Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Mn6sIOlcrnS7i83XOtr-JsMiIos.roa
File:                     Mn6sIOlcrnS7i83XOtr-JsMiIos.roa (raw, json)
Hash identifier:          01DDbyuf9tieb62M4DIKi8s+dJoSyYzpDbzTd3+5FdU=
Subject key identifier:   32:7E:AC:20:E9:5C:AE:74:BB:8B:CD:D7:3A:DA:FE:26:C3:22:22:8B
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       17D35D52
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Mn6sIOlcrnS7i83XOtr-JsMiIos.roa
Signing time:             Sat 01 Jan 2022 00:54:31 +0000
ROA not before:           Sat 01 Jan 2022 00:54:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35809
IP address blocks:        80.233.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399727954 (0x17d35d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  1 00:54:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=327eac20e95cae74bb8bcdd73adafe26c322228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:4c:82:3d:cd:99:6d:92:a7:e1:6e:73:05:
                    0a:04:74:0f:45:83:3c:a9:b7:1f:48:d7:b3:c2:e2:
                    b9:7c:43:bc:eb:16:a0:0e:f4:ce:81:5c:1f:39:f7:
                    94:a4:91:3c:2e:b4:df:3d:61:f3:c2:d7:dc:15:df:
                    fb:f8:00:96:73:0b:8f:1d:d2:9a:4b:96:97:32:17:
                    cc:7f:b4:7a:49:71:b6:18:39:58:b8:66:b3:b8:94:
                    c4:85:ba:bf:04:14:c8:d2:3e:0d:23:4f:4a:95:67:
                    b0:46:c7:88:53:e1:fe:4d:24:8b:95:a8:47:b9:e0:
                    26:51:53:80:f4:eb:34:56:b4:c9:88:f7:36:e8:d8:
                    a9:cd:1f:a2:cf:ac:37:5b:70:07:97:4d:69:93:e0:
                    15:70:06:f5:44:8c:61:6f:3d:88:73:5c:bc:f8:51:
                    a8:6e:53:88:1b:22:6a:47:de:fd:26:3f:bd:ce:bb:
                    bc:98:59:16:c3:36:31:33:29:07:0b:b1:0f:be:52:
                    d6:83:a2:46:61:67:74:91:87:9d:82:f4:e6:fc:56:
                    ed:57:2b:e7:e9:48:32:ef:ad:12:4f:ac:44:ea:d3:
                    87:c0:be:ac:a5:c7:c7:2e:a0:f1:ca:4f:75:26:13:
                    3f:93:9e:76:c2:46:f5:ce:fa:1a:64:0e:3d:1f:19:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:AC:20:E9:5C:AE:74:BB:8B:CD:D7:3A:DA:FE:26:C3:22:22:8B
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Mn6sIOlcrnS7i83XOtr-JsMiIos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:8b:96:3e:ce:17:42:e8:f6:1a:55:d4:17:d4:5c:97:68:96:
         f3:55:50:af:ba:31:a9:15:e5:38:38:e9:f7:90:4e:7f:00:c9:
         1e:79:ff:31:e3:4b:bf:3d:62:07:f2:0c:13:a6:dc:40:d2:1e:
         38:c5:17:95:13:c9:7b:bd:5e:9d:a1:6a:6a:6e:dd:a3:1d:45:
         a0:98:bc:7d:88:45:02:15:bf:5f:63:47:91:1c:57:ba:b0:df:
         fb:0e:e2:83:08:ee:ba:53:82:c3:16:72:38:ff:78:6b:e7:78:
         61:98:82:7f:ba:85:c7:8b:83:6b:44:fb:44:1b:4d:4b:9b:bc:
         05:47:8b:6c:d7:3c:f6:ac:89:aa:6f:4e:74:90:09:d6:37:16:
         37:fd:eb:c6:66:29:0b:8a:cd:f2:c3:aa:76:32:e2:7e:ce:6c:
         49:8b:48:be:a9:85:f3:0e:62:ea:82:a8:f5:c2:f2:1d:bd:c8:
         88:a0:2e:b5:46:ed:4f:b8:1a:11:4b:7f:85:65:e9:6d:c5:b2:
         92:88:17:da:d1:bc:18:d5:a9:b9:55:ad:1a:9e:da:5e:86:92:
         03:69:aa:35:e0:99:fc:95:e0:f8:ce:2c:63:89:05:10:03:8a:
         a2:fe:e8:8b:8e:c1:48:f7:73:58:ac:7c:15:77:0b:5a:d0:10:
         bf:92:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org