Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SnyCu5-3EKGJVz5fJDwXmC69n60.roa
File:                     SnyCu5-3EKGJVz5fJDwXmC69n60.roa (raw, json)
Hash identifier:          0vJ+qpK9uTJyb04KE03lUsp4vZYjZ2JJxUZlRRBBlbE=
Subject key identifier:   4A:7C:82:BB:9F:B7:10:A1:89:57:3E:5F:24:3C:17:98:2E:BD:9F:AD
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       0F2AFE78
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SnyCu5-3EKGJVz5fJDwXmC69n60.roa
Signing time:             Thu 24 Feb 2022 19:36:57 +0000
ROA not before:           Thu 24 Feb 2022 19:36:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48113
IP address blocks:        195.13.219.0/24 maxlen: 24
                          87.110.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254475896 (0xf2afe78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Feb 24 19:36:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a7c82bb9fb710a189573e5f243c17982ebd9fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:32:0b:61:76:68:57:8d:98:e5:05:c4:fd:
                    2a:59:16:c1:28:5c:f8:81:68:12:3c:39:70:c9:22:
                    a0:d3:03:5b:0e:1d:91:33:59:a9:5b:8c:8e:1d:10:
                    03:72:fb:b7:60:a8:c4:1e:83:5c:ad:4e:8a:2d:53:
                    3e:b8:9a:5f:ea:f3:c8:08:9f:55:22:8b:a1:57:fd:
                    8f:bb:4f:90:91:3b:52:7b:f7:0e:59:7d:aa:97:2c:
                    d6:de:3b:4d:be:07:fd:50:63:ed:ef:d5:5e:33:b6:
                    e6:f0:6b:27:35:19:b3:35:1a:ee:83:4a:a2:33:19:
                    64:73:b6:fb:79:3f:f6:15:0b:9b:f3:3b:bd:ae:85:
                    ef:33:ef:e0:ca:77:f8:18:30:53:11:03:5e:8e:85:
                    e9:99:1a:83:21:1a:3d:47:9c:a0:d2:12:05:99:2a:
                    60:dc:3e:a7:5b:a8:e9:cd:a0:f2:81:2e:22:2f:e8:
                    93:48:cd:7d:60:bb:1e:fa:eb:e5:18:0b:4e:0a:a6:
                    76:4d:6b:b8:65:3d:19:a4:91:16:4f:42:c7:62:53:
                    98:00:13:31:41:c0:f8:e5:82:e5:3f:84:c5:9a:20:
                    63:97:78:c6:68:91:2d:d0:22:fa:72:f7:38:76:57:
                    8a:b7:ec:bf:10:fe:24:89:9d:07:b9:d1:72:5c:c9:
                    83:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7C:82:BB:9F:B7:10:A1:89:57:3E:5F:24:3C:17:98:2E:BD:9F:AD
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SnyCu5-3EKGJVz5fJDwXmC69n60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.110.228.0/22
                  195.13.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:ea:36:57:82:34:fc:cb:01:49:98:3f:5e:dd:c1:2e:d8:
         11:31:43:64:bd:06:39:f5:ba:7a:89:40:f9:62:02:73:cf:d6:
         1c:97:b5:8b:e6:40:b8:7f:85:47:af:14:74:47:ec:97:e3:f3:
         3e:e3:b3:c8:16:04:a9:15:85:37:48:9a:f9:9f:f8:4e:44:c5:
         c0:90:d3:9d:dd:3a:98:12:53:c8:9a:e4:49:0c:25:a4:7a:ef:
         1d:84:71:e4:3b:c1:f8:de:91:04:9b:45:ed:38:de:8d:a6:1f:
         64:71:f0:12:a1:21:55:40:96:b6:15:68:15:fa:b0:e7:7b:aa:
         11:c8:b0:a2:41:c1:c1:16:c9:2c:f5:56:17:c6:c4:16:cb:54:
         b3:05:a1:ee:b2:92:1e:aa:54:72:64:5e:7d:1c:33:98:c4:91:
         9a:7c:ed:ea:9d:67:2a:20:32:48:7e:f6:1b:ab:44:c1:26:b9:
         a1:e4:10:3d:b8:7c:f5:9d:17:e4:ef:b8:eb:1b:4e:f5:55:6d:
         1d:0d:01:6a:95:04:5a:c6:f0:be:21:6c:30:44:d9:54:e3:17:
         bb:7b:40:05:3d:51:0c:ac:5e:47:57:7d:b9:a4:af:5e:ee:8b:
         63:4a:8d:74:67:f5:dc:82:7e:01:c7:49:1e:3b:07:b8:38:ae:
         30:b6:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-ams.rpki-client.org