Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6QEZ704TKajSG3-d6k3b_0s_8uw.roa
File:                     6QEZ704TKajSG3-d6k3b_0s_8uw.roa (raw, json)
Hash identifier:          Jk5ueYo3PdL/oepTQD1WDVjEEa6e7ID7OxYbCQNdJ24=
Subject key identifier:   E9:01:19:EF:4E:13:29:A8:D2:1B:7F:9D:EA:4D:DB:FF:4B:3F:F2:EC
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       1B01415D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6QEZ704TKajSG3-d6k3b_0s_8uw.roa
Signing time:             Mon 11 Apr 2022 05:29:55 +0000
ROA not before:           Mon 11 Apr 2022 05:29:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     262287
IP address blocks:        45.84.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453067101 (0x1b01415d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Apr 11 05:29:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e90119ef4e1329a8d21b7f9dea4ddbff4b3ff2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:4b:e1:bb:47:35:83:d2:47:d5:19:27:17:
                    76:9d:b2:80:1b:a3:57:87:0e:8c:82:ca:b0:a5:ac:
                    84:d0:ac:55:fd:4d:93:2d:37:e7:b7:a8:90:ec:77:
                    05:84:42:85:32:8d:41:ea:63:c7:22:d4:1f:f3:b9:
                    f3:a0:9a:09:81:d3:6e:89:ad:fd:4e:ae:b8:6f:fb:
                    dd:21:89:bc:b3:51:a4:c8:66:ea:d2:f4:64:d1:07:
                    c7:eb:17:a8:11:02:6e:3a:93:00:ee:a5:fd:b3:ee:
                    5a:8a:25:23:f6:0f:8c:46:ad:af:83:74:9f:7a:92:
                    a5:2a:86:fc:30:77:34:14:3c:bf:b0:1a:e0:96:2e:
                    a5:41:48:b6:c4:c4:f8:4c:35:95:db:23:e4:08:79:
                    12:19:2d:c8:d2:32:93:1f:f0:c0:03:15:19:27:a9:
                    5f:69:da:e4:61:c7:88:75:35:c6:84:3f:d0:a0:99:
                    a2:bf:b4:f8:fa:f4:2c:b7:2c:ee:82:70:5d:f3:38:
                    f2:46:ae:19:de:40:4d:1b:f4:52:26:e4:37:1d:69:
                    a5:6a:fe:2b:33:fd:62:c6:f8:5c:31:ce:95:8c:96:
                    7a:ad:c7:59:89:cc:32:08:d2:69:1e:fd:8b:78:46:
                    62:a8:d8:07:71:69:76:1a:dd:fc:8c:1c:ac:90:ac:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:19:EF:4E:13:29:A8:D2:1B:7F:9D:EA:4D:DB:FF:4B:3F:F2:EC
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6QEZ704TKajSG3-d6k3b_0s_8uw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:38:3b:e4:3e:2b:5d:cd:82:71:38:d3:a4:0a:76:95:16:d0:
         14:a6:1f:60:82:8d:a0:22:fc:88:50:25:8a:e2:53:95:d6:32:
         0a:b3:6e:fd:93:65:31:f1:6f:e8:79:8f:dc:3f:80:0a:f3:3f:
         93:09:9d:40:a1:ee:83:49:25:94:34:0e:da:21:a0:cb:92:9b:
         59:04:ea:b9:b9:b3:37:4c:3a:1a:eb:e2:48:23:3c:dc:6f:3c:
         86:3c:90:47:bf:9c:3e:46:e1:3d:19:c7:a3:f2:db:ed:7a:62:
         6f:ae:db:75:72:bc:8e:e6:99:70:02:6c:e8:93:bb:a0:5f:15:
         9e:ff:34:6e:29:fc:d0:ca:71:17:a9:38:02:8a:63:5c:75:fc:
         eb:5e:60:66:95:3f:fe:7b:c8:c1:70:af:a1:2d:b2:47:ba:30:
         07:5c:26:7f:a2:c1:5c:83:b9:e7:08:b0:fb:8d:0d:cd:c1:60:
         96:ba:41:06:df:cf:85:4c:31:6b:05:8c:e7:14:75:ff:85:f7:
         91:fe:2b:9c:6b:db:61:d7:16:31:c9:7a:75:64:f6:e1:f4:6f:
         e3:db:6c:16:96:6a:eb:82:5e:f1:12:be:20:8e:e8:75:07:ca:
         7a:35:3c:c3:47:7c:3c:54:4b:b2:ea:24:d9:30:44:0d:e1:e9:
         a6:f2:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org