Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/InEmtNjnTyQQMZZ825uR_ASwdvY.roa
File:                     InEmtNjnTyQQMZZ825uR_ASwdvY.roa (raw, json)
Hash identifier:          SloKfvsRwMjzDGjkTundB61wfTy8dxms4T2MkBcipUM=
Subject key identifier:   22:71:26:B4:D8:E7:4F:24:10:31:96:7C:DB:9B:91:FC:04:B0:76:F6
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       08828A17
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/InEmtNjnTyQQMZZ825uR_ASwdvY.roa
Signing time:             Tue 22 Feb 2022 11:13:47 +0000
ROA not before:           Tue 22 Feb 2022 11:13:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        91.186.194.0/23 maxlen: 24
                          91.186.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142772759 (0x8828a17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Feb 22 11:13:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=227126b4d8e74f241031967cdb9b91fc04b076f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:ae:37:31:cb:84:7d:67:68:89:17:a8:40:
                    23:0b:ae:05:66:3b:b4:7c:98:4c:28:7c:d9:38:ab:
                    49:8f:d8:50:0f:ac:bd:06:8f:94:cf:31:83:57:1d:
                    f3:0c:a8:19:ff:06:1e:55:a8:b3:f6:4c:e5:6b:70:
                    fc:ae:95:c0:d3:31:76:99:ac:6b:2c:0d:23:60:6b:
                    2b:47:59:13:12:8d:af:88:c7:0c:a7:40:fa:d2:f7:
                    c1:14:0d:87:c3:0e:8b:d4:aa:34:c5:0e:23:34:e4:
                    7d:b8:a6:e9:97:28:f3:71:58:a1:74:f5:e9:e2:60:
                    7a:49:7e:24:5d:64:73:47:d6:13:7f:c3:77:32:39:
                    ea:0b:bc:e2:f3:4c:f9:52:e1:3b:84:4e:36:a7:78:
                    87:2c:1a:9a:87:a8:f9:31:12:9f:58:8c:e9:6a:a6:
                    d9:8e:37:85:de:d3:88:09:bd:01:19:7d:17:9d:17:
                    45:34:6e:05:13:5a:ef:7e:85:79:9a:3c:83:d0:e3:
                    c8:44:cb:50:88:09:08:1a:66:4d:95:fd:bc:9c:da:
                    14:04:b7:c2:47:aa:43:b4:9e:b1:61:11:6f:94:84:
                    b4:9b:1c:05:46:00:28:9b:b0:91:12:ad:85:fe:f6:
                    2d:78:3f:67:4f:17:af:dd:04:01:29:df:2e:70:15:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:71:26:B4:D8:E7:4F:24:10:31:96:7C:DB:9B:91:FC:04:B0:76:F6
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/InEmtNjnTyQQMZZ825uR_ASwdvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.186.194.0/23
                  91.186.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:39:11:22:c4:22:39:72:40:a4:d4:59:ad:8d:75:03:f9:
         aa:34:4c:cb:c5:1d:7e:15:3b:90:21:65:5a:79:53:29:e8:01:
         58:7f:3a:c8:ac:b0:24:54:c0:7a:e6:a8:e9:80:08:f4:06:6c:
         8e:fe:a3:bd:1e:c1:dd:d1:a6:a9:b2:d3:2e:8e:28:77:ae:2e:
         11:1c:98:a7:53:14:20:d6:55:ad:1f:2f:69:59:e2:2d:ca:83:
         0d:e6:d1:b4:e0:6c:0e:9d:34:78:52:7f:6d:64:ef:a8:a3:25:
         97:ea:aa:bb:30:d0:9f:22:73:c1:80:90:65:05:6e:7d:e0:28:
         ee:e1:b0:71:de:3d:56:61:7c:bc:e7:2c:67:3f:25:01:52:3e:
         f2:b2:e8:3f:45:e3:6c:f4:ef:49:93:cd:74:ed:9d:90:af:1a:
         fc:d6:8a:34:28:a4:2c:91:a8:82:8e:69:64:b0:5f:b4:6c:ea:
         d0:bb:dd:8e:1f:df:c0:cf:1c:94:bd:4f:a3:76:78:ec:03:b9:
         ff:66:a5:df:26:b5:15:64:d8:7e:a1:0b:5f:34:cb:ed:cb:e5:
         5a:94:17:30:2a:f6:64:b4:f0:8f:77:b7:94:f5:88:bd:96:df:
         3c:16:4a:91:9a:13:90:6a:05:0d:a3:47:cf:4f:fb:ee:c0:eb:
         a2:8e:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org