Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/SgGIrDYjnF4JKUJjQEMlC8H6Y4M.roa
File:                     SgGIrDYjnF4JKUJjQEMlC8H6Y4M.roa (raw, json)
Hash identifier:          txxgH04hY916CI+b8dzPrTMx5jJwjXmUueBX8hBqiaI=
Subject key identifier:   4A:01:88:AC:36:23:9C:5E:09:29:42:63:40:43:25:0B:C1:FA:63:83
Certificate issuer:       /CN=e188d5c34c4c1e1768fd8afc8d0659c710e1111b
Certificate serial:       24B9
Authority key identifier: E1:88:D5:C3:4C:4C:1E:17:68:FD:8A:FC:8D:06:59:C7:10:E1:11:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YjVw0xMHhdo_Yr8jQZZxxDhERs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/SgGIrDYjnF4JKUJjQEMlC8H6Y4M.roa
Signing time:             Wed 26 Jan 2022 18:28:48 +0000
ROA not before:           Wed 26 Jan 2022 18:28:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        80.68.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9401 (0x24b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e188d5c34c4c1e1768fd8afc8d0659c710e1111b
        Validity
            Not Before: Jan 26 18:28:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a0188ac36239c5e092942634043250bc1fa6383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:06:cb:c9:98:97:db:ee:fc:56:35:b4:b1:
                    05:8d:ba:68:6e:8d:2a:4f:2b:87:6d:2f:5b:aa:3d:
                    95:17:9f:4d:64:5c:29:68:70:84:0f:eb:bd:42:49:
                    32:3a:74:96:20:33:0f:93:4c:01:6a:b0:4a:b7:99:
                    b9:30:81:d4:9d:84:5b:16:a6:4e:21:95:14:a6:bc:
                    d6:ab:0a:7c:47:7e:13:26:6b:0d:6d:42:ca:ee:9d:
                    ec:bc:7d:63:69:2e:e8:8f:fb:7b:3a:98:46:32:8a:
                    a2:d3:5c:99:51:42:dd:cc:6e:00:70:20:7c:cc:47:
                    d2:47:da:97:06:19:8a:5e:79:af:e6:cf:57:69:28:
                    47:c6:00:de:33:d4:77:0e:6d:d4:7c:f2:7c:13:5b:
                    74:a7:d5:f1:c5:15:c1:ad:74:43:21:9f:fd:d3:61:
                    70:9f:f2:31:6d:6d:c7:38:ba:9a:f4:0f:e9:95:a8:
                    91:5b:a1:57:8c:f7:06:86:61:df:a9:b6:d2:e8:2a:
                    fa:d9:7c:d5:4e:ae:7f:87:f6:7d:12:11:e6:59:41:
                    7e:c7:fd:f1:91:25:15:5e:08:a0:cf:29:0c:e5:49:
                    0f:36:ca:8a:3d:a9:81:1f:43:eb:78:cd:fa:23:64:
                    71:2a:f0:27:7f:30:21:b1:02:f3:78:de:38:ee:78:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:01:88:AC:36:23:9C:5E:09:29:42:63:40:43:25:0B:C1:FA:63:83
            X509v3 Authority Key Identifier:
                keyid:E1:88:D5:C3:4C:4C:1E:17:68:FD:8A:FC:8D:06:59:C7:10:E1:11:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YjVw0xMHhdo_Yr8jQZZxxDhERs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/SgGIrDYjnF4JKUJjQEMlC8H6Y4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/4YjVw0xMHhdo_Yr8jQZZxxDhERs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.68.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b7:9b:ce:25:b1:bd:6b:72:4f:7d:11:f7:64:24:10:cc:e7:
         b9:c8:94:13:2c:79:3b:41:9a:57:4c:71:41:fd:d0:51:fd:e5:
         bf:85:ce:7e:65:5c:66:3f:9d:a4:5a:21:c3:00:12:7a:6e:d3:
         46:3c:81:17:b0:2b:00:19:e6:e2:b0:de:ef:eb:35:89:b1:9a:
         f4:c7:f9:56:5f:de:eb:14:87:b4:c0:10:95:6f:f3:a8:e1:b2:
         d0:13:68:30:78:18:9a:8c:b5:b5:ba:52:84:6c:4b:cc:b2:c1:
         c6:68:48:0c:98:6e:e9:e3:56:52:b7:bc:41:85:d6:72:8a:2d:
         c1:de:e4:22:b6:af:ef:e4:cb:9c:ae:cd:67:8f:30:8d:d1:dd:
         ed:d9:39:6b:1f:53:66:6e:16:f3:76:5c:16:14:8e:0d:f6:83:
         9a:20:66:af:8a:d5:72:37:6d:0f:f2:3f:7a:b2:08:8c:be:12:
         e8:73:dc:4f:c2:08:1f:13:2a:12:df:0d:98:ea:64:48:74:25:
         d2:31:77:77:98:a6:d8:70:4e:96:9d:fa:e2:e7:51:83:7b:a5:
         71:c3:ab:41:c1:50:64:0f:e9:75:42:02:09:08:f4:8e:54:11:
         10:7e:5f:f1:bf:b1:eb:64:fb:63:ba:ec:6f:e8:3f:2d:86:75:
         ba:36:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org