Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/C8_Jz17dQFOXx5C8rkmmezgMEpE.roa
File:                     C8_Jz17dQFOXx5C8rkmmezgMEpE.roa (raw, json)
Hash identifier:          vXHjGlVJMTXarCuJR036WAJlUpUHwUC3DA+YJrlNVxs=
Subject key identifier:   0B:CF:C9:CF:5E:DD:40:53:97:C7:90:BC:AE:49:A6:7B:38:0C:12:91
Certificate issuer:       /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial:       7649B0
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/C8_Jz17dQFOXx5C8rkmmezgMEpE.roa
Signing time:             Sat 01 Jan 2022 01:56:43 +0000
ROA not before:           Sat 01 Jan 2022 01:56:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63023
IP address blocks:        91.239.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7752112 (0x7649b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
        Validity
            Not Before: Jan  1 01:56:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0bcfc9cf5edd405397c790bcae49a67b380c1291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:3a:cb:4d:56:b5:b1:5e:5f:c0:8e:14:6c:
                    a6:d6:81:1d:91:6d:64:9b:82:16:3c:51:8f:5e:80:
                    c9:2b:37:e6:7d:b2:14:ea:40:e1:d6:57:1d:e8:8f:
                    9a:7e:fd:be:20:59:31:88:a4:16:1a:82:42:74:27:
                    4a:c2:1e:7f:58:cf:ee:cf:82:9b:aa:f9:af:37:02:
                    07:1a:48:8c:bf:68:83:67:94:9a:45:7f:eb:24:16:
                    78:7d:fd:9e:c2:64:01:a1:54:9e:1f:ef:21:9c:bd:
                    cf:03:84:3a:c6:82:f2:3f:1b:65:26:82:06:fd:90:
                    a8:19:a8:5d:a7:4a:87:9a:e6:fb:f9:b5:b4:32:51:
                    16:48:ac:ad:64:06:ac:df:60:83:77:44:53:f7:f1:
                    e5:80:a0:86:56:71:c8:d4:c1:dc:af:76:6c:6a:55:
                    96:4e:a6:c5:63:76:5a:ff:bb:ff:15:e8:77:fa:f1:
                    41:51:90:9c:6e:4f:6a:8f:78:ff:31:f8:6a:23:80:
                    0d:b1:50:6f:c4:e6:25:7f:9b:33:6f:d8:86:9d:30:
                    42:92:6f:69:17:fe:bf:4f:25:31:44:62:95:ec:13:
                    8a:86:88:9f:9f:a3:45:66:41:30:da:1c:a2:4a:a8:
                    04:d0:e9:90:ec:70:2e:8a:3e:7a:88:4a:65:30:ae:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CF:C9:CF:5E:DD:40:53:97:C7:90:BC:AE:49:A6:7B:38:0C:12:91
            X509v3 Authority Key Identifier:
                keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/C8_Jz17dQFOXx5C8rkmmezgMEpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:63:7e:b5:bd:e0:35:c1:c3:60:37:96:fe:d2:c6:a7:bb:a2:
         83:4e:7f:b1:f6:3d:0a:e3:50:0b:49:45:c4:7a:ca:4c:5e:31:
         f6:d7:b8:c7:b7:18:b0:1b:6e:3c:75:d9:ff:48:a4:ea:df:16:
         92:5c:e4:c1:f2:67:47:5d:fd:d1:a5:ff:9c:59:4c:38:ed:fc:
         16:d6:bc:84:c2:5f:51:d0:a3:74:74:b7:a3:57:e8:07:c2:00:
         f6:b6:5d:1d:ad:37:2d:ee:90:3c:b1:0f:9f:12:0f:7b:46:3b:
         19:e5:32:cb:61:c6:4c:e3:25:b4:84:ea:dc:85:5c:ac:35:38:
         b3:8d:3f:05:e3:ab:8d:d3:7b:3c:2c:a5:d8:a1:b0:f2:27:6b:
         27:7d:35:b8:55:c3:63:39:57:5f:ca:e7:97:a4:98:1f:71:39:
         7c:36:72:1d:45:a1:f8:c5:3d:f0:dd:bc:de:9c:0b:77:2f:c8:
         2e:52:7f:29:eb:3e:59:66:d0:fa:32:ff:16:cf:73:19:d0:47:
         38:8c:24:ac:be:cb:3a:7d:ed:81:55:94:2a:84:15:a7:f6:ee:
         f5:0c:77:84:6e:06:df:0a:68:d6:5d:a7:4c:4b:1e:1f:13:20:
         69:fe:c8:f7:03:70:7b:6f:15:ad:76:22:14:ad:37:51:ef:09:
         06:f9:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:52 2023 by rpki-client on console-ams.rpki-client.org