Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eIHMlydKPhGcrAp6toFeJN7XIos.roa
File:                     eIHMlydKPhGcrAp6toFeJN7XIos.roa (raw, json)
Hash identifier:          Cps5f2myHUWUCd+3H9VdyWV0wIwre3ZeQpYgrP6uIyg=
Subject key identifier:   78:81:CC:97:27:4A:3E:11:9C:AC:0A:7A:B6:81:5E:24:DE:D7:22:8B
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       07FB4438
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eIHMlydKPhGcrAp6toFeJN7XIos.roa
Signing time:             Sat 01 Jan 2022 03:02:07 +0000
ROA not before:           Sat 01 Jan 2022 03:02:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133973
IP address blocks:        178.253.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133907512 (0x7fb4438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan  1 03:02:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7881cc97274a3e119cac0a7ab6815e24ded7228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:46:9c:da:0b:c7:2f:7d:af:af:74:49:0c:
                    80:63:2c:6f:84:6f:38:07:56:5d:ea:f5:e2:8f:90:
                    01:48:71:1f:e1:57:c2:50:6c:0e:d3:a8:5b:b1:85:
                    cf:64:1d:42:5f:eb:0e:88:1f:41:19:50:c7:fb:f1:
                    14:fa:58:a1:10:f8:23:42:6a:50:8c:c4:9f:46:6b:
                    71:46:16:c8:01:22:aa:98:05:a9:f8:6a:7b:58:e2:
                    ca:2c:30:bd:4d:41:3d:32:19:93:38:c0:44:f4:c0:
                    d1:52:22:37:90:be:00:a9:6f:05:ce:bc:07:4f:48:
                    e5:5d:2e:34:e1:8d:c3:63:0d:b1:a0:14:1d:ce:52:
                    e0:f1:74:0c:9d:fe:92:b8:1d:3a:bc:38:ad:59:9c:
                    10:1e:b4:01:38:04:26:a6:10:9e:1f:35:bc:f1:be:
                    84:49:95:88:4f:9a:bf:9d:3c:ec:74:b8:bf:5f:11:
                    d8:ac:5a:40:cf:19:a8:a3:ec:e2:1f:4d:bd:90:60:
                    19:c8:18:2a:ce:37:cc:80:78:ad:dd:55:18:ae:c8:
                    5c:09:b4:46:d3:cb:2d:e7:97:2d:89:ea:b3:30:e5:
                    48:eb:7c:93:8d:48:75:b6:b0:67:cf:26:a7:f2:82:
                    0f:29:c3:ae:6f:8d:63:d8:bb:04:98:fd:06:7e:aa:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:81:CC:97:27:4A:3E:11:9C:AC:0A:7A:B6:81:5E:24:DE:D7:22:8B
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eIHMlydKPhGcrAp6toFeJN7XIos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:87:70:57:2a:3d:f3:e9:7a:9a:ec:83:bf:f7:b7:c2:61:b3:
         c4:fd:ea:48:be:61:bb:87:03:e5:b0:13:22:37:d5:f2:a6:f1:
         26:ab:1b:32:46:31:ab:aa:a6:2f:74:c5:6b:fb:9a:f8:13:79:
         1d:98:1c:56:e5:7f:86:a1:68:b3:47:36:f7:74:63:c8:b1:40:
         3a:9f:60:4b:93:1c:cc:b7:d9:72:af:38:9f:39:63:ea:45:b4:
         1a:7f:c5:3a:86:21:32:21:e4:6d:46:1e:df:8b:8f:12:10:ab:
         b6:89:88:58:e6:e9:e7:88:65:6c:af:be:cd:3b:1d:1d:cd:02:
         a7:2b:f9:1c:33:aa:ae:13:16:28:86:4a:bf:34:c0:b6:77:e7:
         1a:ce:09:5d:31:02:fc:49:91:da:87:5b:c3:4c:e8:ca:8e:69:
         af:15:c2:9e:c4:1d:00:56:19:ef:e4:98:6f:71:fe:b5:a5:c1:
         e7:72:a7:fa:e4:35:0e:3a:75:85:40:db:0c:2d:1b:c0:3c:9c:
         a7:6e:23:6b:75:5f:08:59:54:45:48:70:5f:12:f0:96:31:6b:
         6c:70:08:c1:7a:7d:57:96:39:78:23:32:2f:4b:e2:f4:9b:19:
         65:b9:86:15:0f:1a:0a:15:cf:48:92:c2:e2:d0:6a:68:96:3f:
         fb:4e:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org