Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/_eppxghBSFDDfc0WnZochI8A4Wo.roa
File:                     _eppxghBSFDDfc0WnZochI8A4Wo.roa (raw, json)
Hash identifier:          sPpNohOCPv4ZycAGmNQMI/vnQJuE8RdHxRfjr9OLkrU=
Subject key identifier:   FD:EA:69:C6:08:41:48:50:C3:7D:CD:16:9D:9A:1C:84:8F:00:E1:6A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       314B050B
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/_eppxghBSFDDfc0WnZochI8A4Wo.roa
Signing time:             Sat 21 May 2022 07:21:29 +0000
ROA not before:           Sat 21 May 2022 07:21:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211936
IP address blocks:        109.160.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827000075 (0x314b050b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: May 21 07:21:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdea69c608414850c37dcd169d9a1c848f00e16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:73:83:df:f6:ab:02:f8:92:10:f8:06:5d:
                    30:39:60:ac:d1:42:6c:9e:77:39:99:16:02:9c:e9:
                    ff:2a:ea:f2:45:30:70:5e:56:14:93:b8:6c:61:da:
                    cf:70:dc:79:cc:78:49:9f:7a:a2:fd:31:06:18:14:
                    d9:09:dd:2c:ad:a1:c1:15:92:ca:95:c2:34:e0:45:
                    4a:70:d8:77:7f:7f:6f:53:b2:73:35:99:0f:77:5c:
                    45:5c:24:47:dd:73:e6:9f:dc:02:1c:78:8a:2a:80:
                    ed:b4:06:fb:d9:5a:82:ce:90:b0:ce:71:6f:95:b4:
                    5f:84:bf:b4:83:6f:16:24:5c:36:6a:cc:90:98:cd:
                    ca:b4:fe:60:b4:d0:01:1c:91:4e:72:f3:b7:ca:bb:
                    6f:67:45:2d:f3:9c:76:54:22:26:2c:cb:9f:bc:8d:
                    5f:7d:ea:c7:a2:0a:0c:26:40:ee:cd:ea:1a:c2:2a:
                    85:1f:0f:c7:01:1b:db:79:ae:77:80:f8:ec:24:e3:
                    d0:67:30:3c:9f:46:06:ac:02:3f:e2:8d:00:bd:a9:
                    61:ed:f4:82:76:71:d1:2b:81:b1:50:25:fb:dc:31:
                    71:a4:17:cd:4c:aa:f6:1f:8e:f8:b7:4e:c5:ba:16:
                    09:1f:1f:ce:2e:d3:c7:84:2e:7c:53:bd:2d:ca:00:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EA:69:C6:08:41:48:50:C3:7D:CD:16:9D:9A:1C:84:8F:00:E1:6A
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/_eppxghBSFDDfc0WnZochI8A4Wo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.160.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:94:57:98:e9:f3:36:d8:90:78:d3:e8:17:df:22:8c:0e:
         cf:f3:c3:b6:69:06:ae:c2:85:ab:b5:a5:11:58:d0:14:65:13:
         4b:cd:c0:0e:f2:d7:97:02:d9:4b:d3:38:61:fe:db:91:76:09:
         dd:41:2f:20:45:92:ab:f6:cd:1e:d3:26:25:f1:67:9d:aa:f9:
         73:46:ab:7c:a7:f9:82:f3:81:24:be:cb:4a:77:8a:58:29:9b:
         ea:2c:3a:f6:60:45:51:7a:f1:3a:2b:46:be:e3:e1:89:44:e7:
         0a:7a:61:2f:6f:ec:c9:aa:f5:4e:ff:eb:90:fc:53:f1:29:5d:
         3a:b5:fa:e8:ea:a4:bd:fb:05:81:d0:da:5e:15:8e:e8:33:0e:
         1e:8f:8e:92:71:32:47:a8:f6:5c:9d:89:68:b3:7f:c0:38:59:
         aa:8b:bb:80:77:72:65:bf:7e:28:12:00:43:b9:a6:66:4f:b8:
         b5:7a:f4:1d:89:fb:4a:53:52:a7:5a:24:54:b1:41:63:d3:48:
         67:97:6c:af:d5:38:c4:77:25:12:77:17:e4:0f:6a:47:e4:e2:
         05:33:cf:1e:4b:1a:ff:7d:ab:a4:91:52:5c:4b:de:c0:8e:7b:
         62:14:95:a1:82:6c:f6:29:16:d0:20:20:ef:42:34:d6:5e:40:
         9e:80:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org