Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/7SgDgSWeXDfFc7FJV1Mtlp3L9UM.roa
File:                     7SgDgSWeXDfFc7FJV1Mtlp3L9UM.roa (raw, json)
Hash identifier:          toIdJ7sbY2q9iBbO/4JPUk0DLz+G+sooIMpfziHDonE=
Subject key identifier:   ED:28:03:81:25:9E:5C:37:C5:73:B1:49:57:53:2D:96:9D:CB:F5:43
Certificate issuer:       /CN=23523198ae37c02061f45c679daf3e337c285573
Certificate serial:       28A5
Authority key identifier: 23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1IxmK43wCBh9Fxnna8-M3woVXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/7SgDgSWeXDfFc7FJV1Mtlp3L9UM.roa
Signing time:             Wed 26 Jan 2022 18:27:24 +0000
ROA not before:           Wed 26 Jan 2022 18:27:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        185.81.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10405 (0x28a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23523198ae37c02061f45c679daf3e337c285573
        Validity
            Not Before: Jan 26 18:27:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed280381259e5c37c573b14957532d969dcbf543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ce:6a:6e:4e:65:3c:4d:b1:86:54:e4:a0:08:
                    cb:6b:b3:6f:62:36:dc:10:7a:7d:fc:94:74:fc:a9:
                    05:f5:6e:84:23:98:20:be:c4:d5:ce:e3:5a:50:8e:
                    86:dc:c1:46:df:47:3d:86:11:09:07:04:d3:2e:4b:
                    12:95:60:d2:51:01:43:19:e3:7f:e3:0f:14:b4:3e:
                    71:48:0f:bd:6f:21:4b:2d:ff:79:94:67:fe:3f:57:
                    c9:3e:17:28:b0:e1:61:85:a5:76:c6:01:4b:0b:f8:
                    ec:fa:9b:da:8b:5d:23:01:f5:41:b0:8c:42:2a:2a:
                    99:60:db:1a:5b:c3:72:9d:e0:25:0c:ed:cd:c4:c1:
                    e0:ab:cc:ca:ef:ba:ee:17:77:9c:c2:3d:7c:45:bc:
                    95:f9:3a:f7:92:82:6d:35:c9:dc:0f:a8:c2:4b:6e:
                    e0:5f:dc:1f:69:fd:6b:3a:d3:20:e0:06:44:ab:5a:
                    65:37:a4:04:49:33:f5:13:de:d5:73:00:e1:1c:7f:
                    36:a2:57:da:56:f7:bf:eb:7c:5f:70:b2:e2:d9:8c:
                    ab:a5:14:67:6e:0b:71:a8:69:be:1c:01:19:30:83:
                    3e:35:11:32:be:dd:77:73:6a:78:91:f8:99:06:c9:
                    62:c4:20:89:31:6c:49:72:ae:fc:3d:67:dd:c7:d0:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:03:81:25:9E:5C:37:C5:73:B1:49:57:53:2D:96:9D:CB:F5:43
            X509v3 Authority Key Identifier:
                keyid:23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1IxmK43wCBh9Fxnna8-M3woVXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/7SgDgSWeXDfFc7FJV1Mtlp3L9UM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:27:bd:b0:a7:4a:4f:8f:93:0c:e7:6b:3f:83:97:d9:a4:4a:
         8d:9d:c9:e4:43:33:97:31:ea:92:e8:04:6e:28:f9:99:ac:98:
         17:28:2e:5c:f5:8b:00:70:82:7e:94:21:95:d5:49:0d:cf:71:
         5d:98:41:c7:ca:57:fe:c5:17:4c:fc:c3:4a:ed:d8:ba:1c:bc:
         db:97:ed:8d:b9:1c:22:c6:d8:cb:e1:a1:f2:ff:69:97:a9:88:
         e4:5a:d5:1e:0f:cd:80:bd:5a:92:60:57:d7:c2:21:3d:83:9b:
         be:fc:b4:34:67:86:27:e7:ec:70:cb:d8:c7:21:fb:84:5d:35:
         eb:d6:28:db:6e:ca:b0:9e:b5:76:99:b5:c4:ea:b4:66:bb:b9:
         b2:0e:e5:60:90:1e:d3:1e:e8:d7:0b:2a:82:af:75:5e:b1:07:
         08:e2:30:ba:4e:f0:bd:50:64:60:0d:a6:8c:06:44:5b:3a:53:
         ad:8c:bb:4a:3e:33:80:70:e0:6b:ee:73:b2:7d:4c:15:b8:28:
         9d:d5:28:0e:94:46:4c:c2:56:36:0b:c4:c1:aa:3e:03:be:8b:
         c5:a6:a1:31:a8:f7:95:7e:73:62:4d:02:9c:47:65:bb:9f:bd:
         5b:86:4b:84:65:df:90:35:4a:02:21:a1:e2:fa:e3:e0:e1:82:
         9e:dc:d0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org