Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/0r0VNRPKBhC6862IDtngJCRcs6U.roa
File:                     0r0VNRPKBhC6862IDtngJCRcs6U.roa (raw, json)
Hash identifier:          6uqq/o9HNvJUand0kC4ySQXbKkzTPIokQ6FQ3T3MQbs=
Subject key identifier:   D2:BD:15:35:13:CA:06:10:BA:F3:AD:88:0E:D9:E0:24:24:5C:B3:A5
Certificate issuer:       /CN=0bac8a3206e367b80b8ca689220f098d188491ba
Certificate serial:       08DC3FD3
Authority key identifier: 0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/0r0VNRPKBhC6862IDtngJCRcs6U.roa
Signing time:             Sat 01 Jan 2022 07:01:31 +0000
ROA not before:           Sat 01 Jan 2022 07:01:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1136
IP address blocks:        193.177.242.0/24 maxlen: 24
                          193.177.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148651987 (0x8dc3fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bac8a3206e367b80b8ca689220f098d188491ba
        Validity
            Not Before: Jan  1 07:01:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2bd153513ca0610baf3ad880ed9e024245cb3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:fd:1b:c8:b5:2b:ca:ce:99:ba:c4:03:c2:
                    c9:2f:da:99:61:5c:2e:2c:bf:88:41:74:15:36:c2:
                    06:5b:69:a7:98:ff:f9:da:6b:03:4d:0a:6f:ce:ae:
                    ce:7c:f5:16:7b:30:df:0f:c5:ea:a6:d9:5d:74:95:
                    7b:e6:35:58:db:c4:a5:63:0c:fb:ce:20:8f:81:ce:
                    2e:5f:9a:ca:93:3f:b6:c2:5f:c6:63:d1:c3:20:80:
                    b5:52:60:ac:22:92:7e:55:89:be:23:fc:1c:8a:d4:
                    38:a5:a5:ef:50:a6:93:ea:7f:49:98:18:49:62:f5:
                    4c:23:b9:67:82:05:d5:a2:38:fd:27:45:9e:cf:13:
                    f6:85:1c:12:e1:d6:68:ec:bf:be:7f:04:fd:b5:6e:
                    96:16:d4:47:b7:2d:be:7a:61:d9:65:de:49:24:09:
                    35:d9:48:31:28:c9:77:cf:18:a3:01:e5:0e:0e:bb:
                    5f:94:0c:ca:e5:a2:2d:67:b4:c0:81:47:10:b1:ac:
                    e9:d2:a2:99:39:19:5b:7b:27:ce:a0:82:d0:25:0a:
                    59:f9:c7:7f:50:28:6d:18:27:cf:7a:4d:3e:b7:6d:
                    03:1d:8d:26:6d:b1:02:a4:16:3d:98:df:a8:df:40:
                    3e:28:1b:f2:ea:2c:f8:c3:5d:2d:bb:fc:e5:3a:1a:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BD:15:35:13:CA:06:10:BA:F3:AD:88:0E:D9:E0:24:24:5C:B3:A5
            X509v3 Authority Key Identifier:
                keyid:0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/0r0VNRPKBhC6862IDtngJCRcs6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.177.241.0-193.177.242.255

    Signature Algorithm: sha256WithRSAEncryption
         62:57:53:c7:40:d3:0f:aa:72:ae:d5:a3:a5:53:54:18:bf:a5:
         78:df:33:0e:93:10:fd:e4:a6:70:48:b8:b5:94:e7:e1:ab:88:
         38:37:53:55:fc:17:2b:f6:ef:98:f3:1e:77:e7:3a:4a:9a:90:
         ba:52:3f:a9:d2:77:a9:db:f9:cb:12:56:9d:f0:14:e5:3c:ff:
         ba:ce:1f:77:59:f7:dd:35:19:8e:af:43:69:d1:af:5b:02:d3:
         0b:3f:4a:f5:36:3b:93:bb:23:46:43:1f:9e:be:a7:b9:d0:87:
         13:b0:30:36:69:ea:f1:b9:c2:85:41:5f:94:9a:31:d5:78:37:
         46:7f:89:0a:b2:1f:a4:ca:36:6b:86:0d:c7:43:54:a4:f8:94:
         a5:14:4b:a2:a0:32:71:9c:de:07:38:82:dc:fd:22:83:df:2c:
         9d:9b:11:a6:40:da:a6:d4:0c:9c:5b:6c:f5:4c:6f:bd:b1:58:
         a3:a4:1f:d8:e2:05:a1:14:92:24:26:76:12:12:3c:97:80:ac:
         04:3f:65:72:7b:7b:57:b8:34:28:52:37:5f:c2:64:27:cd:4a:
         43:97:99:25:f9:ee:19:d7:5a:9a:60:49:98:d0:7c:cf:ef:68:
         94:6b:0c:47:0d:84:07:12:73:76:87:17:b5:d3:70:c9:66:f5:
         c2:0a:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:39 2023 by rpki-client on console-fra.rpki-client.org