Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yL-DoxE_vJ25iifxbAWYPrvqeo8.roa
File:                     yL-DoxE_vJ25iifxbAWYPrvqeo8.roa (raw, json)
Hash identifier:          tiLLL0jmxo6NzKdELBxaY0VHKJR9uKMF+lxOML0SBoU=
Subject key identifier:   C8:BF:83:A3:11:3F:BC:9D:B9:8A:27:F1:6C:05:98:3E:BB:EA:7A:8F
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       1B3E54CD
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yL-DoxE_vJ25iifxbAWYPrvqeo8.roa
Signing time:             Mon 02 May 2022 19:02:19 +0000
ROA not before:           Mon 02 May 2022 19:02:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211588
IP address blocks:        45.131.60.0/24 maxlen: 24
                          45.83.205.0/24 maxlen: 24
                          2a07:e345::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457069773 (0x1b3e54cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: May  2 19:02:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c8bf83a3113fbc9db98a27f16c05983ebbea7a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:08:b7:2c:b1:30:8e:cb:2e:a7:15:d9:fe:
                    7d:b5:1e:a9:b8:6b:b2:7f:64:3c:9f:08:a8:49:58:
                    d6:c2:78:87:4e:d4:a9:1b:11:bc:36:fd:49:4e:d4:
                    5b:82:5d:83:e5:c4:55:6e:c2:46:37:28:4f:ee:75:
                    17:b5:bd:e5:7a:39:30:78:62:b3:95:23:18:9d:7a:
                    8e:27:79:f5:82:e1:db:29:bb:7d:ac:6c:fa:46:4e:
                    5f:2d:5c:e7:60:c2:55:2e:16:15:a0:3e:0f:87:e1:
                    7b:98:fb:4a:97:0b:e7:a4:08:df:66:13:93:52:68:
                    e3:9b:60:58:de:2b:4f:e2:6e:41:6b:73:16:75:d5:
                    e9:72:93:28:a7:8d:50:b8:68:74:5e:22:52:40:06:
                    c0:0e:a3:02:38:43:2c:a6:87:8a:04:f6:d1:db:0f:
                    08:c8:ed:6e:28:08:94:04:40:46:59:5f:04:d4:68:
                    f2:2d:df:69:b8:fe:ee:90:e7:12:ad:99:db:37:3c:
                    cd:2f:1b:27:a5:27:cf:57:11:93:8c:a5:60:e1:55:
                    ba:63:65:47:90:ed:32:e2:d6:cc:9d:f0:d2:1a:fc:
                    cc:d4:d3:54:84:67:59:a9:79:57:f4:ac:ae:22:b2:
                    f9:42:76:0e:29:ab:9d:b8:d4:6b:b9:ef:94:4a:ea:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:83:A3:11:3F:BC:9D:B9:8A:27:F1:6C:05:98:3E:BB:EA:7A:8F
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yL-DoxE_vJ25iifxbAWYPrvqeo8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.205.0/24
                  45.131.60.0/24
                IPv6:
                  2a07:e345::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:5b:94:9d:e0:a6:bc:87:1b:71:b0:e9:a2:d3:63:a6:5f:54:
         29:94:db:d3:f6:fc:aa:35:02:1f:04:a9:ee:1d:31:fa:5e:80:
         bf:d4:c4:c9:d1:72:fa:03:f6:b3:d0:ef:49:1a:77:fb:1a:05:
         73:8a:d6:3c:f6:fd:2b:e2:bf:92:c8:cf:7a:2f:3e:0c:4d:f9:
         e3:21:12:d5:4a:eb:ba:e8:28:75:f6:75:27:67:7d:3a:6f:9d:
         d6:d0:b1:79:58:4e:0b:14:72:49:b4:37:ac:68:3e:63:6c:cf:
         e2:bd:07:c0:92:ab:75:03:4f:d7:dc:0a:5a:44:09:8d:e0:d6:
         22:fd:93:43:ae:59:fa:ec:72:e7:3f:34:3e:12:7b:50:60:4c:
         84:66:7c:c2:8c:35:c4:ef:1b:5e:55:19:f6:85:b7:1c:c5:35:
         81:1a:d3:5d:80:3e:67:4f:d8:4e:07:d4:5c:fc:85:cb:d2:b8:
         7f:87:d7:7a:a3:c9:8b:2a:ba:4d:7d:46:c2:fd:30:ee:42:61:
         70:bb:77:50:e2:96:46:e2:ef:84:9f:cb:7b:21:47:96:b5:31:
         51:4f:70:dc:2d:58:a8:4d:9c:bf:10:fe:96:23:42:e8:6e:2a:
         b9:fa:01:ea:d1:4e:dc:58:80:17:b6:c5:ee:c8:da:8a:ed:e5:
         d1:f3:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org