Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/D7sAnyVR4JKOoxDMgtgHr3xI4Vg.roa
File:                     D7sAnyVR4JKOoxDMgtgHr3xI4Vg.roa (raw, json)
Hash identifier:          WibamLwdwpYrljcbRfhHD5HzX+E/52A8fmiv4z8/g30=
Subject key identifier:   0F:BB:00:9F:25:51:E0:92:8E:A3:10:CC:82:D8:07:AF:7C:48:E1:58
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       15D87C78
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/D7sAnyVR4JKOoxDMgtgHr3xI4Vg.roa
Signing time:             Fri 18 Feb 2022 19:46:21 +0000
ROA not before:           Fri 18 Feb 2022 19:46:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141039
IP address blocks:        185.65.50.0/24 maxlen: 24
                          45.82.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366509176 (0x15d87c78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Feb 18 19:46:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0fbb009f2551e0928ea310cc82d807af7c48e158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:ba:55:5c:a4:ee:ac:73:42:6a:d0:3b:12:
                    47:12:f3:3f:35:c8:b1:e3:12:5c:a4:a5:df:3e:8c:
                    d5:5a:9f:0f:ce:76:99:5b:84:eb:90:25:49:d9:12:
                    41:9a:f7:ba:c2:2c:29:8b:80:66:c6:9d:4e:e7:21:
                    53:06:c2:ad:ba:fc:ba:a5:f9:57:1a:99:f1:94:81:
                    df:02:1c:9c:6a:d6:41:75:e2:32:be:41:88:89:79:
                    b9:da:23:cd:df:85:36:9e:8a:b3:3f:4f:42:53:6c:
                    96:76:43:e9:2b:a9:4d:ff:b0:cd:8f:3a:b1:54:46:
                    b0:b6:05:91:51:df:2b:ba:e1:92:86:b3:29:24:27:
                    a5:ca:e5:3a:e1:a9:9c:de:30:f7:da:98:33:c3:3d:
                    69:24:a9:ef:bc:76:48:d1:a3:b1:63:f9:0b:4a:41:
                    19:64:6e:1b:24:54:89:3f:57:57:10:a0:3d:fd:eb:
                    64:4c:cc:48:8c:6f:48:89:25:46:7d:d6:79:d9:9d:
                    2f:fc:6f:15:a7:06:91:01:2b:f1:93:95:9f:be:2d:
                    17:1d:01:2d:e8:77:34:4e:8b:b0:39:88:c7:72:d5:
                    f0:53:a7:f8:51:a3:fd:99:6d:2a:a2:76:06:81:e4:
                    f0:f3:14:42:8b:4c:c4:0a:4f:6c:14:43:41:ae:7b:
                    fa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:00:9F:25:51:E0:92:8E:A3:10:CC:82:D8:07:AF:7C:48:E1:58
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/D7sAnyVR4JKOoxDMgtgHr3xI4Vg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.33.0/24
                  185.65.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:15:f8:d1:3b:f9:3e:f8:0e:ee:ff:60:32:39:4c:52:39:a5:
         26:c9:fc:59:6f:08:f3:2e:31:a4:c2:aa:9e:77:b4:ea:a8:a8:
         81:39:75:4e:12:b1:3d:28:a9:53:8a:ba:2b:b4:a8:69:2e:13:
         c8:e8:aa:9b:00:c2:12:48:19:72:6a:fb:8d:a2:ac:83:1b:76:
         b3:86:07:af:30:e3:60:9c:e4:3f:02:84:68:c2:63:b4:a8:20:
         bb:b1:38:65:3c:dd:9e:c5:5b:02:e5:79:af:f9:2e:41:f4:9f:
         2f:84:bf:50:61:52:39:26:79:a7:7f:b2:ad:4e:97:26:c6:14:
         c5:7f:d3:ca:43:3e:63:a4:55:6f:d4:4b:d1:07:c6:e2:e0:2a:
         cc:8b:7a:85:45:2b:38:9f:ae:a4:c4:1e:98:95:cb:03:b4:bb:
         63:a4:18:eb:f3:79:85:3f:c1:f8:15:9a:39:3d:48:f9:27:21:
         fc:4d:37:fe:50:22:56:3e:da:9c:25:9b:e5:17:46:ab:4d:a8:
         a8:1f:5e:57:81:06:78:fc:f6:34:88:c6:8c:35:ea:e7:21:ea:
         b9:c4:a9:59:ac:e1:a3:2e:29:29:09:bd:d1:d6:ca:fa:80:77:
         c1:5e:3f:70:9d:86:de:2f:db:91:a5:fc:fc:72:ba:f4:c4:ef:
         4e:cf:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org