Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/yUuLs57L8_MEmoX2ToEgtoNK50c.roa
File:                     yUuLs57L8_MEmoX2ToEgtoNK50c.roa (raw, json)
Hash identifier:          Z75W3CARvRm1mNUiT/VFK3w+iiG8EF1I6U4euuPpAp8=
Subject key identifier:   C9:4B:8B:B3:9E:CB:F3:F3:04:9A:85:F6:4E:81:20:B6:83:4A:E7:47
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       01845328BEED82231B47473A556E8EFD33D9
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/yUuLs57L8_MEmoX2ToEgtoNK50c.roa
Signing time:             Mon 07 Nov 2022 17:34:49 +0000
ROA not before:           Mon 07 Nov 2022 17:34:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     11325
IP address blocks:        2.57.248.0/22 maxlen: 22
                          45.80.96.0/22 maxlen: 22
                          45.85.128.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:53:28:be:ed:82:23:1b:47:47:3a:55:6e:8e:fd:33:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Nov  7 17:34:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c94b8bb39ecbf3f3049a85f64e8120b6834ae747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:0e:11:b6:f3:b5:67:cd:e9:84:96:ae:c1:
                    3f:65:d8:85:e2:0c:42:8b:b7:46:72:f5:74:53:5e:
                    40:c7:72:63:3a:a6:22:69:0b:ba:68:1b:cb:e3:fe:
                    6e:87:ba:c0:96:ed:e5:6f:42:83:2c:2c:ba:a3:3d:
                    44:f7:2b:47:67:77:8b:e6:eb:97:df:d2:20:7b:72:
                    b5:12:1e:11:98:79:cd:01:42:b0:68:f6:6e:1e:2c:
                    72:e1:eb:9b:9a:1d:2f:60:a3:45:5d:43:85:1c:a7:
                    74:59:5d:05:c9:ea:a5:fb:3b:b4:6f:84:4b:ea:a4:
                    02:0c:1a:ae:4b:62:43:0a:b0:6f:99:7c:1a:cb:f6:
                    ea:1d:0c:e1:28:e1:b2:b2:65:fa:dd:19:5a:e8:55:
                    d9:6c:de:75:4a:67:50:8f:33:82:09:7e:d4:8c:47:
                    ae:62:3b:70:6f:f4:0d:87:4c:38:e8:e4:1e:52:14:
                    70:34:f0:95:9a:0a:1e:27:f4:c6:9e:10:56:9c:24:
                    f5:ea:74:6f:51:5a:71:5f:c6:61:c7:93:37:bd:e6:
                    bb:c2:33:d1:0a:3d:97:d0:7c:f3:ee:52:56:3e:8b:
                    9c:9a:20:5c:13:b1:56:64:36:d1:d1:b9:2f:00:2f:
                    f5:80:5d:92:6e:92:cf:fe:e4:a7:7c:c6:b7:53:7d:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4B:8B:B3:9E:CB:F3:F3:04:9A:85:F6:4E:81:20:B6:83:4A:E7:47
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/yUuLs57L8_MEmoX2ToEgtoNK50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.248.0/22
                  45.80.96.0/22
                  45.85.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:99:98:4f:b8:e1:98:24:40:27:c2:0c:b0:b9:fb:20:2f:
         e7:87:32:d9:9b:38:12:f9:2f:60:fb:d8:10:ee:67:06:39:99:
         68:36:63:64:0a:eb:72:86:f6:93:31:6e:4b:e8:92:5e:6e:7e:
         bf:2c:db:af:c5:90:0e:2d:70:fa:95:b2:90:94:1a:28:49:de:
         2a:d2:04:50:cb:88:5d:58:0b:28:56:67:b2:a1:4b:0a:29:2f:
         7c:07:e3:38:f6:30:80:5f:1a:47:11:2a:28:80:15:ab:58:05:
         99:e0:81:d5:c1:49:f2:fa:67:bc:40:e9:8b:d8:ce:e1:9c:35:
         d1:53:b8:22:99:c4:56:6c:44:53:42:88:d7:68:a9:db:f8:93:
         2c:ec:4c:1f:c9:96:18:11:43:fd:0f:0d:54:1f:8d:bf:46:95:
         c9:d8:3c:8a:07:0b:39:ff:e7:8c:14:a7:4d:30:fd:c0:dc:9c:
         27:ba:96:91:fa:7e:81:d7:a5:af:51:d9:11:0b:c6:2a:4d:db:
         4b:6d:8c:4f:4f:6a:98:b9:ac:8d:5c:e7:0a:be:ba:1a:7d:31:
         11:e4:bc:d6:eb:a5:09:74:81:43:cb:fb:ed:a9:2c:14:77:01:
         d6:5e:9f:12:e2:44:fc:16:ce:27:43:8d:d2:a2:c3:65:dc:a6:
         b2:c3:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:52 2023 by rpki-client on console-fra.rpki-client.org