Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/J2soyygHxk-8JVpkYjaU2MCR0Mw.roa
File:                     J2soyygHxk-8JVpkYjaU2MCR0Mw.roa (raw, json)
Hash identifier:          LVbShjVZbfEFtK7/SvALGdgcvNoariDiErDXYoknYhc=
Subject key identifier:   27:6B:28:CB:28:07:C6:4F:BC:25:5A:64:62:36:94:D8:C0:91:D0:CC
Certificate issuer:       /CN=057c6f47bc3099a4ec86bec29605269140ad7319
Certificate serial:       010A35F2
Authority key identifier: 05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/J2soyygHxk-8JVpkYjaU2MCR0Mw.roa
Signing time:             Sat 01 Jan 2022 02:59:02 +0000
ROA not before:           Sat 01 Jan 2022 02:59:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        194.99.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17446386 (0x10a35f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057c6f47bc3099a4ec86bec29605269140ad7319
        Validity
            Not Before: Jan  1 02:59:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=276b28cb2807c64fbc255a64623694d8c091d0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:c7:2f:30:67:fa:52:43:0f:c7:93:cf:13:
                    13:27:08:28:43:59:4f:95:57:36:b5:71:81:a3:e5:
                    04:b7:6a:d1:7a:40:ed:28:96:7f:43:59:2c:2a:9e:
                    78:d3:fe:66:fd:4a:89:8f:08:39:f7:bb:c8:1c:36:
                    d5:ac:0c:5c:c5:72:44:02:a4:e1:5f:03:52:58:1e:
                    43:73:4f:d1:4a:19:b1:92:2a:5c:82:74:88:45:1f:
                    6e:eb:a7:21:44:99:03:f5:70:98:42:ae:9e:de:cf:
                    00:17:77:cc:6e:d9:a6:ae:e6:26:86:65:dc:c0:3b:
                    0b:2f:d0:41:5c:26:c3:3c:05:e6:38:27:9f:8d:c1:
                    bc:0c:90:d3:bd:0e:ff:5c:cd:1f:9c:0c:54:67:38:
                    9d:2a:5d:fc:69:38:f6:25:5a:5c:35:be:32:b7:5c:
                    d5:3f:80:df:90:f3:ba:9b:9f:a4:e6:d3:01:f8:bc:
                    bf:eb:6c:56:f3:b6:b4:2c:e1:4b:b5:58:92:23:f3:
                    6b:cd:86:f9:ac:27:6b:0b:49:73:2c:97:e2:c4:ae:
                    51:1f:49:61:6c:66:57:e8:19:ea:ef:f3:f8:37:5c:
                    ed:46:47:1d:0b:84:dc:6c:1d:3c:9b:02:b8:70:10:
                    75:c7:57:99:c9:2b:d8:bd:d0:9f:a5:3f:9d:1b:23:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6B:28:CB:28:07:C6:4F:BC:25:5A:64:62:36:94:D8:C0:91:D0:CC
            X509v3 Authority Key Identifier:
                keyid:05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/J2soyygHxk-8JVpkYjaU2MCR0Mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/BXxvR7wwmaTshr7ClgUmkUCtcxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.99.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:38:d4:9c:fe:3f:42:70:3a:f0:9d:18:14:cb:30:24:6b:e4:
         ce:28:25:8e:5f:85:39:d5:bd:23:55:39:76:8e:a7:06:42:01:
         65:66:dd:35:41:81:2a:dd:f2:e0:b0:ae:dc:d9:e2:e2:96:4a:
         f5:94:8d:f3:89:01:e5:0d:c9:ec:d1:71:90:8b:3d:7e:9e:f8:
         43:0e:eb:71:b8:fc:35:54:10:5a:52:2e:ab:81:50:1b:e9:67:
         e6:6f:2d:97:2a:77:30:06:4d:78:f3:90:b5:10:72:37:bb:bd:
         73:5d:95:a4:b1:13:d7:12:8d:9b:78:8f:b7:05:4d:0f:82:21:
         4c:e8:8f:bf:aa:b7:af:42:24:71:cd:35:98:e7:e7:3c:23:4a:
         88:bd:15:8c:ce:d9:00:14:95:5a:30:40:eb:34:ef:b4:2b:77:
         73:9c:cf:94:6b:b2:d7:ca:fc:d0:86:c5:e4:df:2f:be:40:50:
         52:fc:4d:e1:46:05:da:b1:44:b5:d2:88:5b:c5:0e:f8:74:9a:
         e1:68:e8:fc:6a:c6:fd:b6:33:58:77:2d:45:46:b0:33:e8:4a:
         ae:a4:e8:74:3d:08:1c:d7:7c:37:48:88:1a:f5:06:77:c9:45:
         1e:a0:a8:bd:8e:ba:86:8c:c7:9e:db:7d:28:d1:42:75:86:58:
         56:1a:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:27 2023 by rpki-client on console-fra.rpki-client.org