Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/_Ij8cQimI2FdBIyF1Lf1KmRF14U.roa
File:                     _Ij8cQimI2FdBIyF1Lf1KmRF14U.roa (raw, json)
Hash identifier:          BziYknn8x44RtN6IEYxafuH/I17Ef0NsQbaDo1jYqa0=
Subject key identifier:   FC:88:FC:71:08:A6:23:61:5D:04:8C:85:D4:B7:F5:2A:64:45:D7:85
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       178BFA6E
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/_Ij8cQimI2FdBIyF1Lf1KmRF14U.roa
Signing time:             Sat 01 Jan 2022 10:55:07 +0000
ROA not before:           Sat 01 Jan 2022 10:55:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56805
IP address blocks:        185.63.77.0/24 maxlen: 24
                          185.63.76.0/22 maxlen: 22
                          185.63.76.0/24 maxlen: 24
                          185.63.78.0/24 maxlen: 24
                          185.63.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395049582 (0x178bfa6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: Jan  1 10:55:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc88fc7108a623615d048c85d4b7f52a6445d785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:9f:e2:23:36:fc:7e:bd:96:00:07:3e:cd:
                    fb:e5:90:9a:3b:35:68:97:fe:30:f3:2d:c1:06:1b:
                    5e:a5:63:0f:7c:1a:d3:b3:bf:40:24:d1:c6:c7:d1:
                    2c:66:25:44:26:b8:e6:0c:7c:e4:88:bd:da:7e:79:
                    c8:f7:fe:6e:f8:cc:e7:07:e5:2a:79:55:a9:65:34:
                    cf:1a:d0:ef:7f:2f:a0:63:26:f1:7a:b1:bb:d9:0a:
                    2b:7f:56:97:c1:bf:fe:b6:ec:bf:5c:af:ff:d8:c2:
                    27:6a:f2:9f:b9:40:81:36:ab:45:43:00:bd:96:75:
                    78:d2:e8:c4:c0:ef:c0:be:d4:2b:f3:78:d5:ab:93:
                    de:91:38:c3:75:b7:5e:49:c9:8f:a6:57:74:de:98:
                    13:9d:34:1c:17:a2:e7:b8:60:46:29:d0:58:1e:a1:
                    0a:74:e2:0e:14:88:1b:0d:75:51:e7:0d:1b:d3:e2:
                    51:d8:8c:7d:42:e9:4a:dc:cd:1d:6a:62:b4:b0:3d:
                    91:48:f8:b0:e5:29:4d:bf:20:35:83:de:30:67:dc:
                    02:07:bb:18:93:5a:20:d2:bd:a9:0d:e2:36:af:2d:
                    9e:5e:9c:54:8e:57:46:90:a8:ef:4e:82:23:29:94:
                    e6:da:93:7d:91:e0:93:1f:91:94:b5:62:74:cf:59:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:88:FC:71:08:A6:23:61:5D:04:8C:85:D4:B7:F5:2A:64:45:D7:85
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/_Ij8cQimI2FdBIyF1Lf1KmRF14U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:ac:ef:0f:7b:07:c1:2b:9f:22:d2:81:64:b4:27:fd:11:1e:
         35:56:dd:fa:c4:27:b2:6a:ec:36:4f:66:2f:dd:79:7c:7c:df:
         0a:a0:d2:d8:55:26:ad:fc:9a:de:6e:aa:10:77:f8:7b:dd:94:
         7c:ad:f3:b4:c8:71:3e:ca:0a:97:5d:e6:09:ba:0c:80:ba:d3:
         5f:83:e1:18:e0:d2:aa:29:af:c9:a6:d2:39:92:56:96:7d:fa:
         9d:62:4b:8a:74:32:8b:bc:25:f4:b3:93:01:91:01:da:c3:be:
         5e:56:42:ba:4d:09:e3:ee:41:d8:5e:6a:1b:c4:65:9b:40:7d:
         0f:77:1f:05:75:40:aa:84:1b:5b:2a:46:45:e3:fa:7c:4e:45:
         97:17:02:62:8c:0d:57:2a:19:4d:94:02:cc:ac:d8:a7:e3:7c:
         7c:18:a3:18:ab:4d:0a:bd:61:3c:c8:0c:e9:58:3c:a5:9c:24:
         c1:54:f2:89:5d:94:32:ff:80:04:42:05:b8:61:55:a7:a9:51:
         dd:2f:da:e2:37:0b:5e:46:a9:c7:12:dd:4e:49:b5:69:81:9c:
         1b:b8:37:23:40:2f:f6:9a:6f:54:c6:db:77:79:aa:36:e5:a2:
         d3:80:9b:9d:6d:34:f6:e9:07:92:b7:69:66:bd:02:64:d8:7b:
         37:1b:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:05 2023 by rpki-client on console-fra.rpki-client.org