Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/GnMiQyct9LMg09YYB-vCdnHfdfU.roa
File:                     GnMiQyct9LMg09YYB-vCdnHfdfU.roa (raw, json)
Hash identifier:          AU7NXHaKnrWf4Nb3qd4bglT9qKom3FfGAiJsLtHUfXQ=
Subject key identifier:   1A:73:22:43:27:2D:F4:B3:20:D3:D6:18:07:EB:C2:76:71:DF:75:F5
Certificate issuer:       /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial:       151F8590
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/GnMiQyct9LMg09YYB-vCdnHfdfU.roa
Signing time:             Sat 01 Jan 2022 13:58:53 +0000
ROA not before:           Sat 01 Jan 2022 13:58:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199263
IP address blocks:        92.118.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354387344 (0x151f8590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Validity
            Not Before: Jan  1 13:58:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a732243272df4b320d3d61807ebc27671df75f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:6a:45:6d:eb:19:3a:c7:15:70:0b:eb:fd:
                    4d:48:26:46:bc:0c:10:95:fe:2c:4e:09:b0:2f:89:
                    ae:0f:42:c8:ee:56:06:c2:c2:d5:e5:e3:b6:55:54:
                    c5:6f:58:01:0f:e9:75:b5:f0:88:67:83:67:65:c5:
                    24:b1:38:4f:db:ef:36:ec:60:8d:c9:16:8f:35:13:
                    71:19:a0:99:f1:39:6f:7d:1c:0f:0f:cb:14:51:c9:
                    fa:35:8c:18:01:dd:c8:b1:f1:e6:8d:1e:a4:dd:c3:
                    c5:60:5f:55:b7:36:2f:b0:e3:4a:15:1d:d3:91:c8:
                    48:50:4e:b0:e1:db:de:38:f1:2b:9f:aa:79:cf:25:
                    16:fe:0d:92:d6:a2:20:8b:33:91:92:69:b9:54:78:
                    24:a8:d7:38:9d:73:4f:e7:18:90:69:61:19:fd:5a:
                    91:58:45:39:c6:c2:2b:d5:24:4d:32:bd:bc:ad:71:
                    36:5e:dc:e9:51:0d:d4:9a:58:bd:b3:02:89:f5:85:
                    86:ea:73:df:6a:ab:d8:25:90:f7:1a:82:c5:11:e4:
                    9e:ab:d7:4f:e9:15:fa:9a:71:58:e8:4f:5c:92:de:
                    5b:56:1b:12:90:84:43:e5:55:34:ae:dd:2b:4f:87:
                    fd:b0:8a:a8:70:71:d3:82:62:6f:70:92:be:60:3c:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:73:22:43:27:2D:F4:B3:20:D3:D6:18:07:EB:C2:76:71:DF:75:F5
            X509v3 Authority Key Identifier:
                keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/GnMiQyct9LMg09YYB-vCdnHfdfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:fc:b5:67:4e:92:e4:58:7e:ff:44:5c:e8:73:2c:0d:45:9e:
         7a:96:34:88:fb:80:bd:e4:f7:76:f2:b0:dd:bd:60:ec:7a:fd:
         4e:20:4e:99:67:04:0e:17:25:17:b7:a0:75:20:fd:e2:1f:dc:
         ea:23:12:35:54:b5:e6:2f:e3:5d:2a:41:e6:f8:1e:5f:29:dc:
         6e:69:67:8c:1f:2c:e2:e4:bb:52:39:cd:fb:de:0c:86:31:5f:
         c8:60:c0:0d:54:16:c3:2a:7d:cf:4c:4c:1a:af:08:4d:38:90:
         c0:51:76:f5:07:85:96:ef:84:ab:14:87:6a:08:ee:d8:2d:24:
         ad:a2:b3:4a:6e:e4:63:dd:b8:db:53:9e:dd:14:aa:2a:f6:36:
         46:49:85:18:04:79:5c:1a:64:00:34:d3:35:97:ea:71:35:01:
         2f:ad:50:7d:6f:f3:8f:27:7c:53:6b:e9:44:c2:74:54:10:41:
         bf:0a:84:35:37:77:09:e7:64:1c:86:0a:03:55:05:51:6d:73:
         86:53:35:fa:bd:ce:c1:44:b1:a8:68:b2:26:6b:ce:59:c6:e6:
         8f:a5:b3:cc:cb:d6:f3:7b:bf:a8:c5:8b:f7:a1:e3:cc:eb:d0:
         d7:0b:b3:21:42:01:6b:06:a3:10:cd:56:9f:b8:88:3a:6a:22:
         7e:68:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net