Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_JqjKKCs9-NisYpgiZQf62ftIpU.roa
File:                     _JqjKKCs9-NisYpgiZQf62ftIpU.roa (raw, json)
Hash identifier:          3DYeh1BjE9SCd3AH0ab6a1+40H45d9foN49R+mUyUkE=
Subject key identifier:   FC:9A:A3:28:A0:AC:F7:E3:62:B1:8A:60:89:94:1F:EB:67:ED:22:95
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       0181F26BA6C9FBA791C731983392A4B67EEE
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_JqjKKCs9-NisYpgiZQf62ftIpU.roa
Signing time:             Tue 12 Jul 2022 12:39:10 +0000
ROA not before:           Tue 12 Jul 2022 12:39:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49907
IP address blocks:        185.75.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f2:6b:a6:c9:fb:a7:91:c7:31:98:33:92:a4:b6:7e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jul 12 12:39:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc9aa328a0acf7e362b18a6089941feb67ed2295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:44:72:37:76:99:c6:6d:a0:a6:aa:0e:28:
                    f1:7b:64:5c:cc:5f:ff:48:44:cb:3d:31:4e:57:63:
                    69:f2:fa:31:1d:2d:53:22:42:aa:4a:06:7a:0b:e0:
                    a6:90:58:74:28:ee:31:98:04:ec:9a:20:f3:3c:f7:
                    b4:1f:52:19:ee:62:d2:3a:1e:17:5c:09:d9:5f:ad:
                    af:15:91:08:12:7a:c4:24:fb:ce:f3:84:c4:c0:cd:
                    a2:95:cb:f8:26:22:c8:6a:a7:60:5f:5e:26:fb:9d:
                    f1:72:f4:9c:79:8c:86:c2:54:9f:c8:7a:fe:75:ac:
                    af:57:d1:cd:01:d8:05:59:0e:12:74:84:59:76:4e:
                    7f:6a:f1:92:39:e0:82:be:88:75:e5:a9:a0:98:ac:
                    4b:91:f7:67:a4:a5:84:6a:7c:84:e2:54:dc:e9:a0:
                    0c:7f:d2:c8:04:0a:d9:1d:a1:f1:19:30:07:a0:5e:
                    f1:d4:09:16:b5:d6:dd:6f:8b:d4:90:2a:f6:61:57:
                    aa:f4:c9:9c:09:62:06:ad:0d:81:fc:62:6c:43:d6:
                    59:c8:4c:27:4b:79:8c:2b:5b:ae:c1:57:c0:e2:04:
                    ec:0f:07:3c:c6:ad:78:7c:ae:ee:fc:e4:20:36:77:
                    d5:3a:fc:f3:23:70:33:bd:0a:45:0a:ba:7c:bb:cd:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:A3:28:A0:AC:F7:E3:62:B1:8A:60:89:94:1F:EB:67:ED:22:95
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_JqjKKCs9-NisYpgiZQf62ftIpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:45:5e:41:d6:9f:b7:f3:e9:26:06:db:cc:d5:f9:d9:e9:b8:
         e2:f3:45:e7:6a:fc:97:6f:66:5d:a4:4b:ea:b2:41:73:29:c0:
         36:17:3e:4a:a0:c4:37:25:4c:cd:13:1e:3d:03:f7:c5:68:46:
         10:a6:eb:e3:eb:44:b6:c0:40:7c:f8:37:2c:a5:fc:f5:93:44:
         04:9f:dc:11:40:63:c7:e6:1b:2b:26:9a:4b:66:c1:ab:b6:32:
         bf:e5:1a:6e:f9:68:97:24:95:0f:ca:87:aa:f5:10:34:3e:ac:
         bd:7b:b7:e3:22:da:fc:e2:0b:f7:06:7b:14:04:c5:84:eb:cb:
         ac:59:28:04:e1:6e:f4:db:e0:72:51:e2:a7:06:f9:6f:e0:1f:
         b6:72:82:75:2a:0c:59:fe:96:b3:75:88:35:3b:81:ac:6e:4a:
         e4:e3:da:e4:bf:6b:f3:37:a0:4a:f2:98:7a:e3:38:bd:8e:df:
         f0:85:b2:32:25:96:96:6b:3c:00:85:c2:ac:fb:f1:05:f4:45:
         c9:f0:e5:c2:18:e1:f1:bc:89:8d:25:de:b1:05:f3:f8:7a:14:
         b9:84:45:89:48:a4:3f:64:2d:2e:09:10:9a:b9:dd:a1:6d:9d:
         18:e9:56:fd:f1:49:ac:a7:ef:ad:74:e7:84:08:6e:b6:1b:ea:
         59:de:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org