Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/LUWr69tJnCD38KQunT567v9EcsI.roa
File:                     LUWr69tJnCD38KQunT567v9EcsI.roa (raw, json)
Hash identifier:          VyQhwfkcAToBretvD8M513LHSMrmlwlE9/kotv5BhM4=
Subject key identifier:   2D:45:AB:EB:DB:49:9C:20:F7:F0:A4:2E:9D:3E:7A:EE:FF:44:72:C2
Certificate issuer:       /CN=07e405e9d9b757e8141b4c638d65f5411adb0e2f
Certificate serial:       01AE0264
Authority key identifier: 07:E4:05:E9:D9:B7:57:E8:14:1B:4C:63:8D:65:F5:41:1A:DB:0E:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-QF6dm3V-gUG0xjjWX1QRrbDi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/LUWr69tJnCD38KQunT567v9EcsI.roa
Signing time:             Wed 11 May 2022 22:00:47 +0000
ROA not before:           Wed 11 May 2022 22:00:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        212.18.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28181092 (0x1ae0264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e405e9d9b757e8141b4c638d65f5411adb0e2f
        Validity
            Not Before: May 11 22:00:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d45abebdb499c20f7f0a42e9d3e7aeeff4472c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:c4:7d:7e:65:df:ee:bd:3d:16:1e:54:d5:
                    cd:95:fb:1f:f1:60:25:97:9a:30:25:03:eb:f9:8f:
                    01:c2:43:0b:f6:fd:22:25:0d:75:b1:a9:ce:43:f0:
                    aa:6d:76:0f:ed:52:f4:01:c5:1b:e6:39:65:1a:1e:
                    96:b0:1f:f0:57:4c:15:32:42:57:7a:30:99:24:ca:
                    3b:f0:80:60:1a:61:d0:23:b0:21:03:0e:3c:94:5e:
                    98:ed:f6:1d:dc:77:64:7d:dc:7a:4f:76:79:4b:01:
                    c9:f1:4e:b1:10:1c:94:4e:6c:ed:15:cf:70:c1:9c:
                    2d:86:be:9e:3c:fa:91:8a:32:ce:22:f8:37:47:75:
                    18:f6:26:2d:74:8e:84:6e:a4:4d:5e:95:74:11:c7:
                    67:94:12:21:ee:da:77:c3:5a:6f:df:46:f8:90:a4:
                    a6:09:4e:fc:16:74:72:2e:e8:3c:60:69:af:f0:75:
                    4a:8f:6b:54:e0:87:5d:e0:3c:3d:75:ae:4d:cf:c2:
                    7e:0a:7b:e7:96:e3:a4:82:a1:b3:5f:c3:6e:84:24:
                    c3:7b:89:3b:22:79:1b:14:0b:6f:93:c3:1c:04:b2:
                    94:72:83:aa:dd:29:d4:99:2b:fa:2a:d8:03:bc:cb:
                    d1:e3:32:92:83:d9:f4:1e:29:90:27:17:04:b7:85:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:45:AB:EB:DB:49:9C:20:F7:F0:A4:2E:9D:3E:7A:EE:FF:44:72:C2
            X509v3 Authority Key Identifier:
                keyid:07:E4:05:E9:D9:B7:57:E8:14:1B:4C:63:8D:65:F5:41:1A:DB:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-QF6dm3V-gUG0xjjWX1QRrbDi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/LUWr69tJnCD38KQunT567v9EcsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cd27a8-5e21-48ff-9dfe-cf5e1eaa37e1/1/B-QF6dm3V-gUG0xjjWX1QRrbDi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:32:d7:e9:ab:a2:c4:a1:78:ae:43:4d:dd:23:c9:a7:41:75:
         f3:fe:46:ea:87:0f:11:66:07:3d:b5:84:b8:77:ec:03:5b:f0:
         68:bf:34:fe:87:7c:b0:ce:b2:29:ba:60:df:d8:f9:81:16:8f:
         83:24:83:33:5c:e4:86:c3:1d:f5:7a:26:dc:67:fe:e1:05:67:
         bf:0c:34:7f:14:e9:94:06:c0:ba:10:bd:b4:10:66:95:67:2d:
         90:fa:18:4b:ad:18:f8:cf:50:b6:b1:a7:a5:3a:08:cf:28:db:
         5a:e8:6c:77:ee:04:2f:bc:f5:c8:a0:4f:d3:1d:bb:e7:cd:5c:
         02:65:59:94:1b:b4:a6:8f:9d:e9:a8:80:5f:4e:62:a7:a0:96:
         35:10:de:71:59:77:23:de:9c:af:a1:a3:9c:29:b0:12:62:13:
         6f:db:76:6d:d5:95:aa:8f:1e:12:cc:56:8f:de:e5:c8:ee:cd:
         fd:52:34:82:1a:6b:53:fd:3c:79:86:2a:80:4f:db:e4:7f:c9:
         c9:c1:83:56:5a:45:86:a5:9f:37:a3:df:b0:27:7f:4b:d5:38:
         c0:af:08:b2:c5:c9:18:25:ec:01:4e:6f:90:a6:ff:83:76:4f:
         04:2e:aa:4a:56:c3:93:b1:8b:a2:4c:d0:86:de:32:b2:db:e8:
         55:8e:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:27 2023 by rpki-client on console-ams.rpki-client.org