Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/AUX_uuO-EjNmfjB6jwRfsA3Oyi4.roa
File:                     AUX_uuO-EjNmfjB6jwRfsA3Oyi4.roa (raw, json)
Hash identifier:          3c1CCiCtFIVbOQhJhSLvhvOJXs/WYNPPZmxcsNRAGlc=
Subject key identifier:   01:45:FF:BA:E3:BE:12:33:66:7E:30:7A:8F:04:5F:B0:0D:CE:CA:2E
Certificate issuer:       /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial:       06FD59BF
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/AUX_uuO-EjNmfjB6jwRfsA3Oyi4.roa
Signing time:             Sat 01 Jan 2022 15:03:20 +0000
ROA not before:           Sat 01 Jan 2022 15:03:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8244
IP address blocks:        195.230.192.0/22 maxlen: 22
                          195.230.200.0/21 maxlen: 21
                          2a01:ac40:2000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117266879 (0x6fd59bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
        Validity
            Not Before: Jan  1 15:03:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0145ffbae3be1233667e307a8f045fb00dceca2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:54:6d:84:53:61:d0:e5:17:fc:d4:bc:a2:
                    3d:8f:fe:74:35:12:ee:9c:d1:94:e0:40:ac:b3:69:
                    38:56:7f:38:4f:a5:bf:bb:b0:b0:1c:d7:d9:ac:41:
                    fa:a5:54:55:2a:97:80:25:1e:68:80:e8:7a:5c:cd:
                    43:ff:3c:d2:45:1b:4a:a4:63:a0:74:b8:cb:5d:dc:
                    3d:65:97:d1:9c:0f:ab:4d:77:06:59:d0:e0:82:cd:
                    74:d7:88:c3:e1:18:fe:ff:ec:40:44:5f:af:35:fc:
                    37:55:df:df:26:f9:66:01:20:1c:8d:e1:6e:9a:bc:
                    53:5e:a5:41:69:26:fe:3b:46:3b:3f:8f:74:54:10:
                    7e:11:18:20:f6:11:69:aa:62:bd:d9:c1:31:c1:6d:
                    f4:35:c9:e7:ae:05:f5:d3:14:b0:f8:e4:71:b5:ed:
                    98:1f:80:72:87:3b:04:4f:25:74:91:e6:bf:c4:83:
                    ab:08:a7:dc:9b:41:3e:11:b0:a9:d8:4a:dd:95:39:
                    dc:5b:62:02:3a:76:9d:18:13:a2:3e:46:a4:65:3d:
                    7a:74:60:33:99:04:3b:a6:8c:f5:38:a3:82:59:b3:
                    71:58:fe:b9:1f:ef:62:39:85:a2:74:fb:78:da:14:
                    73:9c:4d:f4:b3:36:e6:fd:60:2e:47:bb:65:06:40:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:45:FF:BA:E3:BE:12:33:66:7E:30:7A:8F:04:5F:B0:0D:CE:CA:2E
            X509v3 Authority Key Identifier:
                keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/AUX_uuO-EjNmfjB6jwRfsA3Oyi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.230.192.0/22
                  195.230.200.0/21
                IPv6:
                  2a01:ac40:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:6b:ba:f7:17:d9:10:e6:e1:d5:24:26:f3:b5:b4:0e:47:be:
         c0:33:66:70:3c:dd:a5:8e:7a:af:34:7f:d7:77:13:06:ef:11:
         2f:90:6f:68:9b:e3:fe:28:5d:59:0c:ad:d3:00:87:e0:d4:fe:
         01:8d:51:07:86:ea:f5:06:a6:96:ec:35:55:85:da:c8:29:20:
         48:d0:03:6c:08:27:e5:d0:0e:d9:52:20:ca:17:f0:14:bd:14:
         27:7a:3d:2e:7d:7d:1f:fc:98:f1:84:ca:7f:0e:17:77:c4:f9:
         52:a3:1d:3a:a8:c0:0c:b0:fe:9f:cb:81:a4:02:1e:d4:4e:a9:
         6d:92:be:ab:b7:31:70:ef:e4:85:ee:53:c3:95:76:47:d6:4a:
         da:27:11:bd:99:b6:7f:40:a6:c6:36:79:c7:13:f0:a4:61:7c:
         7f:76:56:08:e0:46:ff:ab:9a:1b:c9:a3:f8:5a:9f:bb:a7:90:
         00:5f:d4:e5:a2:5f:77:c8:b4:fd:33:98:0c:bf:f6:13:e8:58:
         b5:77:30:1d:84:2f:e3:73:b7:6a:47:2d:17:f5:b1:5d:84:cd:
         81:aa:70:e0:cb:ac:39:fb:c8:0d:fe:03:2a:10:5a:df:c7:6a:
         62:dc:c9:33:6a:82:4d:67:00:17:ab:74:8b:41:53:2e:7f:21:
         0c:06:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-fra.rpki-client.org