Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/C3DpjjnmYTgG3cJ56313eSjeJl4.roa
File:                     C3DpjjnmYTgG3cJ56313eSjeJl4.roa (raw, json)
Hash identifier:          ORYSObezVXaM17wzyoa0yaTkhl1zIoXuMgkIJ34lIzo=
Subject key identifier:   0B:70:E9:8E:39:E6:61:38:06:DD:C2:79:EB:7D:77:79:28:DE:26:5E
Certificate issuer:       /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial:       135015D2
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/C3DpjjnmYTgG3cJ56313eSjeJl4.roa
Signing time:             Sat 01 Jan 2022 05:54:05 +0000
ROA not before:           Sat 01 Jan 2022 05:54:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212749
IP address blocks:        185.86.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324015570 (0x135015d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
        Validity
            Not Before: Jan  1 05:54:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b70e98e39e6613806ddc279eb7d777928de265e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:3b:4e:82:34:7b:06:63:15:89:08:22:9a:
                    66:c3:01:b4:8f:7e:5c:8e:91:9c:04:45:f5:ab:ce:
                    33:27:02:59:7b:48:06:4e:35:8b:42:ab:a9:9d:34:
                    b9:51:48:4e:4f:e8:fe:01:1c:0c:db:86:43:fa:07:
                    de:6a:14:ac:9b:26:01:6e:5d:33:63:6b:a4:8c:25:
                    3e:5e:8c:be:af:d7:3b:15:2f:bb:1a:1e:37:67:f2:
                    15:4d:d4:a2:94:3f:bb:1c:6a:01:56:42:41:09:b7:
                    91:bb:d6:cc:f0:d5:e5:b3:1b:05:2f:37:f6:de:7b:
                    7b:b0:bf:0b:55:68:43:d9:57:32:1d:5e:38:13:df:
                    1c:e9:c5:ee:e4:50:60:43:8c:a3:c5:97:70:a8:e4:
                    57:32:60:fb:cc:1e:df:2c:0a:17:f7:59:7f:97:4f:
                    d4:0c:31:a0:72:7b:c4:c6:88:30:be:5a:ad:46:7a:
                    e9:6e:7c:c3:bf:8c:1a:7a:24:1e:a2:9d:a4:d2:30:
                    23:b8:a0:cc:96:e6:49:8c:c4:88:a3:f4:59:58:c3:
                    d4:76:34:b5:63:e6:ec:e9:55:c8:0d:f6:52:51:9c:
                    f0:85:7f:cb:c3:9e:77:0d:ff:17:29:8f:44:6c:1f:
                    eb:3e:8d:48:3f:e0:26:47:0d:b1:99:98:3e:53:36:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:E9:8E:39:E6:61:38:06:DD:C2:79:EB:7D:77:79:28:DE:26:5E
            X509v3 Authority Key Identifier:
                keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/C3DpjjnmYTgG3cJ56313eSjeJl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.86.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:68:14:5e:73:62:53:0d:e9:5f:97:c1:86:e0:ed:21:bb:32:
         66:59:10:51:d8:0e:67:0f:d0:a1:a0:d6:01:f6:7a:39:71:10:
         5c:3a:3e:37:0f:49:94:ac:c9:db:7c:ed:42:b3:f8:4a:0f:d9:
         99:2f:12:91:0a:ba:19:6c:d4:2f:49:a0:30:1b:b3:c1:b9:28:
         77:70:a8:e7:78:42:89:53:97:a7:c3:4c:0f:1c:b5:b5:6a:c5:
         19:0a:47:a9:39:26:c3:02:59:3d:a9:f3:2f:07:0b:44:c0:1b:
         a8:b5:97:12:07:87:8e:79:fd:32:c0:38:4c:ab:4a:2a:d2:94:
         3b:a4:4c:97:f9:fb:5f:9b:cc:c9:c2:3c:40:26:dd:3f:90:42:
         0c:69:79:ed:0d:81:66:32:93:80:11:6c:26:39:7a:cd:99:0a:
         94:53:5c:41:b8:9b:9f:c3:55:db:3f:03:e4:d8:e5:ab:22:4d:
         1a:a1:cb:3b:88:ca:2b:1b:9d:34:e3:19:5f:36:a2:39:b3:10:
         4c:f6:8f:1e:13:3d:92:98:d4:c3:70:23:05:87:47:c3:51:5e:
         53:db:2c:38:1f:8f:c2:5b:1e:6e:63:22:39:26:f1:9a:3b:84:
         a7:e9:7b:89:5d:5e:cb:05:ae:20:36:62:f7:0e:2c:7a:93:91:
         1d:58:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-ams.rpki-client.org