Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ASBWw_A770SylgdcI2JNRBweuWc.roa
File:                     ASBWw_A770SylgdcI2JNRBweuWc.roa (raw, json)
Hash identifier:          0eU6BaUHiEMtut/uii+vvf++t28TiYJydrE3jMkvau0=
Subject key identifier:   01:20:56:C3:F0:3B:EF:44:B2:96:07:5C:23:62:4D:44:1C:1E:B9:67
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       0483E999
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ASBWw_A770SylgdcI2JNRBweuWc.roa
Signing time:             Wed 02 Mar 2022 10:42:13 +0000
ROA not before:           Wed 02 Mar 2022 10:42:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60421
IP address blocks:        148.81.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75753881 (0x483e999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  2 10:42:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=012056c3f03bef44b296075c23624d441c1eb967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:1f:ad:6f:27:73:ae:cf:69:f5:39:96:70:
                    37:1c:d1:87:a8:dd:6f:89:03:e1:87:0d:63:ae:e8:
                    86:68:62:e6:36:f8:9b:a0:8e:9e:0d:e6:33:05:2f:
                    1b:53:12:e1:db:bb:8a:8c:2c:05:d4:71:9b:09:57:
                    b9:21:26:be:95:23:0f:3b:18:6d:9e:05:c4:16:b1:
                    42:d4:68:bd:4a:6e:02:b6:da:d4:b8:fd:b9:e3:76:
                    0e:c3:fe:fa:d2:b6:73:7d:31:7d:55:fd:a3:89:be:
                    14:6c:90:55:0b:b0:f7:1c:8e:c1:1f:df:b5:07:12:
                    db:22:50:a3:9d:ab:cb:85:06:99:3c:08:1c:c8:f6:
                    d4:dd:f8:92:15:f7:57:ad:29:b6:ae:e9:2a:58:32:
                    36:fc:6a:dd:f1:c4:55:d0:5c:22:79:c2:bc:33:61:
                    9e:d8:89:f7:c2:08:ff:fe:71:e9:5d:34:e1:fe:95:
                    74:bb:c4:04:fd:1c:51:36:d3:e3:f9:6c:e8:14:63:
                    4b:fe:06:f8:24:e2:78:a4:79:00:c2:9c:13:a0:e1:
                    dd:df:88:01:c7:56:00:08:a6:60:d1:9c:f4:ee:c5:
                    98:46:44:f0:c4:a0:d0:ea:4c:10:54:97:ca:f1:9f:
                    08:61:c2:09:c5:a5:9c:87:ea:06:c9:c3:00:d8:66:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:56:C3:F0:3B:EF:44:B2:96:07:5C:23:62:4D:44:1C:1E:B9:67
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ASBWw_A770SylgdcI2JNRBweuWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f3:af:13:5f:da:47:b9:d0:b6:d2:47:49:bc:c9:d7:e1:42:
         02:d1:30:46:00:53:09:a6:3b:93:ce:aa:cf:06:3d:63:b9:66:
         4e:a1:72:83:bf:4b:31:b6:d2:b3:d2:ec:6a:50:51:b2:6b:0b:
         27:de:62:ca:dd:a1:b1:38:b6:c1:79:88:45:ce:8f:2f:a2:fb:
         3c:b4:88:a1:cc:b0:d6:34:5c:23:d5:61:a4:2f:36:4a:6d:77:
         a8:f3:65:bc:58:84:50:98:f7:3b:8b:2d:6f:b3:e9:4f:1b:a4:
         4e:bd:9c:f7:27:f7:7b:cf:18:a8:2e:79:27:29:05:73:d1:d3:
         53:a4:e2:ac:d9:d2:8e:84:43:4f:ab:49:59:3c:53:1c:47:f4:
         b4:e3:3a:b9:ed:01:88:17:58:8a:02:0f:44:53:28:ec:46:f9:
         84:c4:a0:06:ab:f3:0e:be:ab:8a:81:90:a7:a3:76:ef:49:15:
         ce:bf:04:42:5e:0b:f7:ae:24:fe:f5:0c:dc:bd:c3:0a:55:3b:
         c6:b8:db:40:6a:ad:43:1a:ec:b6:0c:1d:e5:03:ff:06:ff:97:
         e4:c6:9b:af:20:fc:3c:85:bc:ce:45:75:ad:ba:40:a8:83:4e:
         f3:b1:0d:a7:ac:18:11:10:91:cd:3e:11:4c:d1:6f:96:0e:16:
         b3:b3:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:13 2023 by rpki-client on console-fra.rpki-client.org