Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/bSzU4nGQuQ5vhddAWB9Rn4OG20g.roa
File:                     bSzU4nGQuQ5vhddAWB9Rn4OG20g.roa (raw, json)
Hash identifier:          5S1HkIUOMeqm/DAXMdkyPcuUpGQ5tEWx6T4BkASFFo0=
Subject key identifier:   6D:2C:D4:E2:71:90:B9:0E:6F:85:D7:40:58:1F:51:9F:83:86:DB:48
Certificate issuer:       /CN=34f3891c7528e1c9ed08b2cbe3dc3607afb37a4c
Certificate serial:       013DAEE7
Authority key identifier: 34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPOJHHUo4cntCLLL49w2B6-zekw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/bSzU4nGQuQ5vhddAWB9Rn4OG20g.roa
Signing time:             Sat 01 Jan 2022 10:55:47 +0000
ROA not before:           Sat 01 Jan 2022 10:55:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.218.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20819687 (0x13daee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f3891c7528e1c9ed08b2cbe3dc3607afb37a4c
        Validity
            Not Before: Jan  1 10:55:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d2cd4e27190b90e6f85d740581f519f8386db48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:87:1f:1e:29:ce:e4:77:27:6d:38:95:da:
                    07:73:29:63:27:f7:c5:bc:30:4d:09:57:10:e5:b5:
                    bf:b4:e1:c1:14:a8:56:ee:5a:1e:ab:46:78:d5:f8:
                    bb:22:14:29:8c:77:34:07:cf:e5:7a:cc:14:4e:1b:
                    23:73:95:da:45:31:cd:e3:0f:2c:fe:c6:55:31:18:
                    be:9d:34:95:0b:15:1d:45:8d:e4:98:09:89:6c:cf:
                    89:20:96:94:a1:29:fb:7f:c7:7c:e2:49:60:89:1b:
                    be:dc:97:0c:c4:29:bd:d3:1d:da:08:5a:79:71:c8:
                    bf:8a:62:55:9f:55:5d:ef:de:7f:a8:33:b6:28:4d:
                    4a:23:4b:14:d0:26:e1:cc:a3:ac:6e:8d:cd:01:36:
                    aa:a5:1a:33:ba:cb:f0:f7:1a:9f:0c:e7:04:6f:a7:
                    21:51:32:6b:51:0a:2f:b2:39:1c:2c:77:38:22:d7:
                    9b:15:5a:1c:d0:34:f7:2f:e4:50:42:b9:98:5d:5a:
                    59:bd:70:03:9c:f4:4e:8b:1d:5a:3f:37:3b:89:40:
                    d6:1d:b2:6c:be:e8:2c:2b:01:94:81:ef:ab:06:db:
                    54:de:c5:9a:ec:49:d3:f5:02:60:42:72:01:fd:c7:
                    bd:80:39:d8:dd:13:b6:72:c3:9e:db:1e:c0:12:d2:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:D4:E2:71:90:B9:0E:6F:85:D7:40:58:1F:51:9F:83:86:DB:48
            X509v3 Authority Key Identifier:
                keyid:34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPOJHHUo4cntCLLL49w2B6-zekw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/bSzU4nGQuQ5vhddAWB9Rn4OG20g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/NPOJHHUo4cntCLLL49w2B6-zekw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ca:4b:ce:a2:52:b7:6f:68:8a:e8:bb:81:c8:8b:77:d2:66:
         c4:7d:a6:5b:b2:68:2d:84:82:23:0c:3c:71:34:69:62:2f:55:
         c2:38:04:ba:fb:ab:e3:25:77:01:ea:20:53:09:5a:96:2d:28:
         71:f8:2b:c5:41:14:cc:78:6d:df:dd:4b:3b:f3:07:98:21:84:
         16:ba:14:38:e5:1d:b3:3e:4d:df:54:36:90:86:f2:c7:0d:43:
         14:8c:7d:d1:26:fc:b9:59:23:36:50:45:9c:e8:0f:36:24:bb:
         3c:1c:d1:d8:d8:4c:4e:c1:6d:4d:83:66:e8:12:9f:5e:0f:59:
         6a:c2:3a:81:9f:ad:bd:1b:25:3a:c4:a2:7e:bb:84:db:12:d6:
         4e:0d:47:fd:47:bc:b8:74:42:2e:0a:b1:b8:39:86:8d:44:3f:
         b6:ca:8a:8f:88:c7:f1:96:a8:23:0a:ae:18:f2:db:63:00:f4:
         fe:13:af:57:76:b0:37:58:82:ec:d4:c2:7c:ea:be:e7:5a:58:
         e0:3b:f5:03:7b:fe:c4:af:2d:90:d7:20:47:4c:54:95:11:a5:
         59:26:bc:6a:82:8b:d4:e8:d8:af:7f:96:7f:7b:e6:c7:e4:b2:
         11:4c:97:a0:d0:c6:55:23:6c:e6:b4:93:6e:e3:5d:e3:27:23:
         1f:50:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:49 2023 by rpki-client on console-fra.rpki-client.org