Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/E7JW6u2YeSDloeCmsV1B6lNV_fc.roa
File:                     E7JW6u2YeSDloeCmsV1B6lNV_fc.roa (raw, json)
Hash identifier:          3/SIzLged4sLo/uM0iEnRTH8/LS8HSItddtiplo6iXY=
Subject key identifier:   13:B2:56:EA:ED:98:79:20:E5:A1:E0:A6:B1:5D:41:EA:53:55:FD:F7
Certificate issuer:       /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial:       015ADF7C
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/E7JW6u2YeSDloeCmsV1B6lNV_fc.roa
Signing time:             Fri 13 May 2022 07:11:41 +0000
ROA not before:           Fri 13 May 2022 07:11:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48430
IP address blocks:        195.95.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22732668 (0x15adf7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
        Validity
            Not Before: May 13 07:11:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13b256eaed987920e5a1e0a6b15d41ea5355fdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:61:b3:87:95:c2:14:be:41:22:eb:be:47:
                    26:e1:ee:9b:34:3c:f4:d2:11:de:26:db:e5:51:5e:
                    a0:34:df:25:46:55:bd:15:82:b5:34:35:f3:c6:5e:
                    47:6f:b0:e6:fe:97:2c:b8:03:0f:c9:f0:ae:26:b9:
                    a7:1e:e9:3b:74:58:2f:9b:a5:1e:cb:2c:e0:ad:d4:
                    89:80:3e:e0:aa:ec:99:db:83:96:ef:08:ff:07:03:
                    ec:a4:c2:38:03:90:37:4a:57:33:22:64:c7:19:5b:
                    a2:eb:5e:ab:f8:aa:75:b4:64:8a:4e:ac:b1:69:53:
                    b8:3b:b7:02:7c:af:a9:8d:6d:4a:ad:b3:ad:2a:31:
                    59:f9:2d:cd:01:0c:85:b3:0c:01:0e:5b:ac:60:bb:
                    85:28:7e:93:71:10:7a:30:d1:d8:2e:43:19:10:66:
                    4f:15:97:ee:14:d3:eb:c0:15:52:f8:97:03:dc:ab:
                    07:a5:a8:ee:36:40:05:4f:0a:ec:c5:a7:32:3c:5c:
                    d1:04:da:61:eb:65:74:20:f5:22:83:08:60:3b:3c:
                    e0:ed:fb:6b:03:32:03:97:90:f6:40:64:77:23:9f:
                    f4:ac:bc:ca:ee:07:18:99:c5:d7:63:10:f3:a1:72:
                    fe:ad:8e:b0:fb:11:69:11:13:c2:ac:04:cb:6e:8b:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:56:EA:ED:98:79:20:E5:A1:E0:A6:B1:5D:41:EA:53:55:FD:F7
            X509v3 Authority Key Identifier:
                keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/E7JW6u2YeSDloeCmsV1B6lNV_fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:9c:62:a8:df:39:fb:9f:4a:b2:ab:da:6e:e8:96:e2:ca:
         6d:e0:b6:2d:53:cf:8c:32:50:a9:bd:6e:42:01:54:73:34:44:
         56:3d:9c:42:e8:c4:c6:4e:58:88:99:0e:26:42:82:7a:e4:e6:
         67:87:d8:1b:7b:74:f2:4d:88:e2:f4:88:ce:9a:07:8e:0e:64:
         18:ae:f7:f1:64:1b:44:65:99:05:19:dd:7a:e0:02:7f:59:fb:
         b3:1b:de:ae:c7:23:af:5d:1e:59:13:f3:f9:37:11:bd:cb:67:
         a2:21:b1:93:27:5d:b2:5c:c6:e5:c8:e5:78:96:6e:13:5f:08:
         9c:ec:5e:29:14:10:f8:47:13:ca:4e:36:8a:30:2b:43:f1:15:
         89:2c:fe:48:db:48:22:30:c4:62:c9:32:82:73:4e:3d:be:52:
         19:6d:2c:d6:6f:bb:65:28:ee:c4:f9:88:da:b6:cf:e4:80:12:
         c7:cb:a1:af:28:4c:62:27:54:62:29:4b:86:5e:ff:ce:32:69:
         b7:a4:2e:94:af:af:33:7e:a0:0d:77:82:01:42:a0:0d:c4:d1:
         40:75:30:13:01:24:37:8e:15:3c:2a:f5:8c:02:ff:2c:a5:f1:
         26:30:40:02:82:aa:6b:28:97:e5:56:90:28:5e:d4:4f:13:a5:
         f2:49:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org