Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/EolWZHR1BIl7n7A4y0nPHidJy00.roa
File:                     EolWZHR1BIl7n7A4y0nPHidJy00.roa (raw, json)
Hash identifier:          dyi6wwoF4FeQwKkwuHtwMyPdsQdGVyF0yLA+Q8kATOc=
Subject key identifier:   12:89:56:64:74:75:04:89:7B:9F:B0:38:CB:49:CF:1E:27:49:CB:4D
Certificate issuer:       /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial:       01845C9EA6A3621A1DA5A88C4AD4A15A8E36
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/EolWZHR1BIl7n7A4y0nPHidJy00.roa
Signing time:             Wed 09 Nov 2022 13:40:12 +0000
ROA not before:           Wed 09 Nov 2022 13:40:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203150
IP address blocks:        185.73.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5c:9e:a6:a3:62:1a:1d:a5:a8:8c:4a:d4:a1:5a:8e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
        Validity
            Not Before: Nov  9 13:40:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12895664747504897b9fb038cb49cf1e2749cb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:8f:d8:9d:c5:58:a9:8e:dd:2c:e1:50:5d:
                    11:4f:84:59:0e:ba:3e:90:e7:ae:6c:bb:79:b7:aa:
                    6d:ad:e8:4e:e7:1f:88:49:f9:a5:1e:60:dd:ea:8e:
                    6e:62:cd:f5:be:aa:0d:4e:ee:39:4b:6f:b2:3c:93:
                    73:7e:b1:11:a1:ad:22:a6:2d:bd:41:8f:32:c8:b9:
                    79:09:38:ba:56:c7:e2:6c:ed:e0:7f:2a:e5:a6:43:
                    be:09:f6:ad:0a:dc:93:09:0b:10:b6:ca:0b:d3:8e:
                    37:3a:68:dd:ef:a1:77:47:19:d0:80:81:b2:40:d9:
                    e4:65:12:6b:42:60:e6:9e:00:c2:2f:49:25:40:d6:
                    b5:7f:48:c7:4a:8d:4d:90:5b:d6:ff:b7:48:e7:2d:
                    e1:cd:ec:c4:8c:08:7d:f1:f5:56:30:e9:4f:66:e5:
                    91:cb:95:4a:aa:20:fb:b0:62:8f:ea:33:48:6e:77:
                    7b:01:8f:7b:47:e9:23:78:68:f7:5c:b0:8c:63:7f:
                    0a:90:cf:68:d5:df:bf:91:3f:a8:39:76:32:81:c0:
                    ee:22:ab:7d:fe:ce:63:95:da:d1:1d:bd:b7:fb:5c:
                    cf:ec:6b:3b:90:ec:e4:0a:86:f0:32:c5:81:99:f6:
                    7d:b8:1d:ec:84:8c:5c:1e:96:b1:6f:80:98:a8:7a:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:89:56:64:74:75:04:89:7B:9F:B0:38:CB:49:CF:1E:27:49:CB:4D
            X509v3 Authority Key Identifier:
                keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/EolWZHR1BIl7n7A4y0nPHidJy00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a9:39:c0:61:66:2a:c4:d1:c6:9b:a4:0d:5e:d7:f7:3f:91:
         61:c4:86:6c:f3:41:f2:14:76:d4:e8:c2:14:96:78:30:e0:90:
         70:1d:c3:c9:c8:75:9c:da:da:10:ad:f8:af:e4:bb:52:58:2a:
         16:1c:cc:03:36:ad:11:af:f2:36:d9:74:60:bc:7b:fc:af:98:
         7c:22:2f:90:e5:6f:b6:bc:9f:e6:03:f2:ff:f8:f0:2d:e1:91:
         20:b0:36:79:0d:6a:49:47:d0:d8:6d:35:2f:f6:86:f2:d9:7d:
         9c:45:86:36:af:c9:31:44:5f:92:7a:ec:32:e5:f6:b7:bf:82:
         2a:f3:65:96:76:68:bc:2f:62:47:e0:d0:31:9a:20:69:8b:93:
         e7:70:99:4b:d2:c1:0a:e7:77:44:70:7d:19:78:ce:2e:bb:d2:
         47:a1:f3:f8:8e:9c:06:de:dc:7f:ed:df:4a:d9:c0:f2:f4:4f:
         80:28:9f:63:17:6a:b1:b7:1f:25:77:cd:40:81:3c:71:31:e2:
         dd:2e:d7:a0:70:b6:22:49:27:ef:f7:23:6c:e8:74:76:bc:30:
         dc:97:0c:ac:9b:26:cf:f7:04:c9:20:21:b3:8e:66:8b:3f:c1:
         e1:6c:e4:07:15:ba:69:9d:ac:2a:cf:20:4f:8d:1d:80:74:ec:
         d9:07:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net