Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/O1V4_Wyb2-VBWjP9Ta01nJUUczg.roa
File:                     O1V4_Wyb2-VBWjP9Ta01nJUUczg.roa (raw, json)
Hash identifier:          wt3oUJhVcpga6tvBLO8tPJ1UgLxrBsQEPFF5NwDqS08=
Subject key identifier:   3B:55:78:FD:6C:9B:DB:E5:41:5A:33:FD:4D:AD:35:9C:95:14:73:38
Certificate issuer:       /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial:       0A44D7E9
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/O1V4_Wyb2-VBWjP9Ta01nJUUczg.roa
Signing time:             Sat 01 Jan 2022 05:53:40 +0000
ROA not before:           Sat 01 Jan 2022 05:53:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49612
IP address blocks:        185.178.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172283881 (0xa44d7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
        Validity
            Not Before: Jan  1 05:53:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b5578fd6c9bdbe5415a33fd4dad359c95147338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:2d:77:a5:b1:42:5b:07:45:8c:a3:a1:84:
                    71:18:e9:98:e9:12:7e:e1:c2:d7:69:93:8c:45:86:
                    01:bc:22:72:0b:bb:9d:76:f2:a3:56:b3:31:83:a0:
                    37:80:a3:d8:54:96:09:76:fd:4e:03:b0:12:1a:35:
                    17:28:73:4e:66:ee:e8:86:04:da:a8:95:04:02:b1:
                    33:c2:26:18:45:ea:83:d0:25:8c:cc:cb:45:86:66:
                    d6:df:54:ac:a8:06:3c:f4:38:35:f9:7b:fc:20:aa:
                    3e:00:4a:af:1f:b4:f3:4f:66:d4:06:e1:9b:66:82:
                    e9:c4:5f:bf:df:26:db:0c:84:9d:d4:49:31:87:70:
                    d3:e3:37:49:6c:38:ac:85:f3:55:c3:5a:10:8a:f2:
                    01:27:2a:aa:3a:2e:e7:f9:79:2e:73:90:ea:4e:34:
                    60:95:b3:e1:b3:d1:10:45:06:a9:0a:ec:34:b4:fc:
                    45:e5:99:45:1a:72:f0:29:d1:95:6a:b3:ee:00:da:
                    8f:04:ed:a1:fe:2a:60:46:96:f6:ea:54:d9:65:b1:
                    53:97:51:3a:fa:7a:0f:58:9e:1e:94:29:d2:01:78:
                    c9:d9:cf:52:38:b3:92:69:b3:7c:5a:18:d0:08:3e:
                    ba:9c:4e:58:1c:0c:0f:a6:d1:5e:c6:79:01:b2:24:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:55:78:FD:6C:9B:DB:E5:41:5A:33:FD:4D:AD:35:9C:95:14:73:38
            X509v3 Authority Key Identifier:
                keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/O1V4_Wyb2-VBWjP9Ta01nJUUczg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:37:a2:0f:fd:8c:68:8e:2e:b8:96:c7:5e:12:5c:19:ec:45:
         99:81:1d:33:2f:2e:e8:f5:9d:7f:ba:38:1c:9c:4e:69:6d:20:
         b9:a9:5b:e1:7b:74:ae:a7:20:7d:8f:ba:53:b1:0f:d2:b3:4e:
         1a:27:f8:b7:e6:ba:e4:a7:de:5c:c9:b3:c9:93:7b:8a:de:b9:
         3f:1c:a5:93:dc:eb:c9:c0:91:f0:c9:ee:59:d1:9b:60:31:49:
         d4:c9:83:60:ff:92:96:d6:4f:86:c8:90:4f:66:8a:12:43:ef:
         7a:3d:40:cb:95:d2:b0:c4:e2:82:61:05:ac:30:16:2e:ed:f3:
         27:b7:08:2f:90:4e:2a:b3:4b:06:61:f5:b3:ce:e2:f9:c7:62:
         99:0d:9d:8c:f0:7b:95:db:ea:d5:0a:ec:a1:da:95:3c:b2:b8:
         fd:0e:cb:21:ed:8c:5d:9f:bd:3d:48:c8:2e:89:d2:3f:84:01:
         30:3b:f2:0f:b3:74:15:79:a7:68:2d:63:e7:ec:bb:f5:c3:e7:
         9f:4d:a5:4b:20:d5:b2:20:40:51:b7:2e:d2:5d:26:d4:1a:cc:
         c2:89:a5:4a:c8:90:76:c8:db:e7:d2:5f:9f:ee:c2:6b:b3:a5:
         34:ce:89:2c:c1:a1:3d:0b:0f:d9:df:35:4b:12:61:0a:21:9c:
         1d:70:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:47 2023 by rpki-client on console-fra.rpki-client.org