Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Jjbc9_kEOiYADB4j351hNTD2ETM.roa
File:                     Jjbc9_kEOiYADB4j351hNTD2ETM.roa (raw, json)
Hash identifier:          xv9/eEdxTYlOodBZGMHFYJxAuBVTzBcztXLyzfYrAoM=
Subject key identifier:   26:36:DC:F7:F9:04:3A:26:00:0C:1E:23:DF:9D:61:35:30:F6:11:33
Certificate issuer:       /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial:       02A66004
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Jjbc9_kEOiYADB4j351hNTD2ETM.roa
Signing time:             Fri 07 Jan 2022 08:31:49 +0000
ROA not before:           Fri 07 Jan 2022 08:31:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        213.159.10.0/23 maxlen: 24
                          194.58.64.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44457988 (0x2a66004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
        Validity
            Not Before: Jan  7 08:31:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2636dcf7f9043a26000c1e23df9d613530f61133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:b5:af:71:fe:3d:82:b9:67:66:d6:8c:44:
                    6c:6a:67:a0:8e:d7:d4:04:04:10:37:ce:e2:89:0c:
                    ea:4a:2e:ad:8a:d2:6d:a8:e5:a2:c6:3d:44:8f:d7:
                    b7:8e:1e:9b:41:a4:91:01:4a:d5:69:8d:2a:6c:e2:
                    b1:04:25:7c:22:fc:a5:56:1d:30:a2:d2:c0:7a:5c:
                    c4:1d:ba:42:f4:c7:c4:7b:e9:c8:cf:44:8a:3f:93:
                    5c:1d:4a:1e:36:48:53:b5:85:54:a5:c5:63:10:db:
                    4a:8c:18:eb:6f:3b:b9:6b:a4:f4:50:74:aa:08:c8:
                    bc:e6:7b:d8:b0:71:79:30:af:dc:0a:fa:b9:54:46:
                    81:b7:05:cf:bb:3b:fa:76:06:1a:65:60:96:e1:f3:
                    0b:8d:57:6f:6d:ae:ef:75:e4:9e:28:98:9d:0b:cc:
                    b2:2f:31:30:80:5a:d9:be:44:ea:e8:e1:8e:ac:c1:
                    e3:73:bc:49:b0:5e:5a:d1:41:a9:fc:c4:75:da:e7:
                    2f:94:e8:f5:69:ab:6b:cb:8e:84:0b:e9:91:1b:b8:
                    bd:36:01:80:50:e7:1a:c6:bc:cf:da:fd:ea:4f:a4:
                    d2:63:d3:9b:4f:60:eb:71:b9:89:6d:bc:99:40:0d:
                    43:2a:1e:0f:d7:f4:c5:12:03:21:03:5f:65:c6:e7:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:36:DC:F7:F9:04:3A:26:00:0C:1E:23:DF:9D:61:35:30:F6:11:33
            X509v3 Authority Key Identifier:
                keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Jjbc9_kEOiYADB4j351hNTD2ETM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.58.64.0/23
                  213.159.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:30:b5:55:7a:57:db:3d:55:67:a8:d8:2c:0b:01:aa:3e:bf:
         d4:e2:1a:df:6f:d1:29:eb:02:f0:ba:d8:32:57:f7:3b:ca:1c:
         19:4d:3e:07:86:e8:29:1f:96:16:34:db:42:fa:3d:24:bb:85:
         2d:fa:5f:4b:aa:ae:b2:61:fe:87:16:af:63:7b:08:f2:d6:18:
         e3:d2:70:f6:33:ed:45:49:ab:44:c7:db:85:19:bb:e8:e6:1f:
         e1:1c:0a:95:91:47:d7:26:9a:b1:47:49:60:34:cf:f3:c7:f8:
         2d:3b:88:a4:2e:90:80:39:0d:eb:23:f7:e1:90:bc:42:a8:a6:
         33:a5:69:87:55:a9:0c:c8:6b:b8:f6:7b:99:ac:25:a1:1b:95:
         66:73:4a:df:14:86:d7:80:ae:9e:27:e3:c5:f1:4d:9b:1d:54:
         ed:8f:61:19:81:f2:09:eb:94:8e:54:9a:7a:e1:c9:dd:c5:2b:
         92:0b:a5:c4:56:9f:4f:c3:77:5e:bc:6b:d5:2c:ee:a2:a5:aa:
         4d:bc:9d:bc:b1:6d:66:c6:fc:ce:ce:b0:4a:a9:84:81:16:f6:
         73:38:36:fc:29:bd:95:b4:3e:19:45:79:66:b8:ae:36:28:24:
         b1:f9:cb:f5:64:1c:0a:48:22:0a:7e:33:79:e0:da:ef:c7:ea:
         61:86:43:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org