Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/p2BDPo_IhXu8s2UgBrtv2JGPA1s.roa
File:                     p2BDPo_IhXu8s2UgBrtv2JGPA1s.roa (raw, json)
Hash identifier:          DuMlLvdzgjQN801CpJy4Bf16gH4Q9TSVswhUmUjQ3GU=
Subject key identifier:   A7:60:43:3E:8F:C8:85:7B:BC:B3:65:20:06:BB:6F:D8:91:8F:03:5B
Certificate issuer:       /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial:       0183B12FA5B9463C4E1DC7659A6EB4E09A62
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/p2BDPo_IhXu8s2UgBrtv2JGPA1s.roa
Signing time:             Fri 07 Oct 2022 06:43:53 +0000
ROA not before:           Fri 07 Oct 2022 06:43:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210439
IP address blocks:        146.19.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b1:2f:a5:b9:46:3c:4e:1d:c7:65:9a:6e:b4:e0:9a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
        Validity
            Not Before: Oct  7 06:43:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a760433e8fc8857bbcb3652006bb6fd8918f035b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:f5:0e:d2:50:31:59:2e:77:9e:90:e7:98:
                    96:fe:fb:64:73:98:3e:74:9e:7d:30:55:5b:4e:95:
                    d5:61:6b:95:4a:79:37:a6:31:02:a9:81:71:e5:c3:
                    c5:b7:4b:85:71:5e:2d:31:88:38:17:bd:2d:cf:f9:
                    60:52:6e:fc:42:30:e2:54:12:e6:27:71:57:bc:5b:
                    ec:32:8a:f2:56:66:24:b6:45:a7:e5:df:12:f1:a1:
                    61:78:4b:fc:8f:99:7e:6d:5a:20:dd:e6:08:77:c3:
                    67:99:02:fe:46:7a:47:5b:9a:0a:e7:64:3b:d9:11:
                    90:32:32:1d:7b:37:67:ea:46:94:1c:5c:2a:30:1f:
                    a2:bc:78:d8:8f:8e:5b:01:fe:54:c1:fa:e0:17:09:
                    1f:c7:f3:03:1c:b1:cd:11:20:56:76:9e:35:ec:34:
                    98:b6:51:30:e8:04:a7:55:c7:02:87:42:cf:28:2f:
                    13:68:a6:98:af:25:5d:97:a5:55:e5:a5:69:e3:6f:
                    98:04:64:f0:c0:95:ad:ba:ba:04:89:62:bf:c4:fd:
                    b4:f5:fb:60:78:5a:91:28:dd:4d:14:ad:cb:ae:fc:
                    33:ca:05:8c:09:71:b9:1b:97:b2:f3:82:1b:7f:56:
                    55:6b:43:4b:56:e0:a5:2e:8d:b7:84:27:35:21:40:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:60:43:3E:8F:C8:85:7B:BC:B3:65:20:06:BB:6F:D8:91:8F:03:5B
            X509v3 Authority Key Identifier:
                keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/p2BDPo_IhXu8s2UgBrtv2JGPA1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:95:fa:3d:a0:5a:49:14:30:7e:48:57:12:1d:43:8d:82:
         88:08:39:20:ff:17:00:88:b7:4f:dc:e5:1b:2c:58:c5:fe:1d:
         df:1d:dd:9a:37:ad:4c:5e:71:c1:ed:d9:46:d7:bf:f2:fc:49:
         aa:ed:b0:8b:fe:70:2c:a8:cc:a6:9c:13:56:8b:b6:0d:cb:1e:
         68:a0:c2:47:1f:cd:68:9f:0f:23:ff:e9:ab:e5:54:fe:8c:73:
         79:0f:fe:51:76:c9:4d:31:c7:e7:91:16:d4:1e:eb:3e:ab:b9:
         99:f4:08:e0:85:91:f2:fa:28:df:a3:e7:cc:42:8f:16:c5:f2:
         a9:d8:df:7c:77:de:9e:16:db:65:fc:eb:5c:83:c1:bd:93:fe:
         bc:ef:6c:84:c8:f2:3e:0a:d7:00:f8:9a:d1:3d:2d:de:6c:10:
         24:fe:e8:50:45:fa:e3:b4:b4:0e:33:48:39:53:ce:e0:89:4b:
         31:05:96:8d:cc:c9:85:4f:bb:ef:17:48:c4:aa:f6:af:86:89:
         f4:57:6b:8a:97:38:b5:14:fd:18:74:6d:1d:cd:1c:16:3e:d8:
         95:db:d7:83:15:37:df:f9:20:66:77:9d:e8:3e:5d:2d:9b:2c:
         8d:e4:89:ab:97:0e:60:2c:0f:14:09:e2:e1:16:a3:05:95:df:
         0f:5f:b2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:26 2023 by rpki-client on console-fra.rpki-client.org