Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/EtRd4C7RaCobBn5lfXgQhVfMw64.roa
File:                     EtRd4C7RaCobBn5lfXgQhVfMw64.roa (raw, json)
Hash identifier:          zreV2LIIncM9vkDQrdSshwvRqJ4bvUiFWfKaZRFSsuU=
Subject key identifier:   12:D4:5D:E0:2E:D1:68:2A:1B:06:7E:65:7D:78:10:85:57:CC:C3:AE
Certificate issuer:       /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial:       06D958D3
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/EtRd4C7RaCobBn5lfXgQhVfMw64.roa
Signing time:             Sat 01 Jan 2022 14:58:08 +0000
ROA not before:           Sat 01 Jan 2022 14:58:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     396982
IP address blocks:        46.16.161.0/24 maxlen: 24
                          46.16.160.0/24 maxlen: 24
                          46.16.160.0/23 maxlen: 23
                          46.16.164.0/24 maxlen: 24
                          46.16.166.0/24 maxlen: 24
                          185.27.146.0/24 maxlen: 24
                          46.16.165.0/24 maxlen: 24
                          185.27.147.0/24 maxlen: 24
                          91.197.140.0/24 maxlen: 24
                          91.197.140.0/22 maxlen: 22
                          91.197.141.0/24 maxlen: 24
                          91.197.143.0/24 maxlen: 24
                          91.197.142.0/23 maxlen: 23
                          91.197.142.0/24 maxlen: 24
                          185.27.144.0/24 maxlen: 24
                          185.27.144.0/22 maxlen: 22
                          185.27.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114907347 (0x6d958d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Validity
            Not Before: Jan  1 14:58:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12d45de02ed1682a1b067e657d78108557ccc3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:03:09:f2:e3:d4:03:0e:12:75:f3:cf:3d:
                    bb:93:4d:fd:a8:de:e7:33:b7:e9:a6:d1:6c:bb:cd:
                    60:83:0a:9f:a3:a5:f9:3d:4b:a6:0a:55:de:f3:5a:
                    21:47:28:72:2f:3c:52:11:9e:d1:87:fd:bf:80:34:
                    be:af:bc:be:59:09:2d:84:ba:9c:65:7c:67:6e:c2:
                    b0:ae:ad:a5:11:81:32:97:4f:da:96:5f:a2:49:45:
                    91:44:0e:d7:f4:d6:69:4d:84:40:32:e5:a4:07:c6:
                    d4:bd:97:22:8b:e1:a8:ac:d6:21:7f:4e:75:88:af:
                    34:58:7e:1b:81:3b:89:38:23:8d:8a:09:31:32:e9:
                    20:aa:4f:60:e3:23:13:bf:84:a0:39:b3:d2:b4:d6:
                    de:cc:56:ab:b2:0a:cb:5c:01:7d:1b:2f:e2:80:b2:
                    eb:fb:e9:45:ec:17:3e:94:fc:a3:4f:5a:db:d6:03:
                    df:b6:be:c4:e7:e4:e2:25:65:e6:7c:aa:dd:53:4e:
                    86:c3:10:ae:9a:d4:00:39:12:46:34:2d:eb:d9:a3:
                    46:67:0a:f7:b5:52:30:ba:36:10:b4:10:a6:4a:50:
                    b8:c0:be:09:7d:98:0d:fa:61:46:0e:93:37:2c:1c:
                    55:cf:b0:c6:45:98:73:7c:b0:38:ff:ba:30:0b:fe:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D4:5D:E0:2E:D1:68:2A:1B:06:7E:65:7D:78:10:85:57:CC:C3:AE
            X509v3 Authority Key Identifier:
                keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/EtRd4C7RaCobBn5lfXgQhVfMw64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.160.0/23
                  46.16.164.0-46.16.166.255
                  91.197.140.0/22
                  185.27.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:55:c5:a7:b0:92:d2:ac:47:4b:7c:4a:eb:58:8e:09:5c:
         50:63:d6:cf:09:81:38:c8:07:3a:3a:ce:1a:6b:14:88:07:e7:
         7c:cc:3f:4f:28:0c:fb:2d:14:1b:74:85:1e:68:6a:f8:24:48:
         7b:e2:08:a4:65:f5:f2:4b:5d:2e:0f:88:2d:ef:49:d7:6b:0b:
         4c:7c:3c:15:fc:c6:90:2c:61:4d:68:30:83:b4:35:d8:0d:de:
         68:6f:6c:3b:70:93:49:7e:14:32:59:43:fd:af:34:73:af:22:
         13:f2:51:fd:69:1c:4f:54:3a:65:85:b7:cf:88:c5:31:42:8b:
         69:2a:76:e5:4a:50:b2:b9:ea:58:dc:38:04:21:7a:f9:cd:bd:
         d3:e2:aa:29:04:3f:3f:5f:25:f1:09:3d:80:b7:8d:91:ce:a2:
         44:da:b7:3c:e2:25:5f:d6:34:33:e2:7a:a0:fb:a7:db:b4:d3:
         fe:2a:f5:88:40:e5:1a:45:46:13:20:3e:7a:b0:6d:78:17:5c:
         99:31:d7:02:7e:ff:23:99:03:76:ea:ab:65:3a:96:7d:7b:2e:
         88:70:92:f9:99:56:1d:4f:4b:8c:2b:fc:87:ff:27:6f:57:cb:
         66:1b:5d:ff:b4:b0:00:84:e0:20:d5:3b:73:73:94:bd:b2:be:
         45:06:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:51 2023 by rpki-client on console-fra.rpki-client.org