Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/SEAPBLoUnP2BrxAtQRnNyk8CYE8.roa
File:                     SEAPBLoUnP2BrxAtQRnNyk8CYE8.roa (raw, json)
Hash identifier:          v+x8Rdfszrck7WCInAc46BVz9V40oFEP/3TePVKo6kk=
Subject key identifier:   48:40:0F:04:BA:14:9C:FD:81:AF:10:2D:41:19:CD:CA:4F:02:60:4F
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       01E39F63
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/SEAPBLoUnP2BrxAtQRnNyk8CYE8.roa
Signing time:             Sat 01 Jan 2022 04:03:13 +0000
ROA not before:           Sat 01 Jan 2022 04:03:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        80.210.95.0/24 maxlen: 24
                          85.194.254.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31694691 (0x1e39f63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Jan  1 04:03:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48400f04ba149cfd81af102d4119cdca4f02604f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:2b:22:97:23:f3:36:15:10:0b:6d:53:27:
                    06:e6:f9:f4:18:48:4f:f3:78:9e:aa:60:98:f4:0a:
                    2e:01:b3:9e:1a:aa:30:56:a1:bf:39:6e:3b:b4:ab:
                    29:07:2a:9f:b1:c5:52:70:49:94:88:fd:85:a9:8f:
                    f0:86:e1:4e:f5:76:f4:67:4a:f4:dc:2a:08:7f:a3:
                    eb:af:c0:4b:22:ad:4b:cf:e6:3d:4b:c1:6d:97:49:
                    1b:2e:6f:ec:13:64:97:cc:c2:3f:1a:85:88:6b:f9:
                    ed:0e:c1:80:bd:da:2f:55:08:47:48:2d:d8:b8:ac:
                    f4:ba:a8:8b:d3:54:0b:0b:23:d9:45:82:75:96:cf:
                    2d:38:25:91:c5:f3:b1:c4:93:9f:e5:e6:54:07:ec:
                    3d:e5:5d:af:aa:a8:36:51:bb:15:b1:f9:e2:f9:07:
                    0c:8c:db:6a:d2:1b:92:4d:88:98:f7:1d:3d:b8:5e:
                    2e:2d:7f:df:1a:22:bd:c5:5b:e0:2b:bb:3d:ca:a2:
                    79:03:b7:cb:34:5e:0d:2d:18:a8:66:ee:28:5b:f6:
                    5c:14:9e:18:d9:a9:88:6b:59:0e:32:a4:68:ad:2b:
                    00:83:83:cc:b5:84:f8:95:d0:e3:c2:cc:f0:ad:69:
                    30:8d:c4:4e:5c:b7:b8:77:ef:02:6e:fe:7d:17:20:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:0F:04:BA:14:9C:FD:81:AF:10:2D:41:19:CD:CA:4F:02:60:4F
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/SEAPBLoUnP2BrxAtQRnNyk8CYE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.210.95.0/24
                  85.194.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:98:a2:3c:64:92:74:61:c6:80:a9:dd:65:67:dd:85:fd:0a:
         07:f7:04:49:cb:1a:d8:cd:0c:df:17:dc:8c:47:1b:a9:fd:24:
         91:4a:13:f0:69:65:8b:0f:45:29:16:34:cc:90:02:11:65:29:
         36:ae:ef:88:8a:59:c9:cb:72:87:91:64:41:03:e0:09:7f:c6:
         d0:1e:fb:4e:ec:a8:3c:0e:25:b7:f6:1a:8e:c4:57:c8:cf:63:
         27:39:06:c8:03:ab:ee:7a:54:9b:b2:9b:0c:c6:f3:5d:76:12:
         06:7d:33:04:4b:d8:c5:e1:c6:33:60:df:e9:4f:22:28:63:6b:
         97:6c:0a:27:5f:0f:28:85:de:29:c1:dc:18:6d:83:8b:ef:19:
         21:06:1b:22:cf:0c:8c:44:55:e3:3b:1c:fd:6c:07:2d:8b:5b:
         e1:e3:b2:fd:ec:15:d4:4b:4d:c3:b3:2c:59:16:21:38:1c:8a:
         c2:43:cc:e2:27:5e:eb:dd:8f:8e:2d:e8:d4:68:a8:3d:2e:b1:
         20:40:33:e3:5a:ba:bd:fe:6c:4e:63:e4:a9:8e:fc:50:87:a5:
         e1:a1:88:1e:a0:57:6b:13:2a:96:02:22:5e:3a:91:29:2b:aa:
         72:c7:d3:bc:39:70:d5:b2:47:02:0f:10:24:34:43:49:24:58:
         a1:64:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:51 2023 by rpki-client on console-fra.rpki-client.org