Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/7ebCodnfzddho6-WOXYy-kNOwOg.roa
File:                     7ebCodnfzddho6-WOXYy-kNOwOg.roa (raw, json)
Hash identifier:          tWx8HjHjSBTocU/0Rkqbaedpk5SIs/PNlXUiFvhXKMY=
Subject key identifier:   ED:E6:C2:A1:D9:DF:CD:D7:61:A3:AF:96:39:76:32:FA:43:4E:C0:E8
Certificate issuer:       /CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
Certificate serial:       F9500A
Authority key identifier: 8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/7ebCodnfzddho6-WOXYy-kNOwOg.roa
Signing time:             Mon 07 Mar 2022 17:31:20 +0000
ROA not before:           Mon 07 Mar 2022 17:31:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        146.19.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16338954 (0xf9500a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
        Validity
            Not Before: Mar  7 17:31:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ede6c2a1d9dfcdd761a3af96397632fa434ec0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:7d:83:42:20:f1:5a:94:aa:d7:8d:2f:20:
                    02:eb:1e:4c:79:32:e3:00:8d:7d:56:32:a6:2a:7c:
                    e1:9a:16:6a:43:85:3a:7e:38:70:72:06:d9:f0:bf:
                    46:b8:80:59:ba:dc:d2:d9:e8:4a:e3:01:4f:7a:d9:
                    43:ea:50:84:a8:cd:a4:02:43:4f:0d:0f:e5:fc:2c:
                    b6:1b:b5:f3:13:cc:27:dc:a1:51:78:e2:2b:5f:b4:
                    93:b2:92:8c:6e:aa:77:ea:56:fc:3f:5f:ba:96:a8:
                    47:c6:f1:50:07:7d:84:c5:ab:b7:1b:d6:28:65:08:
                    c1:8b:64:f0:ab:3c:30:d4:03:6c:d7:77:55:ba:8f:
                    bc:9b:26:18:74:29:30:fe:3a:7c:08:bc:96:9e:bc:
                    53:15:f2:e5:a2:b0:9a:4e:e4:85:c0:d5:f3:26:a1:
                    61:69:17:a4:26:a8:05:21:81:26:b4:34:f0:23:cb:
                    14:0d:a2:27:4d:11:3b:e0:d5:f8:30:d7:f2:d5:d6:
                    69:48:45:17:7f:9c:de:d1:a4:2c:63:f4:d9:36:93:
                    5d:f4:ec:31:93:90:b0:b2:6c:f4:e0:d6:f0:7d:fb:
                    92:31:47:d8:b4:87:ce:ef:90:d8:43:ee:89:22:79:
                    1a:d9:96:c5:9c:e9:18:a0:5f:4c:60:2f:7c:c0:10:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:C2:A1:D9:DF:CD:D7:61:A3:AF:96:39:76:32:FA:43:4E:C0:E8
            X509v3 Authority Key Identifier:
                keyid:8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/7ebCodnfzddho6-WOXYy-kNOwOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:86:7e:94:b3:cb:3f:2d:29:87:10:1d:70:b3:2e:13:8b:
         9a:3e:dc:70:a7:07:5b:cd:bf:4c:9a:94:ba:a3:ce:51:74:67:
         12:94:44:1b:e9:df:84:6b:15:7c:84:73:da:ae:da:56:d6:ce:
         54:93:cf:c7:5e:ab:82:96:f3:0b:c1:e8:48:1f:a5:24:5e:5b:
         5a:fe:c4:48:2f:a6:2e:53:19:1c:3e:a0:c0:5a:35:d7:10:c5:
         f5:05:b9:6a:95:2c:34:06:fa:e0:a6:53:5f:de:2c:96:7f:7c:
         c2:9b:2d:d9:3b:24:66:6c:92:6a:fa:a4:0e:9e:1f:b6:c4:e3:
         72:ae:9b:2a:8d:23:01:2f:be:d7:25:60:db:e5:0a:0a:9e:48:
         f4:26:30:6f:d3:66:37:59:e2:9b:77:a6:e9:14:ed:b0:b0:eb:
         a6:38:be:eb:a9:0f:b9:b2:a2:f0:6c:e0:a9:bb:de:07:0b:d0:
         07:4e:93:72:a3:6d:9b:c1:82:29:aa:8b:77:9a:d9:d7:73:79:
         da:d3:e9:87:2c:7a:04:0f:74:54:7e:6f:ea:4b:18:99:d2:03:
         de:82:2d:cb:b3:a8:53:af:64:d7:74:1c:fc:3c:e0:b9:1d:14:
         2c:c1:68:5d:a2:33:2d:cd:f0:43:a3:13:f1:52:6c:4a:34:64:
         5c:63:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:55 2023 by rpki-client on console-fra.rpki-client.org