Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JPbQceKAtiBx8iroM8PC2pcKzOI.roa
File:                     JPbQceKAtiBx8iroM8PC2pcKzOI.roa (raw, json)
Hash identifier:          TJmty9DDJ9lxlKz8jtlwNPhE8qVLD8q1tdaBABauDxc=
Subject key identifier:   24:F6:D0:71:E2:80:B6:20:71:F2:2A:E8:33:C3:C2:DA:97:0A:CC:E2
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       04AA8231
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JPbQceKAtiBx8iroM8PC2pcKzOI.roa
Signing time:             Tue 19 Apr 2022 09:41:28 +0000
ROA not before:           Tue 19 Apr 2022 09:41:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208392
IP address blocks:        185.112.80.0/24 maxlen: 24
                          185.112.100.0/24 maxlen: 24
                          185.17.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78283313 (0x4aa8231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Apr 19 09:41:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24f6d071e280b62071f22ae833c3c2da970acce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:19:9a:2f:f0:e1:98:d4:12:8c:85:13:00:
                    a9:4b:0b:93:f9:1d:4f:53:df:5b:ce:66:6a:12:f7:
                    f3:34:f9:7d:1e:28:f2:9a:6b:f6:f5:b3:c9:d0:ac:
                    0a:64:08:0b:e4:1c:3b:2a:ad:09:4e:f9:6c:74:75:
                    89:0f:c2:cf:3d:95:cd:e0:19:49:28:34:5b:c1:f1:
                    04:9d:79:44:fe:0c:02:50:0f:8e:19:2d:7f:9c:d4:
                    dd:64:70:e8:80:22:05:c1:cb:78:04:95:95:05:09:
                    07:83:c4:05:5f:e6:af:27:b5:0a:73:12:8c:1a:07:
                    18:d2:98:05:f5:96:33:c0:fa:d9:95:ad:dc:d2:ac:
                    85:ae:eb:94:67:73:c7:6e:67:f7:0a:dc:6a:8e:ed:
                    bd:54:a7:a2:e6:24:4a:ce:14:13:b3:13:f8:9a:53:
                    7d:91:88:1d:bb:f6:88:f3:b8:5b:16:70:68:01:28:
                    5c:61:20:3f:35:da:d9:4c:4a:42:b5:7a:4e:4b:38:
                    1c:4f:eb:a7:9d:03:26:df:d9:fe:2b:4a:13:a6:1d:
                    c7:dc:bd:d0:8b:47:2c:dd:8b:33:83:dc:83:a4:c0:
                    5a:04:40:2f:6a:e1:d6:65:72:90:8a:ff:98:c6:d8:
                    85:ea:0f:57:3b:b6:88:16:3a:7d:08:fe:3e:cc:82:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:D0:71:E2:80:B6:20:71:F2:2A:E8:33:C3:C2:DA:97:0A:CC:E2
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JPbQceKAtiBx8iroM8PC2pcKzOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.17.1.0/24
                  185.112.80.0/24
                  185.112.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:75:74:99:6f:51:93:1e:da:5b:94:fd:b0:85:dd:fe:2b:
         75:11:0f:a0:99:19:d9:6d:03:a9:53:9a:94:6d:7c:24:19:38:
         a1:61:87:a0:05:4f:2e:9b:9e:c0:ec:53:aa:c1:71:48:48:aa:
         95:4a:4a:64:bc:f0:d6:e4:a5:0b:24:c1:77:ee:ff:c3:c2:46:
         4b:d8:45:e0:eb:30:33:96:02:c8:f4:68:7c:96:92:2f:4d:10:
         10:59:c2:47:81:07:a8:0b:82:99:e0:97:b2:c6:e8:26:8e:2a:
         8f:9f:d7:d2:e0:0b:d0:21:83:62:21:84:d1:ea:e7:e1:1d:72:
         4b:62:11:c9:41:8e:58:96:02:95:e1:bb:a7:2f:d5:ce:2d:49:
         a4:01:2c:db:74:f6:ad:0a:a6:55:85:e5:6a:01:8a:f3:3a:6a:
         e9:b0:ab:71:dd:45:cc:e2:56:66:7a:2f:e1:8a:18:a8:a2:7c:
         81:4e:9c:b5:ea:f3:16:c4:e9:7d:dd:2b:a4:57:07:5d:52:dd:
         2f:69:40:f0:b7:70:55:8c:1a:5a:da:f1:b5:f2:30:93:4c:29:
         cc:2b:37:5d:17:19:b1:57:92:bd:28:a6:ec:c9:1f:82:02:b4:
         6f:e3:70:00:13:9a:0f:0e:d3:ab:9a:a6:02:9d:44:13:ec:5a:
         d4:71:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org