Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/JJwfTp8XXl5k4WrCQXwZT_-6ie8.roa
File:                     JJwfTp8XXl5k4WrCQXwZT_-6ie8.roa (raw, json)
Hash identifier:          /7sHGDV8HAF/KsX0OuS4w4e+/ZIoknPTrpmZQJgmA34=
Subject key identifier:   24:9C:1F:4E:9F:17:5E:5E:64:E1:6A:C2:41:7C:19:4F:FF:BA:89:EF
Certificate issuer:       /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial:       365AF0CE
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/JJwfTp8XXl5k4WrCQXwZT_-6ie8.roa
Signing time:             Mon 07 Feb 2022 11:06:19 +0000
ROA not before:           Mon 07 Feb 2022 11:06:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47887
IP address blocks:        188.123.160.0/19 maxlen: 24
                          82.212.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911929550 (0x365af0ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
        Validity
            Not Before: Feb  7 11:06:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=249c1f4e9f175e5e64e16ac2417c194fffba89ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:4b:4f:c4:42:a7:64:f6:d3:6d:c3:17:a1:
                    b4:f8:f8:65:fd:cd:30:81:2f:38:80:39:5a:a7:5e:
                    a3:c9:4e:23:48:7d:2d:44:a1:bd:1a:cb:ed:55:fd:
                    28:14:14:7c:a0:a3:e2:aa:b7:43:86:20:55:53:31:
                    ed:22:13:71:6b:78:76:84:e7:c7:53:90:69:e9:47:
                    03:1a:20:a6:e5:f1:3e:a2:ef:e2:8f:70:45:e0:aa:
                    4a:1b:3c:1d:3a:33:93:40:44:59:86:a2:73:1d:95:
                    24:9f:30:9d:43:dc:52:9c:78:fb:b2:f6:83:55:e0:
                    4c:4d:27:dd:64:c0:c7:ad:ee:91:97:e9:e5:dc:ba:
                    b7:c6:3a:83:1d:13:fc:29:83:7b:18:83:ec:3a:96:
                    14:43:88:b7:d7:81:11:fb:e3:51:8f:6a:53:0a:b2:
                    fd:5e:2d:ae:85:d6:da:39:86:32:25:64:7e:e3:88:
                    0b:df:3f:c8:ba:c3:40:98:b5:57:73:fb:a4:9f:37:
                    fd:13:01:14:3c:8a:75:e3:be:50:e9:09:c4:14:aa:
                    f6:bc:4a:68:90:1f:6c:81:96:48:99:1f:c9:d4:23:
                    07:a1:85:58:da:29:31:e8:8c:68:9b:58:f3:7d:75:
                    a4:52:ad:1e:42:67:78:a9:cb:9b:e0:0c:98:e5:ba:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:1F:4E:9F:17:5E:5E:64:E1:6A:C2:41:7C:19:4F:FF:BA:89:EF
            X509v3 Authority Key Identifier:
                keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/JJwfTp8XXl5k4WrCQXwZT_-6ie8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.212.64.0/18
                  188.123.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:ca:a3:05:fc:52:73:a2:53:f2:50:e0:11:ad:28:c9:a1:55:
         f3:b4:83:a1:15:aa:a6:b0:4a:b1:01:13:8e:9a:be:34:a2:df:
         92:71:34:c5:41:70:6e:6c:61:2e:e8:d9:61:46:3e:36:f5:29:
         bf:79:2f:11:9f:42:db:a5:6d:b9:f1:9c:48:7a:6d:29:9b:2e:
         ec:89:88:57:74:ca:d2:bf:5a:ec:0b:7a:d4:4f:ac:d8:ae:a7:
         24:77:4b:c8:bd:d3:e6:e3:5a:22:c8:92:9e:54:f9:eb:8e:c2:
         7b:f1:1c:d0:91:46:41:2a:95:69:f8:e8:66:82:13:d2:42:3a:
         13:cf:eb:5d:40:1f:ac:83:c9:eb:7b:16:58:c6:02:b7:9a:9b:
         3a:15:db:05:04:41:38:c0:90:33:f0:c0:9b:9a:98:e5:b1:6c:
         8f:c1:5b:92:bc:39:1a:bd:97:be:bd:bc:83:6b:82:c6:6c:6a:
         43:40:0d:1c:9f:94:ea:b1:d0:fd:9a:d1:8d:60:5b:73:a0:1f:
         c4:7f:56:06:f0:1c:76:3c:39:84:e9:47:d0:1c:98:9b:90:c0:
         9f:4a:9f:99:3d:f5:d6:ee:c2:41:fe:2b:e0:da:d7:12:e5:2b:
         00:c3:41:25:a9:ff:5d:96:a9:8f:c9:6e:cb:c2:8b:2b:e6:7e:
         b8:19:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:40 2023 by rpki-client on console-fra.rpki-client.org