Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/e-W6JHaJMb8GaK1teDCFUDJOrbE.roa
File:                     e-W6JHaJMb8GaK1teDCFUDJOrbE.roa (raw, json)
Hash identifier:          0wbWwgpewFQkN03FhgfSB6cFoD5fZ9isNOca8osMA5k=
Subject key identifier:   7B:E5:BA:24:76:89:31:BF:06:68:AD:6D:78:30:85:50:32:4E:AD:B1
Certificate issuer:       /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial:       164A27A4
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/e-W6JHaJMb8GaK1teDCFUDJOrbE.roa
Signing time:             Mon 31 Jan 2022 08:14:26 +0000
ROA not before:           Mon 31 Jan 2022 08:14:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39421
IP address blocks:        185.44.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373958564 (0x164a27a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
        Validity
            Not Before: Jan 31 08:14:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7be5ba24768931bf0668ad6d78308550324eadb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:ad:3e:55:57:fb:5c:da:23:45:af:0a:e9:
                    18:e7:25:ef:69:cc:38:21:c4:47:22:ea:cf:1b:09:
                    d9:d7:da:e6:38:35:71:29:b8:de:c3:bc:f7:6b:f1:
                    e2:12:89:83:3c:5c:e5:98:71:bc:76:1c:45:bd:29:
                    d4:e4:25:5e:71:b9:8f:65:0f:3f:b7:22:1b:5d:69:
                    54:43:45:af:4d:29:e0:17:f7:47:88:87:08:5c:1d:
                    25:31:1a:0a:e3:89:62:1f:c5:a0:13:bd:ac:2b:5a:
                    91:48:32:55:36:f5:e3:cb:ed:98:3f:c3:af:c7:8c:
                    2a:66:6b:69:8f:c5:4d:fe:6a:99:72:ab:79:15:78:
                    28:d4:05:b0:d3:6d:74:64:0a:74:73:99:49:9a:56:
                    27:5f:d5:bc:fa:4a:a1:e8:69:7a:a7:1d:3a:0d:51:
                    d8:ce:81:90:ea:54:21:df:c4:6d:0d:bf:5b:2d:4f:
                    12:b8:c9:f6:30:18:8f:63:a4:72:23:09:9f:1d:61:
                    88:be:75:a9:07:4e:ab:4f:71:8b:82:ee:ec:ad:7a:
                    d8:d3:b8:ad:28:e3:e6:39:de:1d:8e:fa:67:c9:09:
                    f8:d2:0d:d0:cf:14:89:c7:89:cc:45:07:f0:66:7a:
                    56:a2:67:fc:94:23:ea:09:5d:7a:c2:fa:cd:df:62:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:BA:24:76:89:31:BF:06:68:AD:6D:78:30:85:50:32:4E:AD:B1
            X509v3 Authority Key Identifier:
                keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/e-W6JHaJMb8GaK1teDCFUDJOrbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fb:b8:ef:73:f0:bd:ce:c1:1a:6b:3b:67:f9:ae:e7:12:e1:
         85:89:13:37:a2:f2:47:49:33:68:96:26:ab:68:d2:9a:99:ce:
         2b:78:e7:32:10:6b:4c:1c:c5:a7:47:9f:61:07:41:95:72:a5:
         98:e4:7e:e2:95:cc:dd:d1:d3:19:dd:0d:ce:7c:40:52:52:3a:
         87:cb:6a:11:2d:4a:83:91:95:56:07:e1:54:18:a8:0c:8e:f4:
         40:97:c8:9b:0e:c4:71:c7:4a:4a:36:39:5a:dc:09:20:b3:7f:
         a1:91:94:d7:87:88:07:1f:74:c6:61:45:85:42:8b:69:0c:d5:
         c4:5f:74:d5:71:28:ae:f9:20:f5:77:7d:d9:b0:0d:0a:15:d1:
         5e:0b:52:6d:2f:22:fa:4a:03:9a:0c:48:f4:90:b9:cd:97:dc:
         68:7d:67:fd:bd:68:00:52:70:28:9f:0a:5f:28:92:4f:cb:be:
         9f:b0:1d:f7:7f:d4:da:54:34:6b:bb:f7:97:0b:32:cf:9a:7d:
         23:c1:e4:d4:f8:ec:54:6a:4b:5f:7a:a1:97:83:1c:4e:71:c0:
         d7:b2:6c:8f:dc:dc:82:23:f3:b1:2a:46:54:32:24:46:25:aa:
         29:76:f1:2c:d3:81:45:3a:dd:89:01:06:0e:4a:3b:6c:6d:f9:
         9e:4d:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:27 2023 by rpki-client on console-fra.rpki-client.org