Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/y8bMjVhEs2VXwagowkoZ_y62mQQ.roa
File:                     y8bMjVhEs2VXwagowkoZ_y62mQQ.roa (raw, json)
Hash identifier:          qVc31APEHV64yHVwrnfodE0j+yffgctKPhSWqkc0Kdw=
Subject key identifier:   CB:C6:CC:8D:58:44:B3:65:57:C1:A8:28:C2:4A:19:FF:2E:B6:99:04
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       01836136B213D5357F9EB1602B3197C25189
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/y8bMjVhEs2VXwagowkoZ_y62mQQ.roa
Signing time:             Wed 21 Sep 2022 18:01:58 +0000
ROA not before:           Wed 21 Sep 2022 18:01:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202848
IP address blocks:        88.218.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:61:36:b2:13:d5:35:7f:9e:b1:60:2b:31:97:c2:51:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Sep 21 18:01:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbc6cc8d5844b36557c1a828c24a19ff2eb69904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:23:d4:39:6b:66:d6:be:cc:c8:e3:53:b0:
                    b1:31:40:06:32:9d:59:05:1d:2b:52:f3:29:c9:33:
                    df:3c:a3:8b:8c:fd:ef:a5:a0:05:54:9a:08:2f:6b:
                    74:a2:42:55:e6:47:70:86:58:81:0a:55:8f:7a:0d:
                    3b:d9:e4:be:73:9c:28:f9:9b:5e:a3:06:3c:f8:cd:
                    cc:cb:29:bf:9d:ad:d4:d4:b0:dd:8a:40:9f:a9:e4:
                    58:ef:2f:ef:83:33:58:df:a5:1f:3c:39:37:68:83:
                    8f:2c:a9:c6:78:7c:f6:d4:1c:df:a4:c7:e4:ac:63:
                    5c:e9:49:99:f1:0d:8b:a5:8c:1d:d5:5b:07:70:3a:
                    1b:a8:78:27:ce:a9:a1:4f:86:34:ed:1b:b7:b0:ce:
                    da:af:b2:b2:18:d0:e3:2c:9f:53:46:5a:82:94:f7:
                    75:6d:94:80:b4:1a:f4:30:d0:b4:17:34:e3:00:54:
                    91:50:f1:7a:45:ad:8e:f7:8f:c5:66:99:8f:87:46:
                    0d:ce:2d:f9:74:0f:b8:b1:f7:71:71:17:98:5f:97:
                    df:d8:03:dd:73:11:64:c9:5e:7b:1b:9f:f8:45:d3:
                    b8:7f:97:0a:ef:d2:ba:80:eb:52:31:db:c7:a6:5a:
                    54:84:4e:67:69:3a:b5:8a:ff:5e:1e:fe:61:51:aa:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:CC:8D:58:44:B3:65:57:C1:A8:28:C2:4A:19:FF:2E:B6:99:04
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/y8bMjVhEs2VXwagowkoZ_y62mQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:73:48:84:eb:95:f6:f0:42:7d:a9:db:0b:1c:2b:65:e2:56:
         2d:a9:1d:32:81:c5:f1:11:90:59:ee:0e:7f:cc:84:1a:3c:a3:
         c4:18:80:06:29:99:8f:eb:b4:06:aa:b5:13:a6:b1:4e:8b:fd:
         01:2c:4b:5b:7b:03:28:13:8d:fa:1f:84:bd:a5:e5:34:92:ec:
         1d:38:fd:92:e6:80:26:8a:4b:40:c4:e0:4e:11:46:a3:09:95:
         16:ac:22:2d:7a:9f:85:bc:00:58:4f:78:66:f2:9d:2d:5e:ba:
         c0:21:83:ba:02:05:05:36:8f:83:77:e5:1a:b7:23:fd:df:74:
         ad:aa:cf:56:fa:0b:28:a6:3f:e5:fc:f7:ad:d0:9f:9c:5b:cb:
         b0:dc:75:c1:05:b3:87:8a:7e:db:cc:24:bf:71:2c:d7:78:7f:
         d5:4f:76:f7:30:c2:5b:ec:7f:fb:c7:cc:c3:33:7b:61:7c:12:
         34:01:67:45:66:a0:03:29:86:ff:da:20:b8:e3:f7:df:f0:61:
         e6:5b:ec:32:8d:72:69:33:76:19:17:c7:19:6a:0e:7a:57:9b:
         a1:49:44:64:de:78:35:fa:4a:7e:3d:b7:62:62:8e:75:34:71:
         70:cb:44:0e:48:8d:5e:a3:5a:22:24:d5:40:a2:58:38:7e:42:
         60:35:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org