Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/L4QEzJD1T0HBJ7CXMltAU1LufoE.roa
File:                     L4QEzJD1T0HBJ7CXMltAU1LufoE.roa (raw, json)
Hash identifier:          4iqYw1oviJDLmaHEMhiK9Lm+TgQEj1aECYYyNyudwfQ=
Subject key identifier:   2F:84:04:CC:90:F5:4F:41:C1:27:B0:97:32:5B:40:53:52:EE:7E:81
Certificate issuer:       /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial:       0408E32F
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/L4QEzJD1T0HBJ7CXMltAU1LufoE.roa
Signing time:             Sat 01 Jan 2022 10:55:21 +0000
ROA not before:           Sat 01 Jan 2022 10:55:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51107
IP address blocks:        193.46.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67691311 (0x408e32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
        Validity
            Not Before: Jan  1 10:55:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f8404cc90f54f41c127b097325b405352ee7e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:35:b2:8b:33:7f:bb:d2:71:b4:b8:23:f8:
                    10:0b:2e:f7:a7:89:42:7c:a9:6b:82:cf:d6:d5:31:
                    ea:88:bc:b4:19:ae:2f:1f:a9:a9:f9:b7:14:10:37:
                    ba:9b:57:8e:e5:70:f0:ad:ed:c4:c5:ef:33:b7:2c:
                    5e:80:5f:58:dd:9a:85:48:ff:e2:27:d0:61:34:a7:
                    45:6b:f9:1b:da:9a:72:6e:40:e4:ac:fc:13:67:4d:
                    8e:28:0d:7e:a5:29:fc:3d:43:d0:3a:f6:1d:d4:3b:
                    a0:45:80:d9:35:55:95:b8:1c:2a:de:34:17:08:9f:
                    0a:00:a2:f7:48:95:04:ba:77:8a:94:b5:0d:2c:64:
                    d0:6c:c2:80:2c:9f:a7:08:20:1b:d3:9d:93:85:a7:
                    63:af:48:9d:0f:ab:31:e4:7a:2f:05:cf:ca:d9:73:
                    5c:e7:3e:39:d9:24:77:7b:bf:14:b5:23:b0:a5:12:
                    4c:8a:b1:2c:7b:3e:f1:92:15:64:2d:de:48:84:37:
                    7e:9c:7a:4d:a3:7c:36:ab:fe:c1:c4:a6:ff:b9:56:
                    5a:74:23:cf:26:86:87:d6:af:16:66:6f:3d:97:91:
                    fa:58:ed:93:6c:b0:1d:df:92:bc:0b:f7:df:a7:6f:
                    75:1b:09:b2:3b:11:9d:90:d0:2c:c0:00:f8:54:19:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:04:CC:90:F5:4F:41:C1:27:B0:97:32:5B:40:53:52:EE:7E:81
            X509v3 Authority Key Identifier:
                keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/L4QEzJD1T0HBJ7CXMltAU1LufoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:1a:d5:96:c0:dd:46:f1:e3:8b:f6:98:08:c0:e8:ad:23:
         23:50:66:0c:f5:2a:af:17:27:47:4d:d8:26:e2:56:4c:9a:00:
         38:03:21:8d:eb:47:19:25:ed:37:8d:64:d7:fa:2e:19:69:70:
         5c:4f:60:50:90:2c:20:e9:5d:bb:7d:aa:61:b4:6c:09:16:69:
         1f:37:38:70:1c:17:38:30:ea:6f:33:0b:2e:b6:7c:82:3c:c8:
         e5:5f:50:93:e0:f9:09:8a:62:e3:0a:82:73:1a:38:cd:7d:99:
         a1:32:c4:76:df:61:b3:fb:3d:15:78:bb:a8:17:b7:03:45:a6:
         bb:3e:99:98:f0:0f:4f:c9:96:52:f7:f1:45:b8:f9:b6:fc:65:
         41:58:c6:76:61:0d:5c:1e:5c:54:b9:a8:17:30:65:0e:7f:b5:
         aa:55:4e:b9:55:e0:00:20:6c:a3:c5:21:06:28:6e:1e:5c:3f:
         ce:9b:98:4d:89:2c:f2:60:03:57:fb:c9:fd:ec:78:b2:28:d9:
         6a:88:78:2e:fb:10:dd:8f:00:23:8d:63:aa:70:fa:06:8e:fa:
         2e:0f:0b:88:06:95:c6:72:80:f7:da:02:dc:08:a7:27:83:e8:
         62:4f:84:cd:d9:cf:54:44:27:65:b3:1a:28:cc:a1:f4:11:ef:
         98:ad:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:34 2023 by rpki-client on console-fra.rpki-client.org