Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/7onZVVV0LxqdAaZQ9YiFyy9ShlM.roa
File:                     7onZVVV0LxqdAaZQ9YiFyy9ShlM.roa (raw, json)
Hash identifier:          0mPXG6O9L5kOHCe4w+zsAjO7Ecxo4PS0OMbo4tIF4x8=
Subject key identifier:   EE:89:D9:55:55:74:2F:1A:9D:01:A6:50:F5:88:85:CB:2F:52:86:53
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       0183BD3D68EF20007293235D70389D6FCF1A
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/7onZVVV0LxqdAaZQ9YiFyy9ShlM.roa
Signing time:             Sun 09 Oct 2022 14:54:21 +0000
ROA not before:           Sun 09 Oct 2022 14:54:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208476
IP address blocks:        185.231.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:bd:3d:68:ef:20:00:72:93:23:5d:70:38:9d:6f:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Oct  9 14:54:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee89d95555742f1a9d01a650f58885cb2f528653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:1b:14:72:a3:dd:56:1b:42:bb:7a:e8:26:
                    99:b0:02:89:c2:c4:05:2c:5f:a0:78:c3:41:d6:bd:
                    02:ee:ac:67:a4:05:6f:4a:7b:57:2f:e7:b7:dd:4b:
                    ba:2e:aa:12:25:4b:65:51:70:ff:53:a6:b4:f3:55:
                    4b:7a:d8:e3:6b:6a:d3:be:f1:5f:04:fe:f0:e5:c1:
                    0c:e9:c8:8c:97:a9:d2:95:55:04:1b:90:a1:54:bf:
                    1d:dd:bc:06:10:1b:ef:b5:ea:3b:78:56:8d:33:5a:
                    e4:3e:8f:8c:63:db:e6:b9:17:18:2a:ae:8d:d6:f8:
                    33:3b:e7:8d:73:dc:4b:a1:95:1b:de:29:5c:c8:39:
                    e8:71:57:fa:12:ac:f0:51:fa:49:1f:07:d0:a4:ad:
                    5c:5d:6b:1c:75:79:cd:97:3c:44:c7:35:10:3f:a1:
                    f6:6f:79:c0:d6:b9:1d:88:e4:f8:ed:47:d7:d7:41:
                    7b:a7:2d:2f:c3:eb:e8:05:fc:2f:b0:e7:45:b4:68:
                    5b:fb:f4:72:1f:7a:65:95:fb:18:7b:35:ae:38:68:
                    c1:e4:81:70:e3:23:26:ee:74:1e:07:f3:85:76:d9:
                    49:c7:94:54:bb:32:5d:d0:17:cc:2e:70:bc:bd:f3:
                    03:6b:ba:aa:15:11:f5:42:81:3f:f3:b3:2e:54:b4:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:D9:55:55:74:2F:1A:9D:01:A6:50:F5:88:85:CB:2F:52:86:53
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/7onZVVV0LxqdAaZQ9YiFyy9ShlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:26:c5:81:b6:b1:ce:27:68:e4:0d:22:6b:b5:ea:91:70:
         e4:5c:fa:29:e0:89:fe:63:79:76:d5:db:dc:c7:cb:99:9c:90:
         a9:fa:5a:33:36:00:03:00:45:cb:a3:7d:92:54:60:cc:03:88:
         34:c3:bf:49:66:32:88:e4:41:cc:ce:ac:5b:c8:4e:34:00:6e:
         fe:bc:e8:1a:23:9c:a8:82:5e:ed:11:fc:e6:f9:20:dc:7d:a8:
         99:b3:ec:4c:ba:11:67:ce:3e:57:b9:13:dc:09:28:2c:a6:77:
         68:42:93:60:06:db:6a:21:e4:e6:d1:57:87:14:39:e5:b0:4d:
         a1:d8:ac:66:45:d0:d8:ed:06:87:19:3b:27:57:14:2e:e9:ce:
         54:4a:9f:1c:d3:61:74:4f:af:aa:b3:63:3a:a6:9d:49:d7:8c:
         cf:0e:8a:e5:d4:e6:14:60:16:43:64:6c:d3:59:bf:ca:4a:b6:
         20:dd:ac:69:a6:13:7e:f4:04:58:03:25:58:9f:f9:37:3c:38:
         ef:c4:90:c0:6c:64:6c:51:56:58:09:0b:05:37:2c:1c:ec:20:
         eb:d3:69:80:e1:fd:8e:65:a1:47:74:86:cb:5d:15:25:b1:a0:
         22:0d:25:ba:94:0f:26:58:04:99:ca:02:72:8f:a5:67:1a:52:
         31:cc:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org