Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/Mm-CC0YDJxquBSNGg-_Dz86ETU4.roa
File:                     Mm-CC0YDJxquBSNGg-_Dz86ETU4.roa (raw, json)
Hash identifier:          yfqXDFHWody4UODrN/j7zNk8SJhTQlcuJNtefEQuNGM=
Subject key identifier:   32:6F:82:0B:46:03:27:1A:AE:05:23:46:83:EF:C3:CF:CE:84:4D:4E
Certificate issuer:       /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial:       04509D41
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/Mm-CC0YDJxquBSNGg-_Dz86ETU4.roa
Signing time:             Sat 01 Jan 2022 02:58:55 +0000
ROA not before:           Sat 01 Jan 2022 02:58:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15576
IP address blocks:        193.17.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72392001 (0x4509d41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
        Validity
            Not Before: Jan  1 02:58:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=326f820b4603271aae05234683efc3cfce844d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:4d:73:06:36:56:71:81:f4:50:f5:0a:46:
                    14:2c:ff:06:fb:19:72:60:c0:a1:0c:37:bb:95:41:
                    d1:86:a1:af:e6:a0:70:66:bf:43:a4:25:55:46:64:
                    b0:1f:d2:be:ba:3f:31:e3:f3:de:64:3e:47:b2:60:
                    1d:f3:9f:ac:54:82:70:57:2e:58:22:ce:a1:65:49:
                    e9:8a:0d:1c:3d:bc:d5:29:36:c5:59:4b:9e:7d:38:
                    c2:1e:16:b1:85:0b:00:3d:03:fa:62:f8:4d:f9:94:
                    6a:11:e8:d9:ba:69:e2:f2:11:62:84:91:44:be:c1:
                    1a:e1:91:ab:ee:4f:80:82:3f:bb:21:0b:0c:05:20:
                    0f:15:b1:31:70:d5:d0:f2:da:2c:5e:7f:d4:80:5a:
                    28:43:12:c5:8f:fd:73:41:cc:04:90:8f:14:1c:f9:
                    b9:f6:c3:6c:3d:e2:47:26:7f:df:44:14:b1:b9:f5:
                    d5:7a:50:fb:e4:de:af:b1:41:21:d1:f4:7b:f9:36:
                    4e:80:8a:e8:c7:1d:a4:cd:3b:e2:6e:74:87:03:15:
                    63:37:ba:0b:0d:46:9a:0d:50:bc:dc:de:86:da:14:
                    1f:90:8d:bd:1c:6e:5a:ca:02:79:44:aa:12:62:05:
                    c8:a0:68:cc:de:b2:88:69:6a:8a:80:8a:8c:8e:14:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:82:0B:46:03:27:1A:AE:05:23:46:83:EF:C3:CF:CE:84:4D:4E
            X509v3 Authority Key Identifier:
                keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/Mm-CC0YDJxquBSNGg-_Dz86ETU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:d0:9d:23:f7:d1:24:8e:6c:4b:a6:68:27:ae:e8:85:ea:
         d3:8f:67:09:30:ba:76:f1:80:81:f1:ba:54:91:84:8b:8d:b4:
         e0:a9:0f:fa:0c:da:49:9f:05:38:5d:c7:cc:8a:7a:6e:29:26:
         c7:18:07:8d:da:66:18:ca:c3:df:05:85:01:b9:d8:60:dc:77:
         61:06:9b:af:b5:b7:d8:93:5c:11:fa:56:e4:a1:7f:33:7f:1a:
         77:45:26:60:21:6c:94:47:23:16:1b:53:00:a4:7b:94:46:0b:
         4f:bf:3c:c4:6a:78:9c:9e:c8:0b:40:ae:2c:97:d6:2c:c8:23:
         bf:fe:5d:ee:ab:d0:8f:27:3c:2a:5a:78:43:c8:ef:88:01:69:
         30:06:c1:1b:b4:4e:f3:44:23:34:e7:84:d1:ea:74:02:e1:15:
         b5:d8:5c:23:13:c7:77:05:2e:e7:86:ef:42:9d:fe:9a:af:c4:
         05:db:e6:93:2c:7a:9d:aa:be:49:f1:f7:13:90:ff:9e:c0:f0:
         66:d8:09:9b:a0:72:07:d6:78:17:27:53:97:28:48:1e:e2:00:
         12:a6:f7:dc:2a:72:4c:e5:75:59:fa:22:0d:3c:ec:f0:48:36:
         58:7e:e9:6f:b9:48:5a:a9:d8:52:64:72:50:1d:b3:d8:7a:c9:
         52:6e:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net