Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bjde2fJMZ6Np18v45l3iNHtH03s.roa
File:                     bjde2fJMZ6Np18v45l3iNHtH03s.roa (raw, json)
Hash identifier:          cxRTVZoOumYMy33hF/zxXNPUpPBDWLbiN1mQd906/LM=
Subject key identifier:   6E:37:5E:D9:F2:4C:67:A3:69:D7:CB:F8:E6:5D:E2:34:7B:47:D3:7B
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       0FF15385
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bjde2fJMZ6Np18v45l3iNHtH03s.roa
Signing time:             Thu 19 May 2022 11:27:29 +0000
ROA not before:           Thu 19 May 2022 11:27:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48113
IP address blocks:        87.110.240.0/21 maxlen: 21
                          195.13.219.0/24 maxlen: 24
                          87.110.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267473797 (0xff15385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: May 19 11:27:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e375ed9f24c67a369d7cbf8e65de2347b47d37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:f0:f0:6b:64:4f:2b:e0:ce:61:a6:40:9a:
                    94:8f:57:5b:a5:15:ed:07:f0:03:9b:b6:7b:ec:31:
                    91:d4:c2:06:fa:17:8e:38:63:88:61:d4:29:35:83:
                    e3:74:4b:e8:59:eb:dc:56:bc:03:d1:a2:68:36:6d:
                    41:bc:ef:d5:57:bc:84:eb:d6:41:4c:f8:f0:c2:d9:
                    d6:87:58:27:8a:42:8f:cf:2e:02:d6:59:97:36:06:
                    68:11:d3:d1:fb:d2:b9:57:c6:d0:5b:e8:0a:84:b5:
                    4f:ce:c4:69:86:f0:e0:6e:97:cc:a4:cd:2d:68:f1:
                    e3:ce:b9:73:c4:37:93:d3:f7:e8:71:01:43:ca:78:
                    4e:79:ef:1a:c7:6b:2d:9d:fb:2b:f3:60:81:91:7d:
                    b1:11:93:82:3d:25:c4:e1:57:9a:fa:dc:2d:a7:55:
                    35:f6:96:75:ec:b0:a9:ad:36:d6:10:75:9d:1b:51:
                    73:c4:d4:c7:ce:1a:ac:46:90:ff:27:be:2e:6a:4e:
                    b8:0c:98:63:9c:75:1c:d0:5c:d6:9d:1e:14:06:bc:
                    29:1c:42:5c:3b:c2:14:08:52:8a:a1:2f:21:00:be:
                    80:52:ad:2f:1d:da:f3:12:bc:cb:6b:40:39:1c:74:
                    93:0b:e9:3f:a6:75:e3:b7:a7:da:a4:09:27:83:c4:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:37:5E:D9:F2:4C:67:A3:69:D7:CB:F8:E6:5D:E2:34:7B:47:D3:7B
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bjde2fJMZ6Np18v45l3iNHtH03s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.110.228.0/22
                  87.110.240.0/21
                  195.13.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:00:3b:0b:c4:69:2e:d8:29:d4:66:d2:92:f5:59:6f:bf:
         dd:30:46:42:4f:a8:4a:60:f0:96:5f:0b:03:fe:12:f7:fa:0d:
         99:66:ab:1f:f6:23:43:93:6f:0a:4e:c5:8b:77:d1:c6:02:bf:
         ff:f3:03:a1:1e:1f:39:9d:89:40:ca:3f:f2:61:6d:02:74:01:
         d0:ad:06:0c:07:76:6d:94:1c:b4:2d:f6:f3:57:ad:91:95:d9:
         ab:2e:33:a4:19:c1:89:b1:b8:b1:08:40:a0:b6:50:f2:83:9f:
         6d:c1:b1:bd:96:4f:75:92:05:9c:5e:f7:fd:1c:58:78:35:eb:
         13:98:ff:2b:76:60:4e:a6:9c:af:0d:89:5a:ac:ca:20:d1:23:
         54:3a:04:a6:4a:2d:22:dd:b2:28:86:58:fe:81:5e:7b:ed:90:
         74:67:88:b9:87:99:51:fb:07:5c:f7:7a:d1:94:b5:3c:99:37:
         87:a7:06:25:d8:a2:6d:21:66:d0:04:5c:67:85:c6:77:90:88:
         a0:a1:2b:41:03:42:2e:a4:72:22:91:bc:5d:04:1f:eb:8e:30:
         a4:7b:06:53:9d:52:dc:14:f7:11:05:e4:92:22:de:33:06:15:
         03:29:fd:76:22:cd:b4:f9:85:18:05:66:c4:4c:4e:b0:91:3e:
         12:db:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-ams.rpki-client.org