Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/_ZgRIgorRvsCQQkTbl18q_O2ckk.roa
File:                     _ZgRIgorRvsCQQkTbl18q_O2ckk.roa (raw, json)
Hash identifier:          vzwecd09UIhw404k3WvYlH9z6fUwF1Z+a7ziW5cCOTw=
Subject key identifier:   FD:98:11:22:0A:2B:46:FB:02:41:09:13:6E:5D:7C:AB:F3:B6:72:49
Certificate issuer:       /CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
Certificate serial:       BCB3E5
Authority key identifier: E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/_ZgRIgorRvsCQQkTbl18q_O2ckk.roa
Signing time:             Wed 20 Apr 2022 04:16:23 +0000
ROA not before:           Wed 20 Apr 2022 04:16:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46573
IP address blocks:        91.227.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12366821 (0xbcb3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
        Validity
            Not Before: Apr 20 04:16:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd9811220a2b46fb024109136e5d7cabf3b67249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:41:c5:5a:2b:8a:7f:d0:fb:f7:9f:8c:d7:
                    c5:fb:3e:10:15:90:ad:dd:89:22:48:f9:48:9a:10:
                    26:76:4f:b2:31:c8:82:93:a1:21:ad:30:11:10:7c:
                    26:ee:dd:b8:76:64:1d:60:82:f4:86:50:84:a8:31:
                    34:1a:b9:d7:9d:ff:f4:27:3d:df:5c:f0:45:9e:64:
                    4e:06:fc:0d:1f:87:16:92:83:6a:e0:a2:ce:54:3e:
                    0f:f8:b5:e2:9a:c3:2d:a2:1e:bb:07:60:08:c6:0d:
                    8b:37:f0:14:9d:89:98:8b:e1:ba:a9:b3:d0:8c:b6:
                    82:38:bb:53:88:2f:bb:1d:03:12:de:43:d5:ed:0e:
                    8d:f2:69:b4:e3:9f:48:9a:97:52:46:1f:9e:e7:8a:
                    3d:8d:d6:a1:1f:cf:bb:08:0e:0f:d7:de:a7:19:23:
                    46:2b:cc:c2:f5:b7:0e:fc:e9:94:4b:c8:34:25:a3:
                    ab:63:f1:7d:8c:83:57:09:10:f7:6e:11:9f:5b:16:
                    3f:bb:77:48:3c:9a:d3:e8:a9:83:0b:58:f3:21:41:
                    93:ba:15:18:d0:5c:1b:7a:d5:18:5b:5a:14:24:17:
                    1f:1e:62:6e:c8:8a:bb:5d:20:0e:59:6e:37:43:fd:
                    3c:9b:16:c5:19:9d:91:71:32:96:35:42:03:af:df:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:98:11:22:0A:2B:46:FB:02:41:09:13:6E:5D:7C:AB:F3:B6:72:49
            X509v3 Authority Key Identifier:
                keyid:E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/_ZgRIgorRvsCQQkTbl18q_O2ckk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/6WxjtJSw0IpVqqGAX2INuNrSVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:fc:35:56:6d:50:2e:f7:be:67:eb:e2:84:97:3d:74:51:53:
         ed:a4:01:5f:d8:13:9a:15:8c:29:ae:f5:04:55:7b:4f:95:fa:
         35:58:63:0a:1e:95:b0:a8:68:97:fb:a6:24:d5:ec:d6:5c:24:
         20:10:c1:5a:99:fa:55:18:23:7b:32:bf:3a:32:2e:e4:64:bc:
         98:f2:6a:e0:77:07:1b:bf:a3:2e:5b:a0:b6:1b:b8:ac:79:dc:
         75:f0:9b:53:88:1d:3a:42:a3:99:7a:c8:9d:56:01:96:0b:23:
         4f:0c:74:14:3e:cf:3c:ba:a1:26:6b:eb:f2:06:a4:39:71:81:
         b8:98:12:b8:a8:89:42:eb:5f:a1:e1:68:31:b2:f3:de:9b:5e:
         1e:74:60:20:0e:65:23:ec:f8:76:31:59:fd:bf:3c:cb:ba:cf:
         ac:9f:1a:37:ac:48:be:e0:92:cc:56:55:92:3e:d9:30:d8:b3:
         81:8e:2d:cd:e0:75:7a:de:f7:38:3e:0d:27:52:54:2d:82:ff:
         e6:d2:35:b8:67:bf:1f:20:85:ac:7a:0e:cc:58:c1:38:e5:9d:
         67:b7:fe:dc:ef:2b:84:40:d0:65:1b:bc:31:86:17:33:dd:80:
         dd:10:e1:3c:81:ff:66:ea:ea:99:e5:48:c4:d0:5c:95:ae:e8:
         30:02:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-fra.rpki-client.org