Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/dBiRpl0XjHOwm6kkuMomaRQs1Dw.roa
File:                     dBiRpl0XjHOwm6kkuMomaRQs1Dw.roa (raw, json)
Hash identifier:          n8Q0KY008sMl3lpTILc7yYahqoUFIRwuwm6+ECgP6AY=
Subject key identifier:   74:18:91:A6:5D:17:8C:73:B0:9B:A9:24:B8:CA:26:69:14:2C:D4:3C
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       05E832A5
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/dBiRpl0XjHOwm6kkuMomaRQs1Dw.roa
Signing time:             Sat 01 Jan 2022 11:05:16 +0000
ROA not before:           Sat 01 Jan 2022 11:05:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        193.228.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99103397 (0x5e832a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Jan  1 11:05:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=741891a65d178c73b09ba924b8ca2669142cd43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:58:8a:41:65:4d:af:1a:75:2a:e8:23:4b:
                    71:b8:b9:08:9d:f0:df:58:5c:f5:ca:26:c3:44:c5:
                    52:d8:d4:ab:f8:ac:a3:63:86:d9:70:d7:a2:58:ef:
                    5b:ec:c3:f1:40:92:dc:02:1a:e9:9e:d5:e3:d8:93:
                    bb:35:b4:15:f2:0b:28:c8:f6:1c:7a:ac:b2:c6:65:
                    59:71:d8:f7:23:2b:f8:2c:78:a9:06:48:05:48:5c:
                    12:8b:d0:21:c0:75:4a:35:5e:4a:cf:89:62:47:a2:
                    64:57:a2:30:17:cd:b2:36:45:51:33:98:e1:e5:40:
                    d9:a0:46:0f:75:51:d1:ea:4e:58:e6:b7:ff:a1:35:
                    1b:32:b5:cb:c6:65:13:e8:aa:e0:1d:a1:52:91:4f:
                    d6:56:83:fe:e8:ce:45:75:d7:d9:ac:6b:49:50:22:
                    d3:e1:ca:fd:86:fd:bd:b3:94:75:4c:43:91:e2:ef:
                    5b:3e:4d:e5:f5:2f:b3:dc:39:34:af:cb:94:b7:38:
                    a4:38:7f:ff:13:e2:d6:0f:87:49:82:3c:27:de:77:
                    fc:27:5a:85:6f:51:dd:8b:42:4d:86:4f:ae:ff:59:
                    9b:d0:ac:71:79:17:f8:f6:00:0a:56:d4:34:14:2a:
                    42:54:ca:70:2d:ef:d8:18:20:8a:2e:07:58:b3:04:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:91:A6:5D:17:8C:73:B0:9B:A9:24:B8:CA:26:69:14:2C:D4:3C
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/dBiRpl0XjHOwm6kkuMomaRQs1Dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:d4:91:36:dc:d8:d5:31:50:3e:71:42:74:b9:e6:11:2c:
         82:00:af:0c:06:4f:af:b9:2e:12:b9:c3:df:cc:b9:46:e2:49:
         9f:00:5c:ee:6a:56:6f:23:ea:af:11:9e:a3:20:16:9b:71:df:
         3a:db:32:f1:7e:e1:63:6a:a0:7f:13:b1:dd:0a:41:ae:11:df:
         77:7f:57:f3:13:7f:fa:71:d6:10:7e:f6:92:62:f0:02:de:a0:
         fc:74:42:e7:28:77:18:ed:9f:87:92:27:1d:92:29:2c:12:c4:
         68:b0:45:5e:5b:f0:85:ae:61:50:35:ec:dc:4f:51:d0:97:fd:
         16:a7:98:ee:53:da:e9:ef:a6:43:8a:41:3e:85:2c:36:8a:26:
         57:37:39:ea:d5:c9:f9:99:b0:37:60:16:e4:1e:44:e0:a3:89:
         45:9e:73:ec:db:2f:d7:0e:12:f0:be:4f:b8:e6:50:59:b6:61:
         3e:bb:d5:c8:cc:54:39:b4:e5:5b:47:bb:a6:63:c2:dc:3e:75:
         7d:7c:70:13:04:d8:01:5b:7c:72:8f:9d:d9:b1:7c:cc:c1:3f:
         cb:5a:78:ce:18:f4:73:2e:ce:13:4c:b4:15:c8:5b:45:a6:8a:
         72:f0:c4:55:fa:7b:1b:ac:12:0c:f6:5c:21:4c:98:56:9e:a7:
         0e:1d:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org