Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa
File:                     Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa (raw, json)
Hash identifier:          cMalrj+7eW5TtFadseUfmyP4gP0stR89T9dzqpaCTcw=
Subject key identifier:   67:A0:05:29:A1:0E:C5:DA:8E:5C:01:DD:15:55:93:5F:8D:CA:E8:83
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       01828000F1A6117C8950FCD7890721904D4E
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa
Signing time:             Tue 09 Aug 2022 00:28:41 +0000
ROA not before:           Tue 09 Aug 2022 00:28:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        88.218.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:80:00:f1:a6:11:7c:89:50:fc:d7:89:07:21:90:4d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Aug  9 00:28:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67a00529a10ec5da8e5c01dd1555935f8dcae883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0d:8f:41:94:90:64:b0:f0:7d:73:b9:f3:cc:
                    50:61:39:b1:25:de:ad:44:ae:c5:ff:f6:77:cb:f3:
                    f7:69:bf:e9:6f:a6:a8:38:b2:6b:b8:d0:6d:1f:30:
                    5e:32:31:5d:77:f7:41:b1:3a:0d:cf:e3:6c:3d:19:
                    3e:0e:88:04:d7:aa:9e:e7:f3:9f:64:2e:76:3f:57:
                    ce:8c:ff:db:b2:9f:02:0f:aa:99:9c:83:ed:af:9d:
                    41:c9:06:93:46:db:c3:1d:df:f9:b0:6b:cc:63:b8:
                    fc:53:2c:01:6f:06:2b:36:96:90:19:b4:65:54:52:
                    72:0f:83:bf:8a:21:15:0d:c9:ce:d0:41:01:ce:81:
                    6f:8a:98:0c:73:3f:d0:52:46:09:c9:7f:5c:e0:65:
                    f5:87:e7:ea:30:29:9d:4e:ce:31:91:e9:0a:0f:c8:
                    14:c1:df:4a:60:c5:b7:4e:71:36:92:f5:3a:7f:20:
                    d8:77:44:db:94:12:44:2b:49:57:c0:9f:6e:b7:b5:
                    e5:be:58:99:33:b6:be:3a:3f:7d:46:a2:8c:37:6f:
                    3b:b2:d6:6b:b8:df:b5:98:62:06:50:a4:c6:8e:e4:
                    ad:1b:a9:16:1c:26:a0:00:33:71:6c:ce:83:5b:5b:
                    2a:c5:c0:42:4b:65:eb:a9:54:00:3c:1d:5e:bd:32:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A0:05:29:A1:0E:C5:DA:8E:5C:01:DD:15:55:93:5F:8D:CA:E8:83
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Z6AFKaEOxdqOXAHdFVWTX43K6IM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:11:4f:c4:f1:95:87:e3:3e:44:8d:df:81:c5:fd:64:86:67:
         fb:be:c9:63:49:0c:d8:42:48:af:da:d8:0a:85:05:2a:9b:1d:
         4d:22:32:46:a6:e7:71:de:e0:e9:2d:66:1f:92:c0:59:73:1d:
         57:5b:fc:c9:3c:04:d1:74:2b:be:b1:dd:2d:d8:2a:a8:93:c9:
         d8:d3:45:ef:62:b6:ae:cc:c6:2f:bd:7b:b5:c4:8c:24:26:c6:
         2e:80:e8:21:ec:d9:a9:a6:97:85:6f:be:d9:d4:13:06:5e:2a:
         94:7a:08:91:82:ce:8b:c3:5b:7b:a4:ef:55:da:2a:11:fb:12:
         7a:c1:2d:0e:dc:b5:a6:ed:33:16:5d:ce:95:9b:a6:58:4b:30:
         a4:a4:af:e3:50:2a:cd:ea:10:51:9b:a9:be:df:36:85:94:27:
         f6:25:d6:21:ea:0a:40:1c:cc:6e:92:48:e2:92:9e:44:24:57:
         14:2a:35:a4:97:5f:1f:23:e4:ae:47:d5:b0:4d:eb:81:6a:88:
         54:8e:f6:e2:09:fd:b1:5e:67:96:16:69:70:09:06:ca:4e:2b:
         07:5a:3b:dd:f9:e8:c6:0e:12:0e:29:f8:71:bf:0e:b9:af:12:
         b8:db:99:55:75:d5:a5:b5:b9:7e:4a:46:47:0e:41:9e:bb:57:
         b4:d5:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org