Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/IPlMRi95cox_0EDULZIiunADjWw.roa
File:                     IPlMRi95cox_0EDULZIiunADjWw.roa (raw, json)
Hash identifier:          PIwuFqd8svtBXFHW8k5aU/fLfyVJVNrSB92JZblaNUM=
Subject key identifier:   20:F9:4C:46:2F:79:72:8C:7F:D0:40:D4:2D:92:22:BA:70:03:8D:6C
Certificate issuer:       /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial:       08285623
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/IPlMRi95cox_0EDULZIiunADjWw.roa
Signing time:             Sat 01 Jan 2022 07:56:47 +0000
ROA not before:           Sat 01 Jan 2022 07:56:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        82.98.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136861219 (0x8285623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
        Validity
            Not Before: Jan  1 07:56:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20f94c462f79728c7fd040d42d9222ba70038d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:60:d8:99:29:d9:09:62:17:70:8d:43:48:
                    4f:fb:6d:70:47:12:23:bf:1c:55:d0:8e:b1:9f:4c:
                    f7:c3:e0:af:15:6a:4d:72:00:ff:03:96:5d:90:d6:
                    f4:bb:28:4a:7a:37:c9:bb:73:37:1b:db:b7:b6:7b:
                    0d:dc:a6:fb:41:73:ef:34:00:79:ce:ee:46:57:d4:
                    09:59:89:52:d0:7d:c5:0d:e4:d2:f0:0d:d0:cc:a0:
                    fd:86:55:99:94:9e:18:d8:28:3a:76:4d:9b:5c:f9:
                    72:58:95:c9:75:8c:42:72:81:26:bd:0f:2a:2e:73:
                    23:92:46:5a:fa:6f:14:52:c0:ff:4f:07:ce:da:c3:
                    58:b9:cb:ca:cf:56:27:d1:67:05:10:6b:c6:c7:02:
                    7d:86:17:fb:ce:5d:25:38:5a:52:a1:cd:a1:d5:69:
                    8c:78:fc:eb:1b:19:21:d8:af:bb:e0:80:31:2e:be:
                    c9:d9:19:d3:b0:b9:81:7c:cc:e8:e6:a7:2a:64:44:
                    ac:e0:b0:02:57:41:3c:59:e3:f7:32:a9:36:71:c7:
                    13:6d:08:28:1f:68:d5:93:88:1f:52:3a:43:1c:48:
                    cd:95:96:08:6c:70:40:c0:97:42:5f:c0:b5:4a:b1:
                    1c:40:50:10:c8:b6:a5:ad:c8:bb:7f:e1:9f:7e:ff:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:4C:46:2F:79:72:8C:7F:D0:40:D4:2D:92:22:BA:70:03:8D:6C
            X509v3 Authority Key Identifier:
                keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/IPlMRi95cox_0EDULZIiunADjWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:db:0d:fc:dd:a3:af:af:b9:79:15:7a:49:d2:af:2d:34:22:
         70:19:1a:fb:29:48:a3:8a:36:9a:b0:c1:a8:86:21:ab:c6:1a:
         65:5d:20:9f:d6:ca:07:dc:47:62:bd:c1:1e:ae:71:74:62:65:
         18:c9:c1:b9:01:43:9a:e4:58:db:65:ff:b2:3e:a8:3e:fc:01:
         66:a3:23:1e:d0:82:b2:4b:c2:99:8c:ba:a4:61:f0:41:cb:6d:
         61:46:46:a0:c3:63:0b:a3:ac:bd:a8:3d:a5:f3:4e:0c:d4:f5:
         fd:10:3b:da:b4:e0:ce:94:77:06:36:34:1e:fa:22:7e:b2:a7:
         f0:da:8d:bf:de:04:da:21:81:ab:11:3d:0f:79:fb:8b:9d:16:
         03:12:05:1d:2c:b1:99:a3:ca:cb:48:be:c3:57:25:28:3a:07:
         86:23:10:f9:3e:fe:e2:f0:80:52:dd:1d:d9:38:fe:a6:b5:53:
         0d:47:87:f7:22:28:df:78:ad:6e:a8:70:2a:36:41:f8:d1:06:
         b3:8a:59:83:a6:8a:1c:b5:3a:18:45:63:ea:7b:93:34:a0:a4:
         9d:31:9b:56:c8:c5:89:ac:83:23:aa:91:bb:4e:58:41:3e:a0:
         1a:e3:b4:15:9b:65:f3:a7:3c:69:71:22:9e:3a:ca:c0:1f:0e:
         cf:27:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:18 2023 by rpki-client on console-ams.rpki-client.org