Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/iFAGSDTbOTF-VQdMYMyQsVgRxsc.roa
File:                     iFAGSDTbOTF-VQdMYMyQsVgRxsc.roa (raw, json)
Hash identifier:          l/tMM+5ukEEdoukq5qFXCaBmmoX/xJ4gR9YCCkatFVw=
Subject key identifier:   88:50:06:48:34:DB:39:31:7E:55:07:4C:60:CC:90:B1:58:11:C6:C7
Certificate issuer:       /CN=99fea9717c280ec879335273f022e6b0537455c2
Certificate serial:       01821F893AD479E81D191C11967227AF98FE
Authority key identifier: 99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/iFAGSDTbOTF-VQdMYMyQsVgRxsc.roa
Signing time:             Thu 21 Jul 2022 06:54:23 +0000
ROA not before:           Thu 21 Jul 2022 06:54:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        185.5.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1f:89:3a:d4:79:e8:1d:19:1c:11:96:72:27:af:98:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fea9717c280ec879335273f022e6b0537455c2
        Validity
            Not Before: Jul 21 06:54:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8850064834db39317e55074c60cc90b15811c6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:f3:d9:5d:68:4b:9a:60:28:f0:0a:11:c8:
                    93:b0:7d:f2:f5:2e:db:a4:d3:3e:39:bc:32:09:b5:
                    cf:12:9c:f3:24:4f:33:40:a8:91:e9:81:5d:39:dc:
                    1e:be:ec:d1:e1:85:da:f8:67:fd:2d:d1:f0:32:63:
                    c8:84:ec:b3:61:fe:5d:53:84:13:8e:98:ee:c5:fc:
                    39:99:78:97:d6:1a:97:90:e8:48:38:4c:26:8b:de:
                    2e:99:bd:5a:e3:07:65:13:fc:eb:36:40:a2:e4:15:
                    d2:69:71:ce:b1:63:c7:56:d8:19:cf:6e:34:1d:c3:
                    44:1e:8c:77:36:e1:3b:1e:35:13:99:c5:0c:04:75:
                    f2:15:ea:40:93:72:52:a3:83:c5:18:7b:68:75:32:
                    d8:74:c2:5e:16:3f:d5:14:a8:23:6c:49:4b:e6:55:
                    d4:7e:36:30:bd:ed:6d:8d:11:41:57:e9:a6:f5:3d:
                    2f:40:e5:7d:32:f6:45:3e:6d:96:3e:a3:c7:a3:b8:
                    ee:5c:4c:96:4b:c7:7c:42:69:62:59:8b:7a:f2:c5:
                    b1:58:cf:9b:43:56:42:01:8e:c6:e2:1f:6a:05:90:
                    e4:91:5d:1b:a5:6d:9f:15:97:50:72:51:01:35:98:
                    32:74:4f:38:54:52:b4:03:26:a2:9c:6e:8a:93:bc:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:50:06:48:34:DB:39:31:7E:55:07:4C:60:CC:90:B1:58:11:C6:C7
            X509v3 Authority Key Identifier:
                keyid:99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/iFAGSDTbOTF-VQdMYMyQsVgRxsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:45:4c:24:28:56:24:4f:c6:08:0d:60:29:46:d9:d8:d2:
         67:8a:9e:d1:11:a7:d2:7a:53:c6:89:c5:80:36:70:fd:c2:1c:
         a6:a1:d6:8e:22:6d:1c:e1:be:74:42:18:05:26:04:f8:30:20:
         f6:46:a5:d6:ed:b5:f4:53:09:f7:6e:c6:6d:0e:93:e9:67:30:
         6f:6e:a4:a4:4b:b6:26:03:18:c8:a6:36:13:a8:a9:c5:5b:19:
         f9:4a:49:13:73:20:ba:22:98:a6:8d:50:50:e2:5d:f4:71:fa:
         a7:7c:d3:2d:55:cd:33:98:8f:b5:5d:e5:51:5d:8f:36:2a:7f:
         87:95:6d:58:0f:a2:67:2a:5b:10:3b:d5:1c:3f:79:d6:34:e7:
         81:26:35:6c:32:d4:e2:95:c9:5f:a7:11:45:dc:ef:a3:9e:e2:
         4b:1f:17:fd:79:07:98:96:76:7f:e4:16:32:e3:e9:d3:77:de:
         64:b1:f5:19:54:36:ad:02:00:8c:c2:d8:6e:90:f5:66:77:85:
         ae:91:c9:ba:1e:2d:f3:83:9d:f2:7f:ff:2c:db:07:13:96:04:
         b6:ec:29:50:76:05:ff:96:66:6e:dc:1d:3c:0a:b3:4a:98:6d:
         c8:25:4c:36:60:59:05:18:80:a4:c5:64:9c:2b:e9:c4:ad:02:
         23:07:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net