Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ek0Ddy_wCVxvMKqD2xJhthWR6BM.roa
File:                     Ek0Ddy_wCVxvMKqD2xJhthWR6BM.roa (raw, json)
Hash identifier:          f5N1ftKn4aXYfNToC6fjDl6Ymn15ywtzZCd4jROYjYA=
Subject key identifier:   12:4D:03:77:2F:F0:09:5C:6F:30:AA:83:DB:12:61:B6:15:91:E8:13
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       036DAAD5
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ek0Ddy_wCVxvMKqD2xJhthWR6BM.roa
Signing time:             Fri 21 Jan 2022 07:20:44 +0000
ROA not before:           Fri 21 Jan 2022 07:20:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        185.92.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57518805 (0x36daad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan 21 07:20:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=124d03772ff0095c6f30aa83db1261b61591e813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:d1:71:e7:ea:5c:0f:a5:be:69:8d:46:58:
                    39:9c:3f:b4:f7:42:37:b3:bd:77:47:16:31:d1:47:
                    da:7f:7f:a4:9b:68:2e:ec:ba:f6:a9:1d:c8:90:8c:
                    91:bc:e2:66:5e:fe:9e:2f:e1:6b:6c:c7:66:1f:d8:
                    03:fc:5f:1a:a4:76:65:27:04:fa:7e:c2:d5:3c:08:
                    37:a5:97:38:f7:6a:8f:ef:cc:13:bc:67:a6:17:05:
                    ee:87:91:dc:fd:06:d2:ca:98:c7:c6:d8:eb:fa:9a:
                    6a:af:21:9d:0e:30:e1:1c:bf:ab:24:32:cf:ee:8f:
                    27:72:67:04:3b:72:47:1d:82:f7:61:d6:fb:3e:ff:
                    cf:1e:cf:3d:8f:a3:b9:a3:e7:51:30:a7:2e:0d:cd:
                    03:e5:3c:52:75:8e:0c:e9:a9:f2:37:c1:fa:69:56:
                    26:9d:c3:65:29:bb:ad:bc:95:2b:d5:f9:19:c1:df:
                    73:f3:48:0a:ef:6b:0f:bf:65:85:7a:c4:46:4d:d8:
                    a0:f1:ac:a9:da:c3:4f:8b:33:c8:00:78:1f:5f:6b:
                    2b:4c:02:10:ff:43:6f:22:4c:8c:40:72:4e:de:ef:
                    1c:12:7b:e6:93:5e:4e:ca:16:89:30:71:9e:4e:eb:
                    93:08:fc:c9:b8:0b:33:dd:cc:28:1b:79:86:a5:e4:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:03:77:2F:F0:09:5C:6F:30:AA:83:DB:12:61:B6:15:91:E8:13
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ek0Ddy_wCVxvMKqD2xJhthWR6BM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:43:19:0f:99:0f:87:87:67:0b:5d:ac:3e:3d:b9:23:f8:8c:
         ff:31:b8:40:23:5c:90:3b:39:27:0b:9f:a3:58:b2:e6:76:48:
         ae:11:ce:7d:9f:ec:b4:43:f5:85:56:5d:53:f7:cf:45:45:a5:
         e3:d2:cb:2f:aa:e4:d0:e3:6b:3a:91:03:57:45:b0:61:c0:de:
         7e:c5:4a:35:69:52:92:80:e7:aa:20:30:d7:4a:0f:3c:5e:48:
         1d:a2:ca:73:c8:f8:3e:94:96:74:dd:35:e8:d6:5d:4b:49:c1:
         95:63:ea:e0:b2:ce:4e:d0:0a:4a:0b:d5:ea:5b:28:49:3c:24:
         79:a4:c7:85:8e:d1:e2:59:d3:8e:f0:20:4d:88:39:d5:01:45:
         8e:cb:47:9d:a4:98:32:4e:f6:ba:6c:a3:09:30:e6:a1:43:9d:
         85:e8:26:12:43:71:22:27:bf:37:70:33:bf:f9:8e:29:d6:48:
         5c:5b:63:4b:26:59:f5:bd:f8:ae:d7:73:62:56:d0:c2:01:ad:
         d8:f1:11:b9:5f:e2:c7:6e:f6:81:a6:26:96:0f:bd:11:30:0d:
         c2:14:7c:73:3b:b9:98:fe:4e:81:ea:3d:b7:84:63:93:ae:ee:
         77:53:c9:ff:c7:54:7b:ab:f8:5d:c1:9a:77:57:ad:df:ea:a5:
         dd:1d:0c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org