Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/2ndU9_6v6Wuj00Dr7esDv-EFrlA.roa
File:                     2ndU9_6v6Wuj00Dr7esDv-EFrlA.roa (raw, json)
Hash identifier:          apC3xnoMmoVdBZKzUUILZq2jGmH1KPwihk09MfCQGsQ=
Subject key identifier:   DA:77:54:F7:FE:AF:E9:6B:A3:D3:40:EB:ED:EB:03:BF:E1:05:AE:50
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       05E922F5
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/2ndU9_6v6Wuj00Dr7esDv-EFrlA.roa
Signing time:             Sat 01 Jan 2022 11:05:16 +0000
ROA not before:           Sat 01 Jan 2022 11:05:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42288
IP address blocks:        193.228.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99164917 (0x5e922f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Jan  1 11:05:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da7754f7feafe96ba3d340ebedeb03bfe105ae50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:18:6a:95:d5:c2:cd:de:b2:ec:43:72:78:
                    c1:69:cf:83:b9:e6:84:1f:cb:26:b3:a2:9a:ff:10:
                    18:67:ca:65:d7:04:f8:9c:f8:32:aa:d6:ad:e9:b8:
                    51:b9:3c:6a:ef:b0:bc:64:a9:16:07:f2:99:8f:74:
                    8a:41:1d:00:77:13:60:e0:43:d3:9f:87:b9:af:cf:
                    52:8a:84:dc:f9:b8:2e:85:da:84:f2:d7:ae:ad:5a:
                    1a:4d:a2:bf:03:31:b7:04:99:af:76:07:bc:b7:fc:
                    91:31:fe:ea:af:21:6e:2d:67:89:a2:e2:99:ba:26:
                    d3:16:5e:14:1c:45:fc:ae:b1:94:dd:d3:7e:29:e9:
                    85:d7:98:11:f4:e4:8e:4e:6b:90:f9:e5:b5:94:b4:
                    c8:e6:4f:c6:92:40:9b:dc:a1:64:cd:a6:de:81:7a:
                    e1:3d:d2:e3:c9:51:2f:3b:39:a2:bf:2b:7c:db:f1:
                    94:e4:34:4c:27:b6:a6:50:06:48:7b:53:19:c0:d8:
                    72:71:d1:e8:9a:fd:d5:61:8a:b4:a7:83:be:5a:50:
                    ff:db:81:92:c1:f5:b8:d3:66:26:0e:10:5f:88:9b:
                    66:4a:06:38:ac:66:db:5b:bf:e6:2d:9e:0c:1e:b9:
                    03:d3:51:23:5a:7f:b6:98:6e:62:ce:31:0f:84:11:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:77:54:F7:FE:AF:E9:6B:A3:D3:40:EB:ED:EB:03:BF:E1:05:AE:50
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/2ndU9_6v6Wuj00Dr7esDv-EFrlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:c7:83:17:2f:cd:7a:4f:75:b2:80:4a:72:c2:9a:d2:9a:
         8c:9a:1a:34:bc:5e:21:fd:2c:be:64:c5:02:80:ee:95:54:87:
         a5:2c:bb:5b:9d:d9:69:c0:5c:38:f6:be:25:f7:2c:3f:8c:50:
         1f:1a:f0:60:c3:af:49:67:15:5e:9e:2e:80:79:cf:d2:58:ce:
         59:87:38:7e:fa:14:fe:66:1e:f5:85:2d:d5:41:b0:18:df:66:
         b0:27:8b:87:d2:e0:cc:91:2a:29:2f:cb:b3:d0:a7:f7:28:f5:
         4a:80:76:2c:dc:1e:f3:af:50:58:99:f5:5c:b9:98:f7:24:4f:
         c8:ab:8b:62:80:1b:3e:bb:10:2a:f2:b1:1d:b6:06:ba:c4:b4:
         0c:8c:7b:34:c4:2c:2e:02:fe:49:f7:e2:b1:da:c8:5a:a5:e0:
         93:60:75:13:b6:71:b4:da:65:21:5b:7c:76:5b:8e:2b:64:c8:
         04:5b:64:cc:6b:09:d8:8c:86:8a:e1:5a:97:c6:98:aa:a5:47:
         85:39:68:04:56:4f:52:71:8a:e3:49:66:f9:66:17:33:ae:82:
         e7:b7:99:0a:a1:ab:55:6e:d2:19:45:1a:dc:9d:b5:c5:12:ad:
         60:b8:cc:88:47:79:06:80:db:6f:b8:f3:a5:27:e5:dc:92:81:
         8b:31:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org