Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/_RSZgPTrzFuwEgb_tOJ0UDsB6tI.roa
File:                     _RSZgPTrzFuwEgb_tOJ0UDsB6tI.roa (raw, json)
Hash identifier:          AEUo1Eog45UGeco1pE41bLlsCOy5e0Q91nTB2JnN1S8=
Subject key identifier:   FD:14:99:80:F4:EB:CC:5B:B0:12:06:FF:B4:E2:74:50:3B:01:EA:D2
Certificate issuer:       /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial:       09BC1C73
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/_RSZgPTrzFuwEgb_tOJ0UDsB6tI.roa
Signing time:             Sat 01 Jan 2022 09:04:31 +0000
ROA not before:           Sat 01 Jan 2022 09:04:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204712
IP address blocks:        185.83.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163322995 (0x9bc1c73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
        Validity
            Not Before: Jan  1 09:04:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd149980f4ebcc5bb01206ffb4e274503b01ead2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:a4:ad:5e:2e:e9:71:89:ca:1b:b5:1a:93:
                    10:88:13:46:a9:e9:c1:ba:e3:ae:50:23:f4:2c:b5:
                    58:12:cd:91:58:ab:1b:c1:72:ec:47:79:96:16:c9:
                    78:c3:dc:b5:3d:ba:6e:f2:0e:59:28:98:fa:d5:9a:
                    2f:c5:98:73:11:3a:e3:20:15:12:d4:98:f2:dd:f5:
                    e0:67:54:e9:99:87:1b:86:bc:48:77:99:ee:a9:1e:
                    b2:b9:c9:5e:38:86:91:7f:26:0a:27:e3:33:87:03:
                    a6:bf:da:31:fc:09:8e:17:f9:a8:26:19:f6:a7:e7:
                    32:5e:54:cc:dd:b4:eb:e8:a4:a3:e6:1d:63:7e:eb:
                    18:2c:89:25:43:6b:c1:d1:88:67:62:07:3a:ed:fd:
                    59:c7:9f:11:5f:25:0c:38:6f:41:fa:bb:7c:b8:8c:
                    3b:c2:68:31:1b:6c:da:6b:5c:1c:13:8b:c0:76:51:
                    a5:f0:48:98:72:aa:5c:3a:96:0c:cf:46:7d:0c:48:
                    cf:b8:be:06:c3:f5:49:f9:7f:05:2c:92:46:d5:5c:
                    90:f9:a4:88:fa:03:68:c5:e6:5d:86:c7:b0:4b:28:
                    2b:78:b1:d5:da:51:db:46:ad:9c:51:c4:0d:27:d9:
                    55:3c:92:3b:18:38:b1:65:36:20:48:b3:e5:f3:84:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:99:80:F4:EB:CC:5B:B0:12:06:FF:B4:E2:74:50:3B:01:EA:D2
            X509v3 Authority Key Identifier:
                keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/_RSZgPTrzFuwEgb_tOJ0UDsB6tI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:8a:7b:49:d9:b9:fa:27:7c:2e:ad:d4:1e:07:00:38:3c:
         b3:b2:2a:17:8a:80:2a:0b:de:46:46:2f:47:40:af:b7:01:c9:
         67:66:15:8c:55:a4:ae:6b:64:03:85:91:e6:84:86:72:71:bc:
         f0:95:5f:2e:06:d5:18:a0:20:f5:7e:93:a7:ba:8a:2c:55:a5:
         89:2b:29:d3:0c:88:cf:af:b9:2e:c9:ca:ba:77:ff:43:e3:76:
         c2:a8:50:75:c2:c1:ce:eb:31:42:d6:9f:d2:64:04:74:80:c0:
         57:f2:f9:a3:f2:48:8e:a6:ec:66:6f:76:36:d2:21:bb:79:ac:
         06:7a:a7:09:5e:f7:57:cf:c6:82:a0:ed:1c:5b:0d:07:60:06:
         54:8b:c6:e8:c4:27:bc:f0:e5:79:c4:08:0a:2a:93:26:26:31:
         ed:7d:48:a8:a2:2e:be:1d:c6:d2:e4:a3:62:2a:c6:ff:36:80:
         7f:dd:e1:98:d3:35:51:f1:7e:81:c1:be:1b:88:5f:76:68:50:
         51:38:db:4f:a2:16:81:99:fb:d0:bc:53:87:c4:f6:0b:58:7e:
         27:d3:c1:b2:4f:9e:e1:34:f1:08:a8:40:93:41:28:90:c8:ee:
         c1:5a:6f:3e:85:54:e1:ea:9a:7f:f4:d8:e1:5b:f1:96:36:2b:
         8e:56:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net