Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/tjDpBez5QKpo8vpK-IaYa6iaedc.roa
File:                     tjDpBez5QKpo8vpK-IaYa6iaedc.roa (raw, json)
Hash identifier:          rv8UdMybe156hmVuevoUGCkXfJ0gGZsN9XpW+lOFRSE=
Subject key identifier:   B6:30:E9:05:EC:F9:40:AA:68:F2:FA:4A:F8:86:98:6B:A8:9A:79:D7
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       02F51010
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/tjDpBez5QKpo8vpK-IaYa6iaedc.roa
Signing time:             Tue 07 Jun 2022 17:02:26 +0000
ROA not before:           Tue 07 Jun 2022 17:02:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        185.22.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49614864 (0x2f51010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Jun  7 17:02:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b630e905ecf940aa68f2fa4af886986ba89a79d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:68:67:19:43:c6:41:82:9c:86:fe:3b:4a:
                    5d:ed:3f:17:a5:e0:0a:64:2d:52:23:8f:b6:e5:13:
                    a5:bf:5b:9c:db:e6:69:35:4e:fc:23:fe:a8:09:62:
                    5d:8d:c1:65:90:04:56:19:7e:61:59:c7:20:0c:fc:
                    f9:d0:ae:8f:1c:9c:44:2a:08:89:b7:45:05:28:c1:
                    07:4b:8b:36:2e:2c:47:89:98:0f:01:80:50:5b:98:
                    44:66:63:98:8d:23:2a:2f:05:2c:54:69:95:14:ff:
                    eb:b4:7f:87:f3:12:48:54:36:6d:4f:13:0c:12:ad:
                    86:9d:35:ba:1d:ad:3d:4e:1b:82:b6:11:44:d4:26:
                    14:15:f1:df:a6:fa:67:05:dd:84:09:bf:8b:e3:78:
                    5e:e3:4e:f3:6e:4e:ad:41:f3:b4:00:25:7e:36:54:
                    2c:99:22:2e:ee:a5:55:dc:31:72:1c:e0:c0:81:1d:
                    6b:3e:c9:a5:ba:94:57:cb:51:61:6e:aa:a0:9a:92:
                    5d:8b:21:d5:d7:21:2c:ab:10:f5:64:a1:10:3f:53:
                    af:48:ac:8c:48:50:5e:78:86:12:01:9c:cc:e6:36:
                    ef:13:51:c7:2d:a1:04:e8:cc:53:28:ac:27:f0:c2:
                    b3:c0:9a:89:89:94:aa:a5:25:3a:3d:51:86:d2:ab:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:E9:05:EC:F9:40:AA:68:F2:FA:4A:F8:86:98:6B:A8:9A:79:D7
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/tjDpBez5QKpo8vpK-IaYa6iaedc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.22.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:34:f7:3a:42:80:75:08:fc:14:b7:2a:86:94:17:9e:18:
         07:48:31:03:92:ea:62:10:ce:6a:43:61:89:1b:66:fe:d0:e7:
         b0:20:58:14:2a:3b:70:02:18:35:46:bb:ae:c3:8c:8d:87:29:
         4e:dc:3e:11:b9:ba:5e:07:89:2f:ba:0b:15:96:b1:b2:1d:7e:
         63:38:92:65:a4:8f:d2:d2:45:6c:bf:44:b3:7c:05:4d:ae:76:
         ba:f1:b3:11:83:85:52:5c:57:5b:f5:ec:06:51:76:6b:ab:c4:
         02:3a:1b:07:47:b4:32:7e:b7:0c:ad:04:a3:e6:cf:35:cc:b1:
         3d:86:ad:8d:8d:f0:4e:94:67:2a:e8:1b:4d:48:b1:75:92:72:
         7d:a5:8f:7f:54:9d:23:48:1a:6a:b5:44:df:e9:ce:26:45:85:
         67:75:9d:7a:a8:c6:06:00:5b:31:cf:08:9a:9c:bd:54:e6:80:
         ec:e7:78:c8:60:bd:69:dd:20:56:f0:6e:0d:53:9c:ac:8f:20:
         ed:c8:95:fb:a8:75:70:d0:cf:7a:77:fb:1d:49:36:f3:d5:30:
         2a:0a:09:03:51:22:54:3d:9f:75:18:2e:cf:b9:91:b7:16:ba:
         d4:ba:a3:49:fd:3a:2d:7e:d7:d6:ca:d8:68:16:42:99:4b:bd:
         37:9e:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org