Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TaVSGV7EJ_V_aV8ttflfpyfTVeI.roa
File:                     TaVSGV7EJ_V_aV8ttflfpyfTVeI.roa (raw, json)
Hash identifier:          JrlTUbZXGavQlBtq6JgWxHRa7ZLcES6vkxxELDBGuCE=
Subject key identifier:   4D:A5:52:19:5E:C4:27:F5:7F:69:5F:2D:B5:F9:5F:A7:27:D3:55:E2
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       17E0FE72
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TaVSGV7EJ_V_aV8ttflfpyfTVeI.roa
Signing time:             Sat 01 Jan 2022 00:54:39 +0000
ROA not before:           Sat 01 Jan 2022 00:54:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60629
IP address blocks:        94.100.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400621170 (0x17e0fe72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  1 00:54:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4da552195ec427f57f695f2db5f95fa727d355e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:00:2a:85:75:30:85:a4:05:7f:a7:b6:7d:
                    c4:8c:82:6f:ef:2a:fa:00:b4:6f:60:36:16:f5:d9:
                    0f:2d:32:43:6c:76:72:12:b8:81:e3:b0:87:36:00:
                    b7:c4:fd:33:f4:37:bd:7f:7d:bb:b1:ac:7b:75:4b:
                    da:82:fe:8e:bf:aa:2b:bd:96:31:1a:1f:67:cd:92:
                    0e:4c:f9:7a:16:21:f3:1c:db:29:ee:e6:c9:56:9f:
                    16:d2:26:37:96:14:f4:a1:2e:ed:57:1c:86:5b:c8:
                    a5:71:7c:73:02:5d:ff:71:8f:4b:f7:d1:2f:26:53:
                    ff:15:10:b6:eb:1f:ff:02:4b:e2:c7:04:e9:1f:fb:
                    bc:41:09:5b:75:71:69:b6:3b:d8:64:fe:66:af:fd:
                    59:12:4e:86:be:a4:1b:d7:a6:43:5b:cb:80:05:d6:
                    a6:1c:82:9a:21:85:6c:fb:36:01:36:16:82:79:b4:
                    60:3c:75:33:22:bc:0f:98:ce:da:3c:86:b2:bd:61:
                    e0:16:23:5c:b5:8d:5b:d5:f1:b0:6e:84:f1:f1:cb:
                    72:9d:ea:01:e1:28:af:f4:96:11:f5:12:f3:5e:bb:
                    b6:5f:e9:be:50:b7:57:38:74:ef:b9:cf:b8:3b:53:
                    9e:6e:e3:0f:67:cf:dd:3f:85:39:73:79:5a:93:2c:
                    c8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:52:19:5E:C4:27:F5:7F:69:5F:2D:B5:F9:5F:A7:27:D3:55:E2
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TaVSGV7EJ_V_aV8ttflfpyfTVeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.100.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:8d:a1:70:28:cb:54:60:f8:30:be:5c:b8:b2:5c:76:6c:
         09:b0:22:23:ac:51:c7:dd:f0:b5:bb:d7:f6:29:4b:b2:f0:ca:
         ec:e7:47:70:a7:31:29:ca:07:fa:72:c0:69:eb:c2:07:83:6b:
         d7:b5:ad:1c:4d:f1:1f:fc:2a:bb:f4:b4:29:39:e9:f9:ad:3d:
         1c:b9:ce:52:f5:d3:7a:d4:b2:af:b9:4d:8f:bf:dc:ab:09:71:
         3a:8a:7d:1d:b8:0c:97:72:41:ef:6a:98:4d:cb:b9:d4:7d:f8:
         42:38:68:ae:70:e5:8c:03:f7:6e:e4:ef:20:31:59:03:67:42:
         47:18:bf:d6:c9:38:61:30:8c:ec:03:23:b2:85:4c:56:5d:9c:
         7f:a2:91:c6:3b:51:0f:80:0d:5d:33:2b:e4:8e:19:cd:d7:80:
         8a:ed:68:a7:50:24:56:ab:c9:76:81:6b:e6:68:b3:cc:30:4f:
         3e:47:c5:e2:42:92:e1:53:04:60:6b:52:bc:8f:83:ec:69:d1:
         e6:26:f3:26:93:32:1a:db:8a:8f:a7:b8:7e:f0:ac:c1:b8:28:
         0f:ef:35:b6:53:68:52:d4:0c:d7:7a:d7:f4:a7:db:2e:c4:97:
         01:6f:6b:29:85:88:b0:e1:e0:f2:6e:8d:cc:da:f9:a9:2c:32:
         36:4b:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org