Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/L-PCnl7iSgnLHAytr18w3eT2eT8.roa
File:                     L-PCnl7iSgnLHAytr18w3eT2eT8.roa (raw, json)
Hash identifier:          4VJ9YdHjmFWqJv0kK45yApY/3LHcCVBJVsGaOIM3LuE=
Subject key identifier:   2F:E3:C2:9E:5E:E2:4A:09:CB:1C:0C:AD:AF:5F:30:DD:E4:F6:79:3F
Certificate issuer:       /CN=93c7dc5f72745dc11891ab06ee4bb6ea04dbf44d
Certificate serial:       9CBF02
Authority key identifier: 93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8fcX3J0XcEYkasG7ku26gTb9E0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/L-PCnl7iSgnLHAytr18w3eT2eT8.roa
Signing time:             Sat 01 Jan 2022 02:54:57 +0000
ROA not before:           Sat 01 Jan 2022 02:54:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        91.247.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10272514 (0x9cbf02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c7dc5f72745dc11891ab06ee4bb6ea04dbf44d
        Validity
            Not Before: Jan  1 02:54:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fe3c29e5ee24a09cb1c0cadaf5f30dde4f6793f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:84:5d:7f:99:c6:f0:3a:94:70:a7:49:a6:
                    22:dc:40:97:23:3f:94:16:52:db:a7:12:7a:90:8d:
                    42:0c:74:d8:81:c3:c4:66:d0:0f:1b:06:9a:4b:60:
                    01:ce:38:8d:08:59:82:46:25:36:2a:fc:f1:90:0d:
                    0b:94:05:88:b8:1f:e8:0d:d9:45:d8:40:ec:a8:ff:
                    e3:44:0a:5e:84:67:68:8c:51:b0:6c:b1:1a:fb:f1:
                    be:a2:4a:a7:0d:f0:36:6d:70:2e:ad:bb:0f:e4:ee:
                    e3:78:37:38:3a:d8:76:e5:8f:50:85:b6:be:9e:47:
                    02:32:c9:2d:a4:0b:7b:a7:89:ae:52:0b:58:a4:86:
                    6d:16:12:c1:31:c0:cc:0b:6d:f2:7b:72:da:3a:39:
                    bf:85:70:c0:fc:0f:81:1a:75:1a:14:11:22:2d:36:
                    dc:cb:99:9b:4d:9f:2d:8b:1d:67:d6:77:0e:27:76:
                    75:4b:49:23:97:b1:56:b0:16:33:45:e2:49:e9:98:
                    82:6d:7b:61:9c:8f:81:33:de:63:c3:3a:d7:79:56:
                    b6:5c:de:b5:fe:a4:29:26:40:bf:b0:c6:9c:30:9d:
                    74:a7:e2:c7:00:82:db:64:a8:b7:01:c8:46:1f:47:
                    d7:dc:dd:12:e8:15:9b:a6:76:46:6e:9c:7c:ab:b9:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E3:C2:9E:5E:E2:4A:09:CB:1C:0C:AD:AF:5F:30:DD:E4:F6:79:3F
            X509v3 Authority Key Identifier:
                keyid:93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8fcX3J0XcEYkasG7ku26gTb9E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/L-PCnl7iSgnLHAytr18w3eT2eT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/k8fcX3J0XcEYkasG7ku26gTb9E0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ed:81:65:4f:d4:92:e2:fa:eb:b8:b5:85:2e:96:11:24:77:
         7d:d2:6d:be:2e:f7:39:48:ec:a8:b0:6f:d2:12:9b:07:3e:d7:
         46:73:da:27:8e:56:a9:22:80:31:dd:c1:00:9e:5a:f2:09:e6:
         4f:02:0d:6a:86:0e:d0:b9:ae:c3:d8:39:4e:a6:0a:c6:7f:ab:
         17:c1:af:61:5a:fb:f6:d2:85:8c:b0:0b:ba:07:86:3a:81:22:
         94:e4:88:e7:50:a4:7f:29:7a:a5:ce:28:64:7b:25:ce:8d:15:
         be:15:4d:bb:67:00:44:12:af:af:87:ef:69:5d:dc:40:15:15:
         c6:28:65:4b:da:79:5a:5b:94:11:a0:18:cb:fd:ef:63:52:1a:
         de:41:71:15:47:14:89:75:e5:fc:fa:6d:17:f8:36:63:99:af:
         9b:7a:af:9f:2e:1d:69:05:f1:a8:fd:0b:a9:ad:c0:5e:2d:f6:
         80:01:34:f2:e4:8e:3e:32:06:b8:c3:8c:68:04:fa:1c:bb:d6:
         30:0b:ff:c4:77:1b:fd:08:15:32:a6:bf:0b:1e:a4:e6:4b:e1:
         62:78:ae:b5:cd:04:e1:6f:d3:d1:1c:7d:b5:bf:f9:21:37:98:
         b4:92:1b:fe:54:73:bd:55:fd:30:3f:9b:69:06:e3:df:3b:0e:
         eb:84:0b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:50 2023 by rpki-client on console-fra.rpki-client.org