Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/4VSHpEce0du9uRogoCeQSGpn3mQ.roa
File:                     4VSHpEce0du9uRogoCeQSGpn3mQ.roa (raw, json)
Hash identifier:          mo6bsY6qcSbtMYf3kvB9qY9LVN3kt1RZC+DHb/GPtAQ=
Subject key identifier:   E1:54:87:A4:47:1E:D1:DB:BD:B9:1A:20:A0:27:90:48:6A:67:DE:64
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       37EB8C10
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/4VSHpEce0du9uRogoCeQSGpn3mQ.roa
Signing time:             Thu 28 Apr 2022 11:47:22 +0000
ROA not before:           Thu 28 Apr 2022 11:47:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35464
IP address blocks:        82.103.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938183696 (0x37eb8c10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Apr 28 11:47:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e15487a4471ed1dbbdb91a20a02790486a67de64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:7e:6a:c7:59:3b:7d:56:40:1f:a9:69:6e:
                    8a:c2:9a:93:41:db:f1:b4:80:6f:3f:ed:e6:a0:3c:
                    9e:7b:83:d4:cc:63:1a:3e:28:c3:7c:04:7b:bd:4f:
                    f6:af:1f:2b:b7:c8:7a:13:bb:7c:e5:48:fd:17:22:
                    f2:2a:6c:fc:2d:1c:2c:38:1b:f6:e0:6f:07:7c:dc:
                    2b:e6:da:eb:5f:7c:62:f1:1a:b2:46:db:4c:2a:23:
                    b1:5d:7a:6c:f8:c2:6d:08:ea:6e:cf:c0:80:37:dd:
                    56:8e:e9:68:ee:f4:bf:b9:b6:0d:2c:73:2c:7c:fe:
                    40:c8:2f:63:93:7e:3f:08:2e:40:33:d7:b3:a8:93:
                    df:cd:b5:ad:e8:27:f0:24:c5:3a:73:f3:9b:99:6e:
                    b8:f0:a8:b9:37:52:b3:8d:31:69:72:c7:f5:30:1b:
                    bf:ff:f4:3c:b8:30:51:73:a9:d9:66:28:10:05:a7:
                    8a:e9:c5:e0:94:26:b0:0c:45:cb:63:bd:30:94:28:
                    df:18:17:ce:2e:07:72:e2:a6:f0:31:cd:68:03:b7:
                    c8:d6:39:a7:ad:e2:94:7a:81:11:bb:c3:47:ae:a0:
                    8e:d4:2e:0a:75:49:74:27:d8:bd:0a:73:a1:b5:81:
                    e7:70:21:bd:6f:6d:1e:0a:e3:7c:51:75:68:7a:cd:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:87:A4:47:1E:D1:DB:BD:B9:1A:20:A0:27:90:48:6A:67:DE:64
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/4VSHpEce0du9uRogoCeQSGpn3mQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.103.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:6f:e4:50:c7:c6:cc:36:dd:24:5c:a0:6d:b6:26:f1:fc:
         c3:38:33:d4:ff:b8:de:b0:0c:97:cb:3a:c5:29:94:42:fa:d3:
         10:1b:db:9c:d5:45:6b:df:f3:23:01:d1:dd:2d:ee:98:de:a1:
         38:00:1b:1b:a3:e4:52:74:f9:5f:a6:a8:8f:8f:cc:60:4c:f7:
         00:95:da:d2:28:42:cc:f1:2b:62:25:d0:cb:5d:fc:4f:d1:59:
         47:bd:de:39:cb:78:44:5e:f5:df:97:f9:7f:d4:10:4e:66:69:
         cd:14:c6:13:70:0b:15:7e:52:d6:e9:42:0d:4b:38:34:40:24:
         13:ec:c5:27:14:ea:d6:57:7d:8a:70:df:fd:f2:43:39:2d:c8:
         f4:05:4d:2e:d0:e7:5a:d9:6b:2b:f2:6a:ba:39:77:d6:d5:6d:
         9b:61:14:57:05:c4:94:f5:2d:f1:e0:0d:8a:19:b5:37:c7:e0:
         eb:3c:cd:c6:e2:7d:39:ff:dc:cf:86:cf:fa:23:ae:b2:82:85:
         d8:77:7d:7e:35:ff:3a:b3:7d:d1:33:b6:60:ff:dd:ba:87:d6:
         e1:26:c7:39:d1:a3:b0:f0:78:57:21:b5:13:1c:c2:4d:71:7b:
         f1:9a:38:5d:24:ed:17:63:2b:f6:5b:80:a0:1c:42:38:e9:44:
         e3:04:66:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-ams.rpki-client.org