Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa
File:                     1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa (raw, json)
Hash identifier:          gmlfAGy0KftsEPxGddnXBxM1GSaQIP+xvYC2NpOxfqk=
Subject key identifier:   FB:43:8B:43:9F:29:C6:D1:86:6A:9B:F9:12:59:D4:6E:00:55:C4:57
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       01BC75FA
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa
Signing time:             Sat 01 Jan 2022 09:55:06 +0000
ROA not before:           Sat 01 Jan 2022 09:55:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35758
IP address blocks:        45.84.46.0/24 maxlen: 24
                          45.14.73.0/24 maxlen: 24
                          85.209.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29128186 (0x1bc75fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jan  1 09:55:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb438b439f29c6d1866a9bf91259d46e0055c457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:35:bb:fa:58:63:94:e1:9f:c7:c1:36:75:03:
                    81:0b:e0:d1:84:37:c8:1c:ba:1e:8e:2a:3c:bf:70:
                    3b:ef:2e:7b:df:39:3c:cc:5a:a8:c4:58:a9:46:94:
                    a5:65:f3:22:6a:1a:b7:0b:3a:c9:4f:79:05:d0:3c:
                    e4:ae:5b:54:7b:e3:ca:6b:9c:68:1c:55:30:66:e8:
                    b4:80:f6:d1:8f:b3:64:cd:e5:8a:5e:41:b4:b0:86:
                    38:ad:e4:b2:02:c3:64:bd:fd:cc:70:1c:c4:9a:ea:
                    8e:98:ae:04:a9:1b:ff:5a:21:be:13:d7:4f:da:7b:
                    6c:da:40:58:d7:f4:5d:3b:56:ad:31:99:ab:2b:ec:
                    7a:77:ff:d9:da:6d:70:f3:4d:7d:ef:58:61:58:c5:
                    50:7d:48:ef:6d:47:a1:70:f5:5c:bc:be:cb:db:da:
                    21:87:dc:9f:3b:ef:45:66:d1:89:62:87:19:0a:e7:
                    9c:1d:fe:04:62:a7:22:3f:e1:d4:e9:f3:d2:ef:2c:
                    75:f2:08:8c:4b:c4:6f:84:e8:9e:17:fd:61:bc:80:
                    d0:0d:b4:b0:31:84:a8:08:79:14:1a:45:19:b8:27:
                    ed:b1:42:0f:16:cf:24:90:bc:7a:3c:ee:da:1b:6d:
                    74:bc:b8:8a:98:d1:03:64:cd:d1:08:41:49:26:cd:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:43:8B:43:9F:29:C6:D1:86:6A:9B:F9:12:59:D4:6E:00:55:C4:57
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.73.0/24
                  45.84.46.0/24
                  85.209.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3a:aa:7c:49:6e:d8:67:63:4c:fe:97:76:58:69:25:ff:26:
         a2:f0:69:bc:8c:e8:af:50:3f:f7:6f:6c:6c:ec:53:1b:29:d8:
         7f:b9:3a:17:e8:00:60:22:9c:72:d9:cf:c3:83:c5:37:1a:d5:
         91:cf:3f:4b:c5:7c:60:d3:17:31:81:54:82:18:1c:9d:8e:50:
         9f:6c:15:a8:76:09:c0:d0:66:7f:68:8c:46:55:5e:74:07:6a:
         ff:4e:58:0a:df:f7:be:31:81:a7:47:a2:f3:3d:1a:02:d3:45:
         62:4e:9a:bd:b6:b7:ff:b5:65:e1:34:67:85:39:4b:42:8f:53:
         66:cb:11:52:1a:0b:0e:5d:53:ed:0f:0b:b2:94:12:70:28:ab:
         14:75:26:2e:c5:07:37:b8:43:df:e6:4c:f4:c4:ae:94:06:07:
         fa:ff:35:e0:4f:bc:2e:8e:50:74:0f:d9:a0:c8:5e:45:28:49:
         88:e4:69:70:0b:79:41:ab:d5:37:b3:14:da:99:43:d9:5f:d3:
         ad:fe:07:a6:1d:c3:5b:0b:60:b5:17:cd:17:de:55:5b:86:2b:
         85:6e:93:6a:75:3d:c2:46:af:56:72:6a:5b:c8:a4:10:04:d1:
         9a:cb:b8:9e:7f:15:23:46:74:aa:e0:fe:2d:70:6f:35:7a:97:
         4d:7e:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org