Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/UYLgTNy-fu_hFOGT34_nmpXUIig.roa
File:                     UYLgTNy-fu_hFOGT34_nmpXUIig.roa (raw, json)
Hash identifier:          AzqcuCphhoMYiMo9rgeC/OZtxKwSq7OY+vzOT0UfFUI=
Subject key identifier:   51:82:E0:4C:DC:BE:7E:EF:E1:14:E1:93:DF:8F:E7:9A:95:D4:22:28
Certificate issuer:       /CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Certificate serial:       0184C406A6E0987DBEB9CD1522B21B8F43C8
Authority key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/UYLgTNy-fu_hFOGT34_nmpXUIig.roa
Signing time:             Tue 29 Nov 2022 15:34:40 +0000
ROA not before:           Tue 29 Nov 2022 15:34:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        188.93.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c4:06:a6:e0:98:7d:be:b9:cd:15:22:b2:1b:8f:43:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
        Validity
            Not Before: Nov 29 15:34:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5182e04cdcbe7eefe114e193df8fe79a95d42228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:dc:35:58:1c:16:1c:82:66:3f:33:98:ec:
                    3c:94:78:08:b4:68:94:c7:4c:01:95:ab:6e:8c:0c:
                    1e:ea:c8:66:4f:25:4c:c4:e7:95:4f:ab:61:d9:e3:
                    5a:84:48:6c:95:13:bf:18:98:52:8f:23:3d:89:c5:
                    30:97:f4:ce:a1:1e:99:4b:2a:2b:b8:17:dc:ba:aa:
                    0d:4c:4e:aa:71:9f:16:80:42:86:a5:f0:f5:ca:74:
                    5b:3d:91:84:d5:e3:a9:b4:5e:5b:9e:0f:f4:71:8b:
                    28:06:ac:b6:ff:a4:1a:b0:f8:37:c8:1f:8f:91:ad:
                    72:02:fa:68:3c:27:20:d0:8a:42:cb:10:c9:76:4b:
                    db:81:55:6e:4b:d6:63:55:e7:f7:f3:ee:66:86:c4:
                    6f:00:9b:eb:6a:72:ce:e0:d0:77:ec:ba:9a:36:05:
                    80:0f:0c:b0:99:8c:10:b3:6b:0c:61:02:59:74:09:
                    1e:e2:26:b9:a0:57:89:52:80:ba:48:bc:19:1e:a9:
                    20:82:e3:18:31:5f:63:b4:ed:f9:a2:83:d1:65:3a:
                    4b:7d:37:5c:7d:c6:81:0f:76:e0:b6:7f:77:90:8c:
                    fa:15:5e:82:2c:d6:31:11:c7:84:8a:9f:dc:c7:9d:
                    05:4d:60:c6:c4:e8:33:77:d7:cb:db:3b:34:ba:f6:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:E0:4C:DC:BE:7E:EF:E1:14:E1:93:DF:8F:E7:9A:95:D4:22:28
            X509v3 Authority Key Identifier:
                keyid:16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/UYLgTNy-fu_hFOGT34_nmpXUIig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:b0:b3:9f:d0:83:ae:9c:db:d6:bf:08:74:c3:ce:ad:ab:
         5b:4d:2e:64:c9:c4:ab:c7:b2:46:19:65:d3:67:3b:de:39:c1:
         d1:f9:25:8d:59:2c:55:0e:8c:1f:3b:87:d5:92:ec:63:e3:17:
         95:2d:80:89:67:8b:79:46:c8:a3:da:23:0b:60:e5:7e:08:fa:
         4c:ba:20:b4:fb:d2:fc:d9:6e:d1:22:9d:76:41:05:a6:aa:74:
         65:bf:27:a0:18:4a:87:1e:00:e5:f9:dc:04:4c:71:41:6c:c8:
         f7:c0:8a:28:fb:60:9b:12:99:4f:a1:61:68:23:3b:1b:a2:01:
         85:b0:82:1d:87:be:4a:5f:4e:54:5f:a4:45:c3:bb:9b:53:82:
         4b:7e:64:41:4c:1b:d7:44:a5:66:ce:c8:52:12:1c:49:c2:00:
         e4:e7:7f:30:30:54:e5:9a:3e:d7:db:aa:f3:35:da:21:67:fc:
         4b:42:28:e0:bf:60:80:53:2e:2b:8f:b4:a0:d1:06:b1:0b:1e:
         27:82:e3:ac:86:bd:4c:b2:ef:c1:29:ce:f2:e7:d6:86:f5:3e:
         67:27:00:98:9a:6d:28:8a:47:ff:c5:95:c4:97:c6:7d:39:77:
         e3:bd:6f:c4:01:56:67:61:d4:94:e3:ea:44:bf:4e:43:d3:1c:
         cb:ce:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org