Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/qwq1CeeDRdk276TX3jtd8tuOJZQ.roa
File:                     qwq1CeeDRdk276TX3jtd8tuOJZQ.roa (raw, json)
Hash identifier:          NiZx3dRzr66mAqJWi/X3nzRx6EUvr033l1PjRz9/35Q=
Subject key identifier:   AB:0A:B5:09:E7:83:45:D9:36:EF:A4:D7:DE:3B:5D:F2:DB:8E:25:94
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       0990
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/qwq1CeeDRdk276TX3jtd8tuOJZQ.roa
Signing time:             Tue 26 Apr 2022 15:21:06 +0000
ROA not before:           Tue 26 Apr 2022 15:21:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39296
IP address blocks:        195.250.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Apr 26 15:21:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab0ab509e78345d936efa4d7de3b5df2db8e2594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:e7:8d:e0:fc:9c:2c:2a:4a:20:08:fd:fb:
                    61:37:c8:c1:6e:69:5f:73:da:ab:12:07:0f:ed:bd:
                    be:2d:a6:c7:68:3f:cd:26:d2:a5:b6:da:11:c6:08:
                    db:5d:40:fa:8e:42:99:b8:43:43:a8:84:5a:c2:54:
                    8b:d7:49:87:7d:95:8e:ea:ea:70:44:8c:f9:05:95:
                    e0:e4:c3:d0:ac:cc:68:c9:8c:61:21:df:c4:63:4f:
                    a2:74:54:06:d0:fb:6f:09:a5:58:0b:be:7d:42:00:
                    72:24:1a:05:31:f0:5e:0e:ae:19:fd:10:12:f4:79:
                    db:35:d7:94:d7:07:78:1a:1f:e8:c0:0d:52:e2:de:
                    0b:f3:53:1f:e7:ad:c6:a6:cb:3d:c5:da:8b:94:09:
                    cd:fe:8e:a4:3c:94:e6:13:3b:2c:8b:d2:47:59:53:
                    6f:5c:b9:de:97:d4:ec:4c:c0:78:bb:12:38:50:2a:
                    c4:f4:f3:b9:cd:be:c4:fe:94:d7:6e:f4:a8:ed:f8:
                    0b:b0:fd:01:de:14:b8:ab:e1:02:96:5a:21:8e:d6:
                    c4:6b:ae:df:57:dd:5d:7d:3d:18:fc:0d:98:77:c2:
                    6d:57:24:50:42:6e:51:c7:2b:ff:cf:3c:bf:ca:84:
                    2d:2a:e4:68:14:ef:68:99:4d:dd:60:63:2b:c5:87:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0A:B5:09:E7:83:45:D9:36:EF:A4:D7:DE:3B:5D:F2:DB:8E:25:94
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/qwq1CeeDRdk276TX3jtd8tuOJZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.250.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:53:b5:4d:86:7b:6e:e5:9f:2a:ff:6c:34:35:6e:38:8f:
         e5:32:bd:b8:6f:5d:39:c4:fa:ae:2c:40:fc:39:29:cf:b0:4e:
         9c:c3:2b:99:67:a6:1d:b3:e1:d6:86:b8:29:9e:2c:f1:b6:5e:
         44:ec:44:57:24:10:7e:a3:ce:f7:6a:ab:43:1c:60:0e:7c:32:
         5f:68:12:75:8f:dc:73:b8:81:f4:8c:00:81:5a:83:6c:10:2d:
         11:09:cd:e2:4c:56:a9:12:86:4c:42:db:13:bc:f4:3d:da:e5:
         b0:a1:d3:e2:46:fe:6a:04:29:69:67:ff:c8:95:f1:eb:a9:9c:
         a4:34:b7:b9:c6:aa:10:34:63:d2:c0:68:5e:e0:f6:4d:70:7a:
         93:a0:e0:de:ae:cf:d8:cf:4c:c2:71:4a:c8:03:ea:0e:6b:3e:
         b8:bc:93:92:fb:4d:ec:4d:92:6d:ef:0a:51:f5:fd:ca:f4:e9:
         18:81:b2:78:68:3a:03:88:1a:ea:33:c1:0d:08:67:c6:a7:0d:
         76:32:6a:8d:eb:bd:9e:ae:46:f9:eb:3c:1d:cc:a6:56:bc:83:
         87:fe:0e:2c:1d:52:16:4f:00:1c:66:1b:61:fc:2a:d7:73:2b:
         8a:8a:dc:d1:6e:1a:fa:04:f3:eb:11:c4:67:d6:e5:65:be:ab:
         a8:73:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:41 2023 by rpki-client on console-fra.rpki-client.org