Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/Catel7avRF2Rs2CvAw9vJbBu6Pw.roa
File:                     Catel7avRF2Rs2CvAw9vJbBu6Pw.roa (raw, json)
Hash identifier:          VrpLUNfILkYZzBh+P/kfXelVrSuRSHMD/mWOJkM+qGQ=
Subject key identifier:   09:AB:5E:97:B6:AF:44:5D:91:B3:60:AF:03:0F:6F:25:B0:6E:E8:FC
Certificate issuer:       /CN=2145c7418668c725392fc63e632f4615fab3a346
Certificate serial:       03B06374
Authority key identifier: 21:45:C7:41:86:68:C7:25:39:2F:C6:3E:63:2F:46:15:FA:B3:A3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/Catel7avRF2Rs2CvAw9vJbBu6Pw.roa
Signing time:             Sat 01 Jan 2022 09:57:02 +0000
ROA not before:           Sat 01 Jan 2022 09:57:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60538
IP address blocks:        193.36.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61891444 (0x3b06374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2145c7418668c725392fc63e632f4615fab3a346
        Validity
            Not Before: Jan  1 09:57:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09ab5e97b6af445d91b360af030f6f25b06ee8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:ad:15:f0:86:ea:bc:42:15:70:f4:e4:04:
                    d9:5b:f6:e6:b3:1b:2f:7a:64:6d:1a:dd:31:eb:08:
                    40:28:0d:0b:ab:b1:d8:34:31:f5:07:85:6e:97:5e:
                    6a:62:bf:a5:03:c7:16:0d:11:d6:8f:3a:e6:de:aa:
                    10:e5:cc:b9:64:f7:5c:17:74:f0:d4:9a:ba:38:1b:
                    44:31:18:21:31:ba:f7:40:30:2e:08:9b:31:bb:ef:
                    5d:83:18:43:70:b8:79:fd:d7:c5:bc:59:f3:d4:88:
                    f9:58:04:b4:cd:bc:e3:fd:0d:73:e6:55:6c:f2:e0:
                    a5:1f:b5:ac:68:44:de:fd:03:cb:7e:2b:07:d1:9b:
                    02:d3:da:57:85:32:54:9d:ed:0a:72:42:bf:4e:03:
                    27:54:5e:0b:af:f7:20:e3:9c:3f:20:71:88:00:b1:
                    ce:03:75:6d:f3:b2:e3:77:54:9b:61:d6:f6:12:69:
                    70:8d:98:51:96:c6:6c:27:8c:7c:8b:d6:e0:4b:b4:
                    05:94:a7:1b:01:d0:2d:b9:a0:a9:8e:3f:37:23:58:
                    d7:60:2e:fa:bd:9c:50:87:00:d5:49:79:7a:14:47:
                    61:56:0e:d9:0a:69:e2:1d:16:83:4c:a6:98:d9:1a:
                    46:f6:d0:5a:4f:da:d3:35:19:5c:5c:00:0d:07:6e:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AB:5E:97:B6:AF:44:5D:91:B3:60:AF:03:0F:6F:25:B0:6E:E8:FC
            X509v3 Authority Key Identifier:
                keyid:21:45:C7:41:86:68:C7:25:39:2F:C6:3E:63:2F:46:15:FA:B3:A3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/Catel7avRF2Rs2CvAw9vJbBu6Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:1b:b2:7e:ba:42:e3:43:37:a5:61:01:df:3d:25:19:06:c8:
         07:1d:a0:d6:fa:f6:0e:ec:49:33:44:ce:fe:80:ed:54:1a:de:
         ad:a7:8b:c2:ca:1b:d6:cd:5b:1d:cc:46:3e:96:f0:ad:4e:76:
         85:34:6b:b3:20:96:1b:1d:2d:d2:94:d6:a0:da:2f:27:a5:98:
         bc:08:15:a6:25:54:84:85:5a:4f:93:c5:2a:f3:73:39:3b:42:
         54:2f:dd:81:61:f6:7f:d2:43:61:a7:89:d7:76:cc:78:5c:37:
         52:f8:9e:f7:99:c2:7d:b3:42:1e:1d:c6:3e:ca:23:a4:99:fd:
         4d:ea:8e:28:07:f4:d5:27:99:a5:22:11:24:d7:17:3c:48:3d:
         b0:5c:e8:07:71:3f:3e:54:78:c8:25:f0:b1:41:d3:be:6d:ba:
         77:13:13:5b:5e:9e:90:a9:f5:a6:14:20:e5:93:70:db:c4:fb:
         18:b5:81:ef:e1:10:32:41:6e:0f:3a:71:69:60:e7:5d:b8:2f:
         82:cf:ff:e0:0c:f0:a9:56:d8:c1:84:25:a8:9b:85:70:3f:ff:
         6d:06:f2:01:b4:c4:90:73:d7:59:63:63:d3:9e:a9:19:f7:10:
         4e:10:61:99:36:3a:7b:ac:ff:f5:76:ed:cf:63:06:37:da:3f:
         5f:bb:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:19 2023 by rpki-client on console-fra.rpki-client.org