Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/J7ldtrUvMOSC1d9vdQBB7hTKw9I.roa
File:                     J7ldtrUvMOSC1d9vdQBB7hTKw9I.roa (raw, json)
Hash identifier:          Zsbp92zlcZde7DEfRZVpxo2mrct5Suutf9fq4Krtw3Q=
Subject key identifier:   27:B9:5D:B6:B5:2F:30:E4:82:D5:DF:6F:75:00:41:EE:14:CA:C3:D2
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       09C9C4FB
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/J7ldtrUvMOSC1d9vdQBB7hTKw9I.roa
Signing time:             Wed 15 Jun 2022 05:49:46 +0000
ROA not before:           Wed 15 Jun 2022 05:49:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29182
IP address blocks:        212.22.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164218107 (0x9c9c4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jun 15 05:49:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27b95db6b52f30e482d5df6f750041ee14cac3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:c7:a1:bd:30:5e:6a:d1:87:ad:f8:ce:c8:
                    71:3a:c6:30:6a:ac:af:51:94:c6:6b:02:cb:10:51:
                    60:93:8b:b7:c7:6b:d0:00:93:8b:4e:78:78:3e:2e:
                    f2:a7:46:06:dd:ce:00:0d:21:13:19:5a:c1:29:f7:
                    3f:b5:7b:df:b1:c3:b9:79:4b:08:de:03:4c:2a:b4:
                    ef:0b:46:d3:35:56:6e:05:f0:7e:a7:06:fe:d8:54:
                    67:8e:1b:f7:34:e3:fa:6a:13:8e:f4:3a:8a:78:96:
                    62:51:bc:47:22:51:c9:0f:ee:77:8f:f4:db:cc:a9:
                    64:19:0f:22:9d:40:fc:14:c1:10:93:aa:f1:9a:7c:
                    88:ec:2f:66:ea:e5:4d:7e:3e:52:c9:96:72:93:7a:
                    07:91:51:01:81:06:ef:1d:a6:99:fa:1d:02:d0:c1:
                    ce:38:66:9b:86:f9:f9:49:b2:0d:92:45:ea:9e:d5:
                    7f:b7:a0:3b:3a:d4:b2:07:1b:27:aa:bf:20:f1:06:
                    9d:ab:b0:98:45:67:a7:50:04:ac:eb:96:aa:75:80:
                    44:d4:77:68:f7:67:94:2f:46:56:a5:af:55:13:9b:
                    33:9d:3e:74:85:b5:98:d2:5e:87:a3:dc:88:02:55:
                    80:94:ca:f5:81:63:c6:5a:e2:42:39:74:dd:74:01:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:5D:B6:B5:2F:30:E4:82:D5:DF:6F:75:00:41:EE:14:CA:C3:D2
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/J7ldtrUvMOSC1d9vdQBB7hTKw9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.22.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f7:18:ad:14:f8:32:95:db:ee:45:1d:8b:03:d1:4f:de:73:
         62:cf:2b:a3:1e:4d:b3:98:2f:c2:db:5f:2b:b7:8e:69:7b:f5:
         63:e2:88:72:3e:a2:35:27:59:39:cf:af:16:d1:34:70:1f:00:
         7d:4f:e3:1e:be:dc:1e:38:4a:f8:a4:90:cb:f2:c8:f1:fd:00:
         6d:b1:79:2f:9f:a7:f8:ce:de:da:f2:3b:cc:f6:59:0d:8c:01:
         57:77:6e:df:a3:c2:a1:55:c9:93:0f:0f:2d:46:d8:91:e7:1d:
         dc:af:74:32:c0:e1:12:9e:10:a9:fe:9e:04:d8:e0:ea:fb:10:
         57:6f:56:73:3b:3a:26:98:a7:53:69:1c:57:8b:7b:46:0c:4a:
         72:8f:2e:de:4a:02:50:42:0b:0d:7d:bb:ef:e8:34:1d:98:39:
         d5:3f:2f:a2:93:95:88:a7:33:dc:73:70:2c:9d:ed:5f:5b:a9:
         c7:2b:24:6c:28:6a:ff:d7:8c:f7:30:58:8f:e6:8d:2a:55:1f:
         b9:21:ef:f5:c5:3e:a1:ad:dc:e5:46:9f:bb:0f:0b:34:12:27:
         09:55:64:49:3b:4b:cd:a0:07:eb:07:90:cf:f6:df:57:80:f2:
         0d:b2:bb:80:10:be:8e:76:c3:40:ce:3a:4a:b8:a3:1e:70:7b:
         97:46:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org