Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/LBcmKQ-2alcUzaEICtIZ6_iIPrE.roa
File:                     LBcmKQ-2alcUzaEICtIZ6_iIPrE.roa (raw, json)
Hash identifier:          Mcf91/pnTTMpKFTxnHzHwONfKoH8pEf3B3zlct21/rA=
Subject key identifier:   2C:17:26:29:0F:B6:6A:57:14:CD:A1:08:0A:D2:19:EB:F8:88:3E:B1
Certificate issuer:       /CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Certificate serial:       042EAAAF
Authority key identifier: 21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/LBcmKQ-2alcUzaEICtIZ6_iIPrE.roa
Signing time:             Sat 01 Jan 2022 14:57:23 +0000
ROA not before:           Sat 01 Jan 2022 14:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49466
IP address blocks:        93.93.244.0/22 maxlen: 22
                          93.93.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70167215 (0x42eaaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
        Validity
            Not Before: Jan  1 14:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c1726290fb66a5714cda1080ad219ebf8883eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:f8:34:fa:f2:6f:2e:d4:e0:f5:04:67:b7:
                    f7:da:e9:ce:c7:21:25:b1:c5:0d:c1:5e:3f:0a:36:
                    b1:9a:fd:4f:ff:bb:1a:f0:ea:b6:60:0d:1f:b6:90:
                    79:cc:62:69:e1:96:55:45:d7:0d:c1:9a:74:3b:dd:
                    f3:b9:f0:ac:8f:5d:14:75:a3:a4:8f:9b:47:73:27:
                    ad:8c:42:6d:4c:aa:dc:4d:74:8c:49:d6:e0:88:e9:
                    a9:f4:6a:0b:f5:13:a5:e5:da:26:0e:81:0b:eb:62:
                    a7:db:bf:4b:4f:32:ee:be:5a:96:c0:45:6d:72:1a:
                    9f:14:ae:12:8d:20:b2:5b:2b:0d:12:6c:7e:3f:55:
                    b1:42:15:25:29:31:7f:11:4c:ff:aa:0e:87:58:e1:
                    51:c1:28:3b:bf:17:cb:79:e7:a8:c4:49:69:22:23:
                    5f:cb:f7:1b:7c:9a:cc:7a:d2:3f:3f:0e:ff:e9:fc:
                    49:39:29:4a:59:af:1d:3e:29:62:ef:c4:ad:0b:c2:
                    ad:f2:ba:8f:ac:9b:f4:54:8b:75:4a:e4:bb:91:67:
                    f7:32:d8:02:96:2b:bf:08:59:ac:16:18:c0:8e:1d:
                    a0:95:26:fb:bd:fc:41:97:10:75:82:07:22:c6:54:
                    eb:8c:9d:11:b2:53:f9:c9:11:5a:36:0e:64:fd:bc:
                    9a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:26:29:0F:B6:6A:57:14:CD:A1:08:0A:D2:19:EB:F8:88:3E:B1
            X509v3 Authority Key Identifier:
                keyid:21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/LBcmKQ-2alcUzaEICtIZ6_iIPrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:30:17:8e:36:be:16:21:d6:ae:2f:8b:0f:74:65:fb:66:d2:
         eb:e7:c7:4c:69:49:fc:42:92:40:39:9b:a2:62:15:2f:23:22:
         7e:49:a3:5e:48:cc:78:9d:c4:d7:60:8c:eb:c2:a6:dc:b5:69:
         c4:80:6c:12:b2:58:08:7e:99:ed:e4:b6:a4:de:1c:3a:d3:d3:
         f9:72:30:51:ba:3d:f6:44:73:6c:f0:0a:ef:90:bd:5c:26:44:
         18:11:c2:99:25:07:36:5d:8c:a2:1d:37:e1:82:3f:05:b8:e5:
         c0:89:91:f2:19:9f:f6:55:cc:ea:8d:bc:e8:1c:5b:ec:80:92:
         42:4c:09:44:46:72:91:c3:85:74:13:0e:9a:de:33:1b:d2:fb:
         13:85:b3:b5:59:6e:68:a7:bf:37:d0:a1:0e:b9:17:0a:db:f6:
         ec:5f:a9:8d:b3:c0:8b:6c:fa:ae:52:fb:3c:2c:33:68:b8:06:
         b1:67:08:61:14:97:3f:47:8e:e3:48:b6:e2:07:68:21:7b:bb:
         8a:e6:e1:ab:17:64:10:51:a1:e4:e5:8e:bb:77:66:e3:7e:6b:
         94:76:3f:b7:d0:f8:42:ce:79:84:39:4e:17:1d:84:44:51:68:
         d2:62:47:17:15:11:ad:a8:5a:ef:67:04:cd:cf:32:c7:17:16:
         1b:46:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:14 2023 by rpki-client on console-fra.rpki-client.org