Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa
File:                     gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa (raw, json)
Hash identifier:          o5QP+Mg+AtKEo1WO2aEop1dfE/oBu4IBt2CYz9sIAu8=
Subject key identifier:   83:05:4F:43:EC:39:E4:72:A1:08:4A:77:9A:5F:CC:97:A0:2D:1B:A8
Certificate issuer:       /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial:       01821F2DAD0BDE38E2FF375475851234F278
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa
Signing time:             Thu 21 Jul 2022 05:14:23 +0000
ROA not before:           Thu 21 Jul 2022 05:14:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        212.113.116.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1f:2d:ad:0b:de:38:e2:ff:37:54:75:85:12:34:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
        Validity
            Not Before: Jul 21 05:14:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83054f43ec39e472a1084a779a5fcc97a02d1ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:4e:42:b4:0d:7d:cc:fb:08:ce:63:8e:4c:
                    47:d7:da:01:7b:25:4a:1d:64:3c:18:4a:20:6b:e8:
                    d2:ef:7b:e4:11:b3:07:67:8b:c7:03:44:8f:9b:ce:
                    c1:c0:1b:54:64:dc:f9:27:ec:88:e0:c3:cc:c9:71:
                    96:2e:1f:40:ab:ee:a5:85:ca:e5:fb:3c:8c:fa:f7:
                    c0:6c:69:16:ba:1b:7a:70:0b:89:ab:a8:b4:c3:be:
                    62:a1:20:4f:0d:fa:46:2e:27:2e:84:b1:ce:db:52:
                    49:c5:ca:68:28:27:f9:95:6b:36:3d:30:69:d5:f7:
                    69:40:21:65:7a:c1:d9:57:1a:b6:12:de:ea:d8:45:
                    af:ec:7c:c1:be:5c:bf:82:12:c0:3e:1c:3b:32:85:
                    67:66:f9:8b:62:69:e6:c8:16:93:3b:b2:9c:9c:d5:
                    5f:53:3c:97:8c:15:81:a2:ac:93:d8:07:51:9a:eb:
                    3b:f5:ec:24:07:87:24:15:a9:ab:28:b9:81:db:e7:
                    d3:3a:a0:dc:ab:eb:9e:f0:d3:16:73:f3:e9:8a:44:
                    79:ad:44:37:77:2e:30:37:7d:c7:c1:48:5d:18:1f:
                    49:05:ab:e0:f6:1e:32:64:27:dd:0e:7f:17:45:a9:
                    2e:9a:3d:37:de:66:f7:d8:e6:42:b6:39:d0:d6:92:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:05:4F:43:EC:39:E4:72:A1:08:4A:77:9A:5F:CC:97:A0:2D:1B:A8
            X509v3 Authority Key Identifier:
                keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.113.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:06:ed:c0:8f:66:4b:c4:2f:2b:0f:2e:c5:1f:34:b7:92:1c:
         a4:2a:1f:5b:da:18:75:07:4d:b9:6b:8b:1e:9f:01:f7:09:98:
         7e:1d:20:c2:f5:95:e5:66:c3:cd:aa:28:b6:7f:d3:08:0f:5f:
         22:84:7c:9f:24:f8:b9:66:f4:81:af:07:bb:0f:59:11:82:4e:
         00:90:8b:a1:3a:7d:ff:75:e2:c1:db:37:84:c2:1a:cd:9e:9b:
         fc:c6:d6:02:0a:d4:b4:ef:f5:f0:81:2a:24:e8:ac:2b:a6:26:
         e5:83:52:a8:b6:96:ca:62:c9:b4:69:8f:b5:f8:d9:77:9e:f8:
         80:81:4e:e2:c8:39:b9:a0:5c:36:a6:78:9f:81:1c:26:24:4d:
         e9:9b:97:14:31:bb:aa:03:6b:30:84:a9:2c:54:6a:6b:c2:18:
         a6:06:ae:c3:a9:6d:08:26:49:e6:a7:33:7a:38:eb:cb:20:ba:
         22:03:c7:ba:3d:7c:5b:60:e6:70:96:d1:0a:29:8c:bc:3c:17:
         51:0b:32:75:27:ed:33:21:b1:10:76:3f:7c:ac:dd:e2:4f:13:
         6a:6a:33:23:1c:3b:38:17:05:8b:21:01:6b:95:75:d8:03:ab:
         19:e4:5c:e7:ed:51:0a:7c:9a:ac:7a:a4:b5:c5:be:06:5a:29:
         a6:46:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:56 2023 by rpki-client on console-ams.rpki-client.org