Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eNoOHyRPLSHEmNYxHUs2q1D5P6Y.roa
File:                     eNoOHyRPLSHEmNYxHUs2q1D5P6Y.roa (raw, json)
Hash identifier:          NkHALn0C89XAkL1glMKm+kbSacxhksdruNJyKSpf9Zw=
Subject key identifier:   78:DA:0E:1F:24:4F:2D:21:C4:98:D6:31:1D:4B:36:AB:50:F9:3F:A6
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       185259DF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eNoOHyRPLSHEmNYxHUs2q1D5P6Y.roa
Signing time:             Thu 20 Jan 2022 11:54:07 +0000
ROA not before:           Thu 20 Jan 2022 11:54:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51559
IP address blocks:        193.160.215.0/24 maxlen: 32
                          185.137.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408050143 (0x185259df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan 20 11:54:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78da0e1f244f2d21c498d6311d4b36ab50f93fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:e0:98:79:f2:86:16:1d:be:60:d0:e0:d5:
                    c5:49:d8:8c:b5:eb:d3:b3:1d:22:ae:f4:7d:a5:b6:
                    5b:26:07:cf:8b:03:b1:d8:b6:ef:44:91:1b:0e:80:
                    f0:ed:31:fd:aa:c1:38:e0:c3:de:27:72:17:ab:67:
                    7a:74:76:dc:6f:98:9c:bc:3a:db:0a:37:7b:fc:e3:
                    73:dd:a2:f1:7b:61:7a:b3:69:c1:85:ee:09:0c:55:
                    3b:5b:19:01:51:bf:8c:e2:e3:b6:c5:c8:ef:82:52:
                    31:ad:3c:3d:1f:e1:d1:77:a8:bd:64:dd:b8:f7:86:
                    4e:24:65:ec:8d:43:a7:6c:3f:04:63:11:5f:cc:ca:
                    eb:05:2c:1a:96:49:60:7e:1c:d8:26:4c:9d:69:61:
                    4a:14:e1:fa:ba:60:e9:b4:67:75:ac:5c:ad:f0:05:
                    90:12:75:46:aa:fd:35:89:84:d9:cb:34:9f:e0:f4:
                    9d:fd:b6:e1:28:03:2b:28:c4:ac:07:61:57:4c:20:
                    8d:ba:ca:58:bc:13:76:ee:08:8c:8b:2c:97:b3:d1:
                    73:de:70:fe:a0:1b:45:2f:45:bc:f9:a7:bd:81:a5:
                    ce:36:39:cc:28:c1:6c:06:c4:55:39:ef:37:df:9c:
                    13:94:82:8a:80:d5:f9:37:e8:5f:29:23:7e:96:02:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:0E:1F:24:4F:2D:21:C4:98:D6:31:1D:4B:36:AB:50:F9:3F:A6
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eNoOHyRPLSHEmNYxHUs2q1D5P6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.180.0/24
                  193.160.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:06:7d:c9:30:f4:c4:d4:ce:d1:8c:0a:77:9b:e0:cc:ea:
         ab:05:de:16:ab:89:fa:a4:ff:dc:53:b2:e0:cf:a1:de:5c:6e:
         92:a8:a8:94:4f:ad:df:64:da:d3:dc:ba:30:7f:4c:76:de:28:
         f7:52:13:4f:63:71:8a:17:e7:11:0a:99:e3:36:76:7d:e3:70:
         5e:ec:4a:2d:b8:b6:03:69:b9:40:5e:a5:ad:9b:49:a0:be:57:
         e6:d5:09:bc:35:f2:52:5c:c8:e9:1a:21:ee:4f:a1:24:62:c6:
         cb:cb:2b:d4:0d:96:b3:2f:81:d6:34:59:47:fe:41:1f:66:6b:
         78:ad:c5:aa:c2:f0:e5:3c:d3:6a:01:30:7c:74:57:8d:39:08:
         b0:bf:ec:ba:22:b7:68:38:1d:4f:d6:c8:b1:1f:d1:6d:b0:05:
         df:64:f0:0f:2f:a7:29:1f:8c:4b:09:62:82:f2:73:ac:bd:2a:
         87:23:96:80:2f:b1:31:0a:64:f2:51:94:a4:08:38:4c:c5:5a:
         96:be:82:0b:83:5b:e7:be:75:16:e0:8c:4a:3b:4d:a5:9a:af:
         46:00:66:65:19:5e:a1:81:9b:52:e4:6e:56:01:b4:35:5c:9d:
         72:5c:37:60:02:f2:87:c3:45:4a:39:e8:be:12:4f:2d:0b:8f:
         50:25:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org