Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/IUeYM6Uj2Xd076wCL6-Ix4VLVZY.roa
File:                     IUeYM6Uj2Xd076wCL6-Ix4VLVZY.roa (raw, json)
Hash identifier:          sWsPUmDO52hPilQIkx8oEXQpm41zMtlGp1HUq+YWFEk=
Subject key identifier:   21:47:98:33:A5:23:D9:77:74:EF:AC:02:2F:AF:88:C7:85:4B:55:96
Certificate issuer:       /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial:       018408DADCCD5E9D26647BC6BCD2EF11A2C1
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/IUeYM6Uj2Xd076wCL6-Ix4VLVZY.roa
Signing time:             Mon 24 Oct 2022 07:17:51 +0000
ROA not before:           Mon 24 Oct 2022 07:17:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62068
IP address blocks:        185.13.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:08:da:dc:cd:5e:9d:26:64:7b:c6:bc:d2:ef:11:a2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
        Validity
            Not Before: Oct 24 07:17:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=21479833a523d97774efac022faf88c7854b5596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:91:57:b5:62:ec:62:44:68:6f:07:ad:57:
                    2e:89:3e:d5:e3:df:35:7b:70:e1:80:d1:d6:0e:69:
                    f6:46:25:17:43:f0:1f:3a:aa:a2:e5:72:e1:8c:ec:
                    4b:33:70:4a:31:a8:8a:07:ec:e5:cc:0f:34:e8:c5:
                    9c:25:38:f4:7d:d0:0d:12:8f:d4:9f:43:80:73:d5:
                    65:41:8c:6f:93:ba:49:76:6a:18:3f:03:aa:71:ed:
                    46:d8:44:0b:bb:02:12:2e:db:c5:c3:1d:c5:cd:16:
                    33:71:8d:de:dc:ef:c2:66:2b:c1:6b:c9:d0:2b:67:
                    76:28:b7:e6:9e:61:b0:8d:4a:d2:58:de:b9:a2:84:
                    c0:58:4c:df:4d:f0:e8:06:f8:0b:7d:73:29:7e:e1:
                    d9:17:49:ca:81:3f:0f:ae:e9:ee:65:cc:d0:e6:ab:
                    ba:ac:bb:2a:57:a1:e5:91:37:d8:75:07:07:02:1c:
                    4a:d1:bd:25:89:ff:5c:45:c1:aa:de:e5:76:f2:73:
                    12:68:54:88:15:95:9a:43:e3:04:86:48:69:05:cc:
                    db:6c:56:e7:b0:70:4b:08:df:59:c6:94:45:8e:4c:
                    b5:f2:ba:d0:28:50:3f:e2:68:24:f5:ad:a3:97:53:
                    ef:e0:42:60:18:ba:85:51:22:9d:92:46:b1:8c:66:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:47:98:33:A5:23:D9:77:74:EF:AC:02:2F:AF:88:C7:85:4B:55:96
            X509v3 Authority Key Identifier:
                keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/IUeYM6Uj2Xd076wCL6-Ix4VLVZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:64:80:50:99:27:1b:b9:af:89:50:eb:de:f0:14:eb:6e:
         b9:ee:c8:a4:90:10:75:ed:96:3a:5d:6d:d9:a0:0b:9e:99:fd:
         a4:85:47:d2:01:97:8c:45:d6:ac:c3:6b:cf:d8:96:38:9a:3b:
         e2:0f:2e:60:bb:82:49:ca:47:ca:fa:f8:a0:24:0c:8c:f3:27:
         c8:5c:92:57:a8:2d:49:1e:3d:22:2c:6f:53:88:a8:1b:b1:ae:
         0d:1a:d2:9a:66:5a:a2:6b:d2:48:a1:63:c4:7f:53:e2:93:cc:
         6f:4c:46:d5:6a:a1:1a:06:c7:4e:01:16:39:8a:8a:26:99:c2:
         b4:2b:bc:22:16:3b:d9:79:51:82:6d:08:d0:9f:a0:6d:13:25:
         eb:0e:32:88:92:76:40:52:cb:fa:b1:3b:ce:a6:ed:79:c1:77:
         4b:be:95:ba:24:e3:68:53:86:f1:32:0d:1a:dd:79:07:68:fc:
         f0:42:fd:af:b2:91:43:84:10:f2:13:87:92:69:f6:af:3f:f6:
         c3:95:e0:ec:0e:36:ac:4c:55:97:43:8d:e1:77:8d:e5:6e:ea:
         a4:35:d5:0a:87:ea:fc:88:fc:92:a4:e4:44:4e:83:67:32:55:
         c0:e9:50:5a:0f:82:25:35:31:7b:cb:b4:5c:bd:e3:84:c5:dd:
         6f:d3:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:06 2023 by rpki-client on console-fra.rpki-client.org