Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hc1QuDTt_3xAdFtj-kbTihopqPU.roa
File:                     hc1QuDTt_3xAdFtj-kbTihopqPU.roa (raw, json)
Hash identifier:          KeKG0gZDMNN08viofyxtDqD+BuBoYOWYL5G6CrDum2I=
Subject key identifier:   85:CD:50:B8:34:ED:FF:7C:40:74:5B:63:FA:46:D3:8A:1A:29:A8:F5
Certificate issuer:       /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial:       018391ADC7BF630CD9ED1A727DFA44B31051
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hc1QuDTt_3xAdFtj-kbTihopqPU.roa
Signing time:             Sat 01 Oct 2022 03:53:48 +0000
ROA not before:           Sat 01 Oct 2022 03:53:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     395092
IP address blocks:        217.195.152.0/22 maxlen: 22
                          213.108.246.0/23 maxlen: 23
                          45.146.220.0/22 maxlen: 22
                          45.155.36.0/22 maxlen: 22
                          2a0d:9ec0::/48 maxlen: 48
                          2a0d:d8c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:91:ad:c7:bf:63:0c:d9:ed:1a:72:7d:fa:44:b3:10:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
        Validity
            Not Before: Oct  1 03:53:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85cd50b834edff7c40745b63fa46d38a1a29a8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:79:41:a0:e3:25:dd:3b:c7:18:aa:52:04:
                    62:f8:51:63:99:25:9b:2c:e2:94:4f:42:d9:b8:f8:
                    80:74:1c:15:c2:54:cd:0a:73:55:93:aa:f2:83:31:
                    1b:c1:d9:5d:47:25:d2:8b:23:a5:0f:e9:ee:cf:08:
                    f3:ba:62:74:e3:d1:4b:45:a9:f0:8f:d7:32:99:5d:
                    60:bf:21:8d:c6:a1:8c:6d:8f:66:9d:bf:ce:04:2b:
                    03:ed:d4:f4:99:53:f1:22:9f:22:6d:b3:b2:de:29:
                    64:91:b3:5b:c1:8d:17:b0:d7:02:c8:e6:55:97:68:
                    b0:1b:9a:f7:93:55:4e:28:91:56:13:9b:1a:ec:b9:
                    30:f7:a4:86:fb:2b:b1:bc:0b:44:16:d8:4f:0e:29:
                    c9:a9:8c:aa:86:8f:ef:11:56:ee:39:39:58:aa:6a:
                    1e:e5:6c:b4:cf:37:af:d0:b1:b9:b3:4e:1e:ed:21:
                    84:1c:49:fa:d8:29:2f:15:00:11:28:22:e1:f8:49:
                    45:56:9a:e7:c4:f8:f1:d0:e9:ba:c1:e8:a2:6d:80:
                    fb:21:b9:14:99:05:6c:c0:41:13:00:e0:27:7d:c3:
                    ed:ae:18:da:66:1f:8a:b8:ec:6b:f8:7e:08:3f:35:
                    8c:40:74:01:f3:79:a5:12:d2:11:43:b3:58:22:6c:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CD:50:B8:34:ED:FF:7C:40:74:5B:63:FA:46:D3:8A:1A:29:A8:F5
            X509v3 Authority Key Identifier:
                keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hc1QuDTt_3xAdFtj-kbTihopqPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.220.0/22
                  45.155.36.0/22
                  213.108.246.0/23
                  217.195.152.0/22
                IPv6:
                  2a0d:9ec0::/48
                  2a0d:d8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:c7:4a:14:24:3d:b6:21:ae:1b:82:9d:04:81:27:db:9a:
         fd:b0:0d:d1:73:df:55:1c:ac:bc:22:9b:35:9e:cb:0a:2c:e9:
         97:28:ce:4d:ff:e6:08:91:25:cc:d5:41:e9:b9:8e:27:d3:47:
         fc:91:b8:25:e5:7f:c1:3c:30:8d:5f:50:aa:63:a8:54:9c:94:
         77:32:36:c9:be:96:d6:aa:e1:82:48:5d:36:cb:a7:92:d7:e8:
         b1:08:b0:19:89:e4:1c:57:a7:6b:28:30:71:d1:d7:0c:63:82:
         85:6e:32:45:71:d2:49:71:53:33:2a:14:c7:78:7e:4c:76:6a:
         30:5e:90:10:68:b2:10:be:72:50:e8:21:de:cf:48:a6:b8:11:
         61:84:b0:e6:b1:58:10:91:4c:36:21:1d:b5:ca:d7:b4:14:2d:
         75:2e:dc:27:bc:1b:d5:d4:10:0b:4c:9d:65:e1:7e:70:98:7e:
         ce:61:23:8e:51:e0:b3:19:0d:2d:83:d6:e4:5e:7a:ea:30:bd:
         3b:54:a5:89:38:97:49:6d:bc:19:07:bf:be:12:29:d1:ae:db:
         75:31:32:b2:09:7f:ea:ca:1d:42:c9:bd:8d:70:fb:c2:65:f3:
         69:6a:54:8e:2e:dc:8d:0d:d4:e5:dd:09:f0:4f:21:4d:8c:6a:
         4c:c2:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org