Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/IABzXsegUMABCZ0PhHdO5Sc8-hg.roa
File:                     IABzXsegUMABCZ0PhHdO5Sc8-hg.roa (raw, json)
Hash identifier:          z/fy6JNFC6OO/wrzCtqE0Dfl2YaBDqjhK3zHBylIA2c=
Subject key identifier:   20:00:73:5E:C7:A0:50:C0:01:09:9D:0F:84:77:4E:E5:27:3C:FA:18
Certificate issuer:       /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial:       021A75ED
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/IABzXsegUMABCZ0PhHdO5Sc8-hg.roa
Signing time:             Sat 01 Jan 2022 04:56:49 +0000
ROA not before:           Sat 01 Jan 2022 04:56:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        193.105.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35288557 (0x21a75ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
        Validity
            Not Before: Jan  1 04:56:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2000735ec7a050c001099d0f84774ee5273cfa18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:d1:55:47:94:35:c6:13:4f:cb:d9:87:24:
                    21:1a:5f:70:2a:ae:03:f0:ef:c1:bd:9e:66:81:a1:
                    0b:7f:11:b2:78:f1:1a:33:f4:90:90:06:0f:86:fd:
                    a4:f5:5b:71:89:21:a8:a9:2a:00:1a:02:57:b5:c3:
                    f7:06:91:1d:fe:5e:df:a2:66:c8:68:60:a8:c6:42:
                    82:50:08:7f:4d:dc:1d:af:c1:c1:54:32:25:16:8c:
                    7d:e3:fc:62:e5:de:e1:86:40:34:ed:90:55:3f:0b:
                    1d:e6:82:07:1d:1a:ec:ff:38:3a:59:47:08:be:3d:
                    7b:64:27:c1:ee:cd:cd:99:bf:f2:c3:a2:cd:fb:07:
                    c6:0d:0b:c4:d2:98:73:fd:f5:5f:1f:23:25:b8:db:
                    57:35:9b:89:95:91:40:70:37:b7:ee:1f:f2:33:6e:
                    5a:7a:76:f3:cd:6d:2f:01:64:2d:b9:4d:05:1d:7c:
                    35:98:60:dc:4b:27:72:d0:cf:bb:d0:d8:4f:35:ce:
                    f9:b2:23:e3:c2:a3:60:c2:ba:dc:bd:e8:e5:75:83:
                    5e:db:14:8a:22:80:19:80:dd:65:8f:0a:2c:62:09:
                    8f:16:f6:04:48:35:37:8f:bb:80:0e:28:75:46:79:
                    eb:61:08:eb:3a:73:a9:58:dc:73:08:5f:61:ec:ef:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:00:73:5E:C7:A0:50:C0:01:09:9D:0F:84:77:4E:E5:27:3C:FA:18
            X509v3 Authority Key Identifier:
                keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/IABzXsegUMABCZ0PhHdO5Sc8-hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:d5:cb:a1:fa:04:44:10:ac:2a:48:8f:17:ed:66:47:5f:db:
         7f:23:a9:7f:0d:98:ed:44:13:7b:bf:f2:2b:6e:02:05:9e:1c:
         18:23:28:e3:27:21:0d:fe:47:b1:a0:0f:02:6f:1f:66:18:4f:
         be:5c:a7:ae:5e:99:42:f3:d0:1f:1a:47:65:9b:a2:32:df:66:
         c4:8e:76:a6:c2:c8:e0:0d:d6:f6:e1:1a:b9:b4:12:2c:f0:73:
         5e:bb:2d:45:1f:66:57:df:53:b5:e1:4a:ab:ed:5a:fa:3a:13:
         38:65:a2:a1:d1:6f:81:11:c9:0a:03:e6:cd:28:7a:1c:6f:84:
         56:fa:9f:96:79:24:9d:f1:71:1c:60:98:b4:c3:fa:1c:a5:ff:
         a9:f1:a1:f2:0c:c4:a7:fb:8c:f3:04:82:81:b5:2f:9f:9d:09:
         6f:91:1e:2f:9f:3e:af:01:e2:9d:d6:64:dc:e8:83:7f:28:ab:
         bf:60:6b:8d:cf:e6:3b:1a:d9:0b:f8:37:15:9f:e4:f6:ac:b8:
         f1:b6:9a:44:4a:3a:0a:c9:71:a4:03:55:88:f5:df:62:03:56:
         e1:22:5a:59:56:ca:10:33:aa:d7:d3:42:11:10:d0:a4:47:3a:
         4c:f9:df:72:82:66:a3:70:d4:7f:7a:16:85:fa:bf:4c:e7:16:
         56:fc:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:42 2023 by rpki-client on console-ams.rpki-client.org