Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-DlKGZzq9QxcojQxDstJEi-Kt8g.roa
File:                     1-DlKGZzq9QxcojQxDstJEi-Kt8g.roa (raw, json)
Hash identifier:          nzuMYVekAlcZgSq39LXGRt5uP4HRM3yFq5hlSqNlj/Y=
Subject key identifier:   F8:39:4A:19:9C:EA:F5:0C:5C:A2:34:31:0E:CB:49:12:2F:8A:B7:C8
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       42879DD9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-DlKGZzq9QxcojQxDstJEi-Kt8g.roa
Signing time:             Sat 01 Jan 2022 14:03:26 +0000
ROA not before:           Sat 01 Jan 2022 14:03:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203038
IP address blocks:        193.182.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116184025 (0x42879dd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 14:03:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8394a199ceaf50c5ca234310ecb49122f8ab7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:75:a7:d9:da:a3:9b:f7:17:ec:0f:82:93:
                    b4:d2:6e:d1:f6:05:e9:65:41:d0:4b:91:30:1f:05:
                    59:67:50:03:fa:31:1e:78:59:bc:db:20:eb:b1:5e:
                    cd:18:3b:de:b5:f2:81:6c:a7:e2:bb:66:6e:a3:2b:
                    ff:f2:d9:66:81:e7:bf:4f:b5:25:b0:0d:ae:e6:b6:
                    89:e3:f7:54:61:51:33:73:9c:f8:94:2c:ae:f4:33:
                    78:b0:f1:7c:15:82:f9:f0:9e:50:7a:78:8f:be:65:
                    8f:a4:99:a7:e8:99:4b:ab:11:49:ec:f5:01:c8:75:
                    75:53:f5:33:1f:fd:04:0f:b2:8e:97:ab:00:c2:46:
                    7c:75:f5:f7:c1:a2:d6:37:36:ab:be:41:24:54:21:
                    81:36:ad:d9:8c:f3:06:cf:1f:0c:db:9a:6c:f6:e0:
                    84:63:85:28:05:5e:40:e2:27:e2:de:e6:01:e8:58:
                    2e:50:2b:b9:f2:32:3e:96:28:06:10:a1:16:87:dd:
                    ea:79:a4:6f:c3:f9:93:1f:69:31:a1:af:4e:49:97:
                    a3:d6:1c:99:de:93:90:4e:39:8d:77:2a:73:3f:29:
                    a0:d6:cb:5a:6c:79:ae:e0:6c:63:94:f5:ed:ec:48:
                    df:fc:d9:14:a4:3f:3b:07:77:03:48:87:2c:36:3a:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:4A:19:9C:EA:F5:0C:5C:A2:34:31:0E:CB:49:12:2F:8A:B7:C8
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-DlKGZzq9QxcojQxDstJEi-Kt8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.182.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ef:2d:4b:17:30:f3:8b:1b:1a:25:ff:96:bf:ba:6c:f4:08:
         1f:af:c7:d6:aa:aa:ee:1c:1d:c6:44:f9:61:12:bb:00:c4:32:
         a1:3b:f3:f9:4f:31:68:17:03:cb:ef:c9:49:bc:a9:60:9e:09:
         2c:66:4f:ba:2f:ca:c1:97:60:32:c4:76:1c:ae:25:5b:cc:8f:
         b7:20:18:ad:3b:f4:5c:29:6c:3a:0e:2a:2e:16:c2:00:09:83:
         e6:02:fa:b3:56:23:05:86:9c:75:13:02:a9:80:96:78:ff:29:
         b8:c8:66:4b:41:70:4e:e4:a2:4c:2f:e8:b5:d4:0d:d2:6a:a5:
         99:91:94:3c:84:88:dc:b5:84:eb:6b:9b:45:f6:cf:8f:89:72:
         8c:ba:6c:e3:08:1c:ab:f8:1b:1a:97:97:23:98:ee:0f:83:b1:
         1a:ed:4f:e9:c0:67:5d:52:89:d2:61:7b:34:df:b6:6a:96:68:
         1d:f6:7d:1b:4b:a1:7a:03:96:50:9b:bc:28:35:07:a2:39:18:
         85:c0:91:ad:ef:5f:8e:bd:66:9b:b5:b3:92:80:2d:b9:88:d7:
         71:35:71:37:ce:41:7c:53:f0:bf:59:8b:97:99:1e:f6:48:8e:
         d5:2b:8a:d6:19:b8:27:bd:a2:7b:b4:c1:61:87:0f:0d:94:07:
         a6:6d:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org