Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fuxpaoETxCfOAJMyvcnPqBytBGk.roa
File:                     fuxpaoETxCfOAJMyvcnPqBytBGk.roa (raw, json)
Hash identifier:          dXHRSdI3ruvPagipwQSF41FMVPJGbBGwp7ZZYYU3Vis=
Subject key identifier:   7E:EC:69:6A:81:13:C4:27:CE:00:93:32:BD:C9:CF:A8:1C:AD:04:69
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       03535243
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fuxpaoETxCfOAJMyvcnPqBytBGk.roa
Signing time:             Thu 07 Apr 2022 08:19:16 +0000
ROA not before:           Thu 07 Apr 2022 08:19:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212200
IP address blocks:        83.137.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55792195 (0x3535243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Apr  7 08:19:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7eec696a8113c427ce009332bdc9cfa81cad0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:51:75:53:8b:31:5a:e9:07:40:27:6f:1c:
                    25:69:d9:1c:fd:9d:72:57:a8:30:16:79:b5:3f:5a:
                    15:bc:b0:5a:1e:c3:fd:8c:2e:90:c3:d0:4f:63:36:
                    90:1e:6a:33:8a:74:f7:98:ed:05:c2:7f:b1:99:23:
                    f7:4e:2c:9f:be:f2:17:c0:50:77:b9:8a:89:86:fb:
                    d1:1f:78:71:08:41:e9:95:92:c1:7c:47:e3:a6:24:
                    8f:56:aa:46:2e:64:c0:a7:87:ab:4a:09:cb:a6:06:
                    85:90:8e:7f:74:2e:dd:fa:eb:54:a1:ef:27:71:2a:
                    f4:6c:4b:fe:d4:ac:49:2d:c1:dd:07:be:df:c3:c2:
                    83:67:84:f2:44:f2:89:50:00:29:bd:aa:dd:46:b7:
                    bf:47:f7:84:ae:f7:69:fb:63:12:aa:2c:5f:ff:36:
                    6e:ed:10:8e:23:6f:a3:85:3a:1a:9f:be:b9:27:db:
                    bd:08:2c:d5:2d:98:cc:24:46:ab:7a:1d:c7:69:fa:
                    c3:0a:f0:18:72:14:8b:c0:64:78:8f:4b:28:e2:70:
                    78:3e:ed:1b:78:a2:01:f7:6e:e0:53:e5:18:e6:1d:
                    c8:b5:d0:17:c7:28:54:05:72:5d:9d:ae:ff:42:84:
                    10:7a:47:12:de:65:8c:2b:b0:d2:a7:ce:8d:ac:fd:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:69:6A:81:13:C4:27:CE:00:93:32:BD:C9:CF:A8:1C:AD:04:69
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fuxpaoETxCfOAJMyvcnPqBytBGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:80:40:a7:85:42:6f:71:22:28:89:78:c3:90:98:96:0b:78:
         61:6a:5c:d8:89:7e:96:a3:a8:ef:97:7a:d3:c8:82:c7:9a:aa:
         1a:78:2b:54:4e:a1:e0:8a:bb:22:87:43:e8:06:6c:f2:ea:ef:
         bd:81:70:65:68:0b:68:b7:bc:72:38:6a:da:1e:f4:c1:58:67:
         2e:ef:49:d0:f2:b8:b5:15:c6:36:2d:b5:6d:03:7d:99:77:b7:
         70:44:d6:67:8b:45:b9:38:85:42:91:d4:4f:03:c7:f9:5b:8d:
         b9:1b:b5:50:dc:61:6c:9e:65:3b:20:73:7e:1c:eb:91:71:94:
         04:61:eb:6a:c0:c7:16:dc:1d:85:c5:d1:a4:23:8a:25:7b:73:
         85:8a:16:b0:2b:17:e2:82:94:5a:a0:f3:b8:a3:ce:0f:3c:4f:
         f2:18:6f:98:b2:fc:58:cc:12:76:97:84:b7:38:eb:7a:96:26:
         a5:21:9b:c2:25:30:c8:97:4f:ed:7c:4d:56:3b:5b:f3:1e:19:
         9b:20:c0:ab:04:b7:3f:51:84:9b:05:a3:7a:ca:6b:6a:3b:81:
         74:14:ee:a6:32:24:16:be:58:67:66:c8:80:a6:4b:ce:f2:62:
         28:b3:3c:56:32:8c:2f:9b:07:de:87:6e:e1:65:be:cd:05:89:
         01:36:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org