Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/g037srcWTVFKan_w5dn4owkGQ-E.roa
File:                     g037srcWTVFKan_w5dn4owkGQ-E.roa (raw, json)
Hash identifier:          0g/ZGOLt7oQFA9nEesKuzrzLXYi2K7m2EwWTh2uz8VE=
Subject key identifier:   83:4D:FB:B2:B7:16:4D:51:4A:6A:7F:F0:E5:D9:F8:A3:09:06:43:E1
Certificate issuer:       /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial:       6A83
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/g037srcWTVFKan_w5dn4owkGQ-E.roa
Signing time:             Thu 05 May 2022 09:33:58 +0000
ROA not before:           Thu 05 May 2022 09:33:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44254
IP address blocks:        195.93.151.0/24 maxlen: 24
                          195.93.150.0/23 maxlen: 23
                          195.93.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27267 (0x6a83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Validity
            Not Before: May  5 09:33:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=834dfbb2b7164d514a6a7ff0e5d9f8a3090643e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:df:ca:68:39:0e:b0:1e:49:b6:4d:b7:59:bb:
                    fd:1c:2c:1b:ac:00:7c:af:90:b6:51:b3:4b:9d:be:
                    3c:39:88:c2:8b:d4:ae:fb:6d:10:25:99:c1:a0:ac:
                    9b:b5:56:8c:ba:1a:52:de:b6:33:0d:34:80:62:4b:
                    30:c2:56:19:1e:29:44:01:f8:28:6d:d4:42:f8:ff:
                    94:cf:23:42:b9:9f:7f:a2:db:d8:a4:6d:b8:12:db:
                    da:2e:f0:0e:ad:24:88:84:36:59:5c:bc:5b:62:a6:
                    9c:62:9c:7a:25:7a:2d:42:6d:16:71:41:45:85:4d:
                    ce:c9:70:e2:6e:e9:0f:5b:38:c4:74:bf:0e:3d:75:
                    bc:71:63:3a:70:5e:b4:ab:61:4f:20:0b:e2:6e:60:
                    ce:c6:14:e2:53:4f:89:68:fa:bd:17:24:d2:df:fc:
                    fe:4a:33:d3:e7:d8:c1:ff:b7:58:41:a8:9c:95:01:
                    1d:e4:cd:83:a6:d1:bd:ed:13:d6:2c:c4:12:7b:0e:
                    c3:22:e7:80:a0:28:16:8b:14:27:10:b2:34:2e:80:
                    5c:e4:fe:d0:3a:0d:fc:6a:96:81:c7:82:82:e8:97:
                    2c:92:26:fa:f0:73:f2:17:48:2a:68:51:d4:3a:87:
                    94:1d:e0:82:20:17:8a:c1:2d:98:47:35:2a:e7:b4:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4D:FB:B2:B7:16:4D:51:4A:6A:7F:F0:E5:D9:F8:A3:09:06:43:E1
            X509v3 Authority Key Identifier:
                keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/g037srcWTVFKan_w5dn4owkGQ-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:af:c5:78:8b:48:6e:ba:a1:d6:52:ef:a5:78:f6:ae:6f:e8:
         eb:b6:86:5d:b1:f3:09:de:29:a4:1c:8c:5f:e3:05:68:a6:f6:
         59:9b:c7:ba:59:89:52:99:94:00:5b:12:33:40:2f:d4:bf:e1:
         4a:88:3f:5f:55:57:aa:93:f3:39:ab:7f:38:d9:db:aa:0d:2e:
         cc:db:14:ea:32:d5:18:59:9e:7d:fd:e0:b0:9a:3c:e1:53:0a:
         5c:f8:7d:c3:f5:71:e9:70:d1:2a:46:42:40:c3:ef:dc:47:eb:
         1e:e7:41:c1:90:d5:17:2d:f9:78:b2:5f:d4:c5:8a:1c:94:c8:
         52:da:92:06:0e:b5:2e:1b:63:99:a1:60:9d:3b:bb:98:44:be:
         70:23:fb:3a:0c:4a:8f:78:d6:5e:23:42:b3:f0:d1:11:b3:86:
         43:85:48:5c:f3:63:36:bb:50:f3:43:61:51:0e:71:70:11:7b:
         c1:3d:a3:28:13:33:05:d9:64:3f:e8:54:d6:55:a0:3c:ac:b6:
         e0:41:92:15:ef:99:88:e4:2d:b3:35:f8:49:25:fb:1b:dc:63:
         c5:f7:de:b6:fa:e0:e3:6d:a9:bd:2e:a4:43:19:7b:f3:85:5b:
         41:49:b8:66:67:57:f4:c7:a2:8e:90:9e:55:ac:09:c1:f0:c9:
         ec:12:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-ams.rpki-client.org