Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/6bwmOUh4CNiDZ27pyygAj-0y-CY.roa
File:                     6bwmOUh4CNiDZ27pyygAj-0y-CY.roa (raw, json)
Hash identifier:          FKfnoQ4eEvu1rz5K63WXQQLV8Q6Rb0tuvvDwPvZo4DE=
Subject key identifier:   E9:BC:26:39:48:78:08:D8:83:67:6E:E9:CB:28:00:8F:ED:32:F8:26
Certificate issuer:       /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial:       089A425B
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/6bwmOUh4CNiDZ27pyygAj-0y-CY.roa
Signing time:             Sat 01 Jan 2022 15:07:35 +0000
ROA not before:           Sat 01 Jan 2022 15:07:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15600
IP address blocks:        5.149.16.0/20 maxlen: 20
                          185.74.148.0/22 maxlen: 22
                          2a00:d260::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144327259 (0x89a425b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
        Validity
            Not Before: Jan  1 15:07:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9bc2639487808d883676ee9cb28008fed32f826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:89:19:9a:35:6b:3c:4c:62:7d:20:db:c6:
                    d3:69:8e:0b:f0:76:b8:8d:57:78:7b:6b:37:06:32:
                    f5:40:00:88:87:86:bf:cd:88:08:3d:da:35:c7:8e:
                    45:71:73:3c:86:cd:7f:d5:d5:7f:d8:14:9f:4d:e9:
                    d6:d3:e7:29:21:2c:63:b2:00:f5:67:0a:dc:72:a5:
                    fa:d2:94:8e:85:ed:2c:f8:69:0c:42:25:c2:86:1d:
                    e8:e6:74:33:a8:aa:44:9a:2f:f0:e7:10:33:bd:6c:
                    15:db:b5:61:77:f7:72:3f:ef:ff:b3:02:6b:af:07:
                    1c:3a:48:ba:22:7d:cb:04:a5:12:09:9a:d7:b1:74:
                    0b:d3:0e:51:01:81:08:4b:85:e5:ec:4b:79:6f:65:
                    b3:be:e0:93:9e:c0:4d:19:a0:3e:0d:55:38:18:e1:
                    f9:e2:0f:eb:de:1b:36:27:35:71:72:df:7a:09:5d:
                    4b:6c:eb:fd:27:9a:53:78:c2:92:d6:2d:5c:5e:01:
                    10:71:1d:18:1c:15:cb:bc:1e:5e:16:3d:d4:07:8b:
                    97:81:6d:67:a8:66:f1:b9:c9:ca:6c:8a:bc:ea:36:
                    bd:23:04:5b:38:e8:23:73:65:50:7a:9b:92:7d:3b:
                    0a:c2:fd:b5:31:0e:b2:07:21:b6:b5:f4:04:be:22:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:26:39:48:78:08:D8:83:67:6E:E9:CB:28:00:8F:ED:32:F8:26
            X509v3 Authority Key Identifier:
                keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/6bwmOUh4CNiDZ27pyygAj-0y-CY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.149.16.0/20
                  185.74.148.0/22
                IPv6:
                  2a00:d260::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:4f:8f:81:cc:92:01:72:dc:d3:b8:3f:7d:b4:3d:f7:e2:72:
         35:57:ec:49:5a:88:f4:76:dd:65:f9:74:22:f4:46:ee:3c:dd:
         e5:09:09:e1:eb:2c:19:f8:97:7f:2f:88:13:2b:49:d7:02:e7:
         53:9f:da:c5:4f:68:25:68:df:ca:35:e2:c7:97:7e:61:a3:4c:
         65:f2:69:9b:18:92:14:99:4b:98:5a:6d:92:11:fc:62:fc:ed:
         87:20:31:0d:a3:9d:90:6f:3e:ee:c0:ac:b0:72:7a:7d:25:55:
         99:dc:18:44:1b:74:b8:af:d3:d5:1f:b1:39:de:d5:7e:65:7e:
         3e:f8:5c:f0:2e:1a:a7:ae:75:2d:c8:09:c3:5d:e8:40:88:ab:
         1c:c6:aa:f7:89:f7:b0:6f:9f:c0:6c:91:a6:8f:94:2b:04:b2:
         59:cb:67:eb:f8:a8:5d:b7:8c:80:77:81:88:9c:15:9c:38:06:
         70:1f:5f:b1:1b:01:31:e8:64:46:c8:97:b3:3d:a5:9b:4e:a6:
         d4:c1:55:54:95:8f:4a:a2:79:b0:ac:02:9e:8e:09:ff:05:cb:
         8a:b6:02:48:d0:29:f8:09:c2:0b:13:d8:bb:87:bd:20:0d:30:
         73:d8:ef:78:ba:0d:e7:aa:37:7e:74:a6:f2:80:92:c1:e0:44:
         39:c4:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:05 2023 by rpki-client on console-fra.rpki-client.org