68:00:44:09:11:de:49:21:a9:33:9b:
                    c7:a6:50:ab:83:57:6b:5c:f1:ae:79:28:b4:53:96:
                    69:db:4b:a7:d5:19:8a:03:6d:25:4c:1e:e9:10:a6:
                    e7:f4:d8:8e:73:cb:98:9e:7a:70:ff:41:8a:22:d8:
                    da:2f:c2:e3:4a:fc:80:a1:55:0f:e0:45:a3:56:d5:
                    e0:13:dd:fe:54:4e:14:b7:0b:a1:0d:91:dc:77:96:
                    fa:a0:7b:0d:72:db:c2:a1:60:10:74:d5:84:50:45:
                    cb:b8:1b:00:c8:56:42:ad:9a:74:9b:87:59:5d:d5:
                    97:cb:30:4d:28:a8:bb:7c:1e:22:ab:b1:c6:61:0e:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:8F:40:C8:CE:B2:2A:45:8D:55:EE:82:F9:11:64:86:1F:66:9F
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_uePQMjOsipFjVXugvkRZIYfZp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.107.73.0/24
                  93.113.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:b4:f3:37:dc:f7:22:ee:13:ad:20:f0:17:91:c6:d7:f8:01:
         2f:1c:66:f6:a5:3f:20:a3:c6:91:39:7e:3e:c9:b1:d2:1a:96:
         f0:89:fe:70:ca:a8:7e:53:7d:c5:4d:6c:9c:b9:ae:ac:dd:85:
         42:0e:63:6d:86:3e:87:74:df:cb:19:5b:27:5f:cc:dd:a2:8c:
         f5:c6:7f:7f:38:2d:82:aa:d0:15:1f:58:fe:cd:7a:ac:25:cd:
         9c:bd:3e:ee:0e:c8:53:82:88:a3:c5:22:a4:79:95:f9:4e:02:
         98:b4:23:77:d2:54:9f:52:f3:21:30:c4:e8:48:19:f2:92:18:
         40:dc:51:7a:9b:b3:41:12:3e:8d:0d:bc:54:84:d4:76:e0:06:
         66:97:c1:ee:08:97:61:a0:78:03:f9:b6:e9:d0:b9:86:eb:72:
         62:c9:f0:4c:d9:c4:62:01:b9:26:a1:23:43:fe:a0:fe:1c:19:
         e1:95:8d:dc:17:f9:d3:47:a1:ce:a6:0a:19:2b:39:e0:03:ba:
         4d:e3:81:cf:43:9a:ee:a6:89:88:98:ab:68:b9:29:53:c4:97:
         a4:88:55:85:5d:95:f0:51:27:d7:3a:a5:8e:0a:24:d7:f9:f8:
         75:87:c2:ab:81:88:c4:21:c9:61:9a:3d:67:11:60:ea:e2:02:
         6c:64:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org