Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/VTB-Bz8Zy_Vy9eB0Uww4tcSpqaU.roa
File:                     VTB-Bz8Zy_Vy9eB0Uww4tcSpqaU.roa (raw, json)
Hash identifier:          vPL3hBnCbPvJmT/UKfrhESvLdIA/UApyXU9FtlM6h0k=
Subject key identifier:   55:30:7E:07:3F:19:CB:F5:72:F5:E0:74:53:0C:38:B5:C4:A9:A9:A5
Certificate issuer:       /CN=d515104d88f6600d232569e3a5f0e0a00a9ad082
Certificate serial:       4B19
Authority key identifier: D5:15:10:4D:88:F6:60:0D:23:25:69:E3:A5:F0:E0:A0:0A:9A:D0:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RUQTYj2YA0jJWnjpfDgoAqa0II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/VTB-Bz8Zy_Vy9eB0Uww4tcSpqaU.roa
Signing time:             Wed 26 Jan 2022 18:28:16 +0000
ROA not before:           Wed 26 Jan 2022 18:28:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        94.143.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19225 (0x4b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d515104d88f6600d232569e3a5f0e0a00a9ad082
        Validity
            Not Before: Jan 26 18:28:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55307e073f19cbf572f5e074530c38b5c4a9a9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:71:dc:22:9a:c5:bb:fe:54:2f:77:19:ce:
                    e8:12:1e:a5:70:68:1c:53:36:ef:d4:a1:a3:9d:50:
                    1a:7d:8d:61:6f:64:af:29:aa:2f:ea:0f:ea:76:70:
                    39:b2:26:75:cd:8d:d0:5e:61:a1:18:73:7c:7c:bd:
                    5f:bd:a4:bd:88:60:da:1b:e6:9b:51:95:ee:8b:71:
                    40:09:82:53:a1:28:73:c4:9c:82:66:ea:48:54:c6:
                    e3:ce:27:aa:2f:b5:41:a1:3e:79:28:03:81:5b:ef:
                    d6:c4:b8:05:d8:41:62:33:78:d1:d6:89:6e:3f:d1:
                    51:fb:8b:29:64:32:85:e7:ea:5f:33:7a:a8:6b:c7:
                    f3:0e:f4:ec:d5:d0:af:86:bd:5d:a9:1d:3b:b9:20:
                    5b:70:27:6b:86:fa:b6:5d:e6:cd:bf:a4:a9:58:a9:
                    52:4a:07:9b:e5:09:9f:70:78:98:ad:de:42:63:3f:
                    df:a7:f6:8f:87:69:17:7e:09:17:4c:8a:ae:24:0b:
                    92:ae:d7:7f:f7:04:ea:e1:16:12:3a:b6:2f:ef:3f:
                    1a:e2:9f:72:f2:5b:3a:f4:89:f7:89:de:07:0c:7d:
                    2e:98:4d:f1:57:71:dd:c1:1d:ce:c0:9c:9c:f2:8b:
                    80:8d:29:2a:b7:68:c5:29:1f:ce:15:23:0b:86:66:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:7E:07:3F:19:CB:F5:72:F5:E0:74:53:0C:38:B5:C4:A9:A9:A5
            X509v3 Authority Key Identifier:
                keyid:D5:15:10:4D:88:F6:60:0D:23:25:69:E3:A5:F0:E0:A0:0A:9A:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RUQTYj2YA0jJWnjpfDgoAqa0II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/VTB-Bz8Zy_Vy9eB0Uww4tcSpqaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/1RUQTYj2YA0jJWnjpfDgoAqa0II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.143.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:17:cb:23:6b:bd:fc:a8:f0:19:82:dd:8b:8d:5b:da:41:ae:
         5b:b0:68:8a:a7:48:ed:7e:31:03:38:2c:40:f4:b7:ad:82:7e:
         2e:d4:23:24:ed:f6:8b:36:d7:71:69:33:01:5b:c0:49:e2:a1:
         d3:ae:45:b7:df:28:c5:c4:c7:5c:36:7f:92:de:5f:21:69:d3:
         7b:b4:fa:c1:f6:56:f9:c7:55:52:2c:6a:b9:85:58:38:e0:83:
         d1:e3:80:3e:e4:3c:1d:b2:f8:40:b0:2b:07:e7:2b:37:dc:43:
         a9:d1:8c:01:45:0d:3a:9f:55:b2:54:34:9d:25:47:e2:6d:2d:
         5e:a2:fb:e3:5d:ac:00:61:13:80:ee:8a:00:fa:ca:be:f9:30:
         c7:59:1c:1a:6c:a6:57:42:5b:99:0d:71:bd:a6:fd:98:f6:00:
         d6:2e:ee:65:30:98:73:0e:a3:98:12:04:0c:d1:22:54:16:56:
         db:fc:22:e3:94:6a:ef:bb:dc:a6:2f:ef:58:9f:45:f6:82:03:
         fc:14:a1:91:59:52:30:6b:d8:29:af:04:36:34:df:c6:a7:99:
         18:d3:20:e6:a7:c1:fc:8b:01:72:7b:bd:02:c8:43:c5:5e:1f:
         0d:e4:10:1c:c1:55:cb:09:0c:f9:e4:47:31:3a:b6:90:3d:79:
         52:dc:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-ams.rpki-client.org