Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa
File:                     6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa (raw, json)
Hash identifier:          46hILNW9vNy6rDMwURsS7l6lFHV4bFpglTa8LCjFEeo=
Subject key identifier:   E8:CA:E6:F3:B3:78:31:DD:28:CA:8D:7E:D1:B2:1E:24:AF:04:77:24
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       424FD60B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa
Signing time:             Sat 01 Jan 2022 14:02:54 +0000
ROA not before:           Sat 01 Jan 2022 14:02:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1881
IP address blocks:        192.71.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112528395 (0x424fd60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 14:02:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8cae6f3b37831dd28ca8d7ed1b21e24af047724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:7c:df:1b:dd:57:c8:f3:2e:a4:eb:92:e1:
                    f5:26:5d:44:1e:a2:35:19:d9:5c:f8:4a:0a:b5:12:
                    28:c4:fb:29:ec:5c:37:ea:0c:41:a6:81:ff:d1:6e:
                    b2:56:31:b8:e6:46:18:47:9c:6b:fa:f7:c6:fe:9a:
                    c5:7f:8e:22:00:69:e1:4f:67:95:4a:ef:12:66:5d:
                    73:3a:39:cd:d9:b2:11:76:17:e2:4e:d0:72:08:66:
                    55:8e:c3:7a:03:1d:7d:18:78:81:71:43:af:aa:d0:
                    6f:17:40:ed:75:c3:2a:2b:dc:e1:8f:e6:72:ca:d3:
                    73:75:4f:fb:09:90:da:49:72:e0:51:43:64:53:3d:
                    1a:01:86:f7:96:5f:9e:22:8a:1b:be:e9:74:0f:6c:
                    39:20:8e:2e:b9:ce:d8:72:1b:66:74:53:e3:8e:48:
                    d0:64:ca:ed:ae:f5:34:16:9b:11:b2:bb:ea:89:c4:
                    cf:09:91:1b:3f:54:26:50:5f:a5:a3:fd:3a:8b:c3:
                    36:41:59:d7:4c:ed:39:d4:ef:cb:60:96:4c:89:91:
                    6d:43:5e:40:c5:4e:07:1f:4f:c7:04:02:27:f3:88:
                    22:40:30:a4:4f:2b:74:a9:d3:b0:dd:16:dd:ae:92:
                    0a:ec:9d:fe:b9:4b:c9:90:3d:ca:60:e5:70:66:f6:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CA:E6:F3:B3:78:31:DD:28:CA:8D:7E:D1:B2:1E:24:AF:04:77:24
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.71.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:28:af:30:3c:a4:64:ed:f6:8e:dc:cb:50:3b:4b:59:49:
         ac:23:1d:be:e4:22:06:19:ab:7d:b6:3e:cb:7d:14:bc:74:4b:
         33:e4:1d:58:a2:8a:21:0b:aa:70:f9:89:87:2f:83:aa:ea:9e:
         c3:6c:f7:3a:bf:9b:06:19:29:84:ca:1c:a1:e5:45:96:b6:07:
         b4:45:ae:6c:5a:e1:66:3b:9d:df:42:4b:bf:84:9f:af:82:7a:
         25:9a:12:db:cc:4f:f8:83:29:bc:a5:89:6a:e5:fb:ca:96:9b:
         ae:52:b0:ab:c7:92:5a:e3:69:d6:37:f5:b9:32:c3:dc:f5:bd:
         28:6c:5b:89:40:52:fb:24:83:c2:24:55:d9:be:a7:d8:f7:ba:
         e7:41:53:43:da:65:83:47:03:34:9c:33:8f:2e:61:06:6a:13:
         18:29:cc:41:2e:d2:7e:df:04:2e:bf:16:f6:22:bf:27:4e:3b:
         7b:54:a3:5b:04:f6:61:61:66:07:11:44:95:bf:e6:cc:d4:d0:
         72:98:96:04:86:16:5e:83:92:7c:88:d6:93:4d:e6:48:92:0e:
         4c:16:69:dc:71:94:a1:fb:f4:dc:6d:6c:22:8f:4a:90:90:ab:
         e4:21:b4:d9:b0:c4:e2:da:06:2d:e8:ef:eb:58:9f:95:be:98:
         57:5e:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org