Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/_fUDl4zfYCUe3Wntb7Yy4EqTbUI.roa
File:                     _fUDl4zfYCUe3Wntb7Yy4EqTbUI.roa (raw, json)
Hash identifier:          1/srrRDtpl/HzdYRR7HF/o0+j76PXw0t1lr4eZsI9fs=
Subject key identifier:   FD:F5:03:97:8C:DF:60:25:1E:DD:69:ED:6F:B6:32:E0:4A:93:6D:42
Certificate issuer:       /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial:       07C7FEF4
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/_fUDl4zfYCUe3Wntb7Yy4EqTbUI.roa
Signing time:             Sat 01 Jan 2022 05:06:36 +0000
ROA not before:           Sat 01 Jan 2022 05:06:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9121
IP address blocks:        185.92.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130547444 (0x7c7fef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
        Validity
            Not Before: Jan  1 05:06:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdf503978cdf60251edd69ed6fb632e04a936d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:9b:a2:06:6c:13:81:5b:aa:cf:c0:93:71:
                    fc:ca:ea:0e:58:fd:bb:16:17:64:4d:04:23:44:b9:
                    28:1e:2f:c4:c0:e2:1b:89:9c:01:7c:10:ce:59:c7:
                    3e:3a:06:08:17:9a:23:c3:64:56:1b:e2:20:f2:d3:
                    10:66:c2:17:01:b8:8c:11:ad:c0:5f:0f:3d:e3:aa:
                    79:a7:f8:9b:74:64:f6:fe:7b:96:4a:36:49:86:d1:
                    17:c8:f1:83:bb:cf:5e:f5:2c:ca:9a:e8:4e:c7:c4:
                    70:26:6e:c5:02:84:9d:98:d9:30:87:2b:09:59:36:
                    fa:36:1b:df:56:ff:09:09:f7:6e:58:cd:02:16:15:
                    eb:31:80:46:d2:47:8c:42:b0:d3:8a:99:7d:af:68:
                    1f:3d:c1:75:dc:97:e1:6f:81:7d:a3:49:12:03:e5:
                    d4:e0:d5:f5:ad:5b:7d:48:43:60:df:60:eb:93:0a:
                    ac:b4:6a:c1:59:71:04:56:75:e4:66:83:f2:78:6a:
                    dc:fe:e2:10:1f:5d:b2:d6:ad:be:40:01:f6:54:e1:
                    51:7d:40:31:63:ac:c7:b9:76:ca:1a:73:b0:f0:50:
                    b2:92:74:90:b3:c2:8a:3c:19:47:34:25:7e:78:00:
                    10:4b:aa:ee:88:03:19:4f:f3:85:b9:24:73:5d:2d:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:03:97:8C:DF:60:25:1E:DD:69:ED:6F:B6:32:E0:4A:93:6D:42
            X509v3 Authority Key Identifier:
                keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/_fUDl4zfYCUe3Wntb7Yy4EqTbUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:56:9f:1a:83:41:23:38:ed:24:5e:75:47:d4:04:9b:14:22:
         a9:1b:a4:e3:a2:f8:6d:68:98:85:5b:23:82:1a:2c:a1:fe:4c:
         8e:10:99:1e:c7:46:86:f0:a5:25:1f:5c:8c:86:8e:d6:15:82:
         4c:13:50:7d:5a:df:7e:bf:78:ca:c8:c9:24:ea:cf:a5:e3:f5:
         f2:e9:02:dd:d4:74:e3:13:e6:85:b6:84:ba:79:37:57:c7:a8:
         00:fb:5e:7a:0d:a1:16:15:ca:2b:d1:df:ca:6b:0f:56:f5:5c:
         00:88:f9:60:46:24:ca:ba:3f:f1:d9:ae:72:ff:f9:3e:ad:37:
         8f:92:b2:ce:f3:b5:d5:14:6b:54:cc:9a:13:8e:c0:78:30:3e:
         de:5a:7f:59:fd:92:49:f3:53:62:69:7b:9c:43:44:36:b6:29:
         7f:23:25:05:99:65:26:a8:0d:55:2d:5c:26:8e:3c:f1:ab:bc:
         f7:1a:7c:63:f2:3e:24:62:28:5c:58:ee:84:c5:91:82:aa:d8:
         2f:0a:22:d5:ab:8b:ac:18:06:fa:62:2a:0f:74:f2:b0:a2:c3:
         af:fe:20:77:8e:3a:9f:84:33:bb:e4:c0:1b:a0:49:d7:31:51:
         7c:90:2d:4b:2b:6d:6f:63:7f:a6:4a:85:cc:99:a9:be:e6:2a:
         72:85:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org