Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ti_DDwKaP4vqrgLT85as1wT4oFw.roa
File:                     ti_DDwKaP4vqrgLT85as1wT4oFw.roa (raw, json)
Hash identifier:          uHrNd3Wbw68ZWeVdBGGoEp7pPHFa9xqt7AC9aknNgyo=
Subject key identifier:   B6:2F:C3:0F:02:9A:3F:8B:EA:AE:02:D3:F3:96:AC:D7:04:F8:A0:5C
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0932AB69
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ti_DDwKaP4vqrgLT85as1wT4oFw.roa
Signing time:             Wed 11 May 2022 07:58:11 +0000
ROA not before:           Wed 11 May 2022 07:58:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        212.69.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154315625 (0x932ab69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: May 11 07:58:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b62fc30f029a3f8beaae02d3f396acd704f8a05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:9d:26:99:8f:11:f9:19:ce:85:af:f5:ac:
                    76:31:69:fd:cc:f0:c5:51:d0:16:21:17:d0:91:2d:
                    e0:79:89:b7:48:5d:03:a7:4b:83:00:e6:12:d7:fb:
                    c9:1a:da:21:e0:55:84:e1:96:0a:f0:b5:e5:c2:a5:
                    2c:8c:8c:c1:a6:db:a0:f8:46:b3:d5:2e:6e:4d:27:
                    31:b9:cf:a2:45:6d:4f:51:ae:24:96:a3:4c:bf:e3:
                    ea:b6:1f:9b:26:f4:48:30:cb:59:aa:20:8a:99:be:
                    b9:54:a6:96:a7:4f:d9:85:4b:fd:ba:f3:e9:14:3a:
                    1f:57:3f:38:4d:59:6c:a2:01:79:16:e6:f5:f0:4e:
                    e7:b8:2d:33:db:5e:88:f2:0c:80:10:01:31:e5:63:
                    d2:8c:59:24:f4:d6:eb:b7:5c:cd:87:37:5d:34:77:
                    b2:a9:5e:39:71:37:64:13:f6:6c:f3:3e:90:ed:e2:
                    46:94:1f:06:f0:c9:1e:9e:89:fa:be:1f:a8:ff:31:
                    26:2e:ee:df:b3:e7:b0:41:50:45:18:1f:16:dc:59:
                    3e:5c:67:2c:c1:cb:d6:a1:91:06:e0:cf:7e:a2:2b:
                    22:29:e6:76:2b:4b:02:3c:07:df:2a:36:b5:76:ff:
                    c5:b6:22:2f:a7:11:2c:07:36:c0:59:10:79:f4:16:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:C3:0F:02:9A:3F:8B:EA:AE:02:D3:F3:96:AC:D7:04:F8:A0:5C
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ti_DDwKaP4vqrgLT85as1wT4oFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.69.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:68:a4:c5:98:d2:5c:d9:5c:c3:5f:c0:c5:e2:99:67:bc:86:
         de:d1:81:6e:ad:63:73:6b:97:9c:e7:d8:39:f5:d8:1a:6b:55:
         b1:84:42:08:48:89:c8:57:f9:d5:1d:ba:df:5f:e0:3d:45:e0:
         93:29:21:08:a9:e4:56:c1:16:a4:46:22:75:d5:46:e4:14:f6:
         95:e0:e6:78:ad:a7:d3:d6:27:35:92:18:35:f1:21:3a:e4:34:
         fe:78:dd:67:ef:29:88:60:3d:58:cc:e4:3a:16:df:ab:5e:e7:
         15:b5:e8:1b:17:ca:e5:88:c4:7d:53:5a:06:d8:f0:38:2e:46:
         bb:b7:00:54:74:5d:fb:43:3f:13:f0:01:35:7d:78:a6:c9:ec:
         11:6c:69:56:d5:6e:9b:89:04:2d:ca:ba:3d:79:a5:ad:b2:79:
         6e:bc:1d:12:dd:bc:37:ad:27:b3:67:28:88:e1:47:db:6b:da:
         35:17:dd:25:9a:a6:10:fe:5e:9c:af:3c:07:13:d8:95:da:ac:
         3d:c9:eb:73:c5:21:a6:a4:ec:08:38:5d:05:62:94:f5:33:f4:
         e0:a5:fd:01:7f:25:df:bb:d4:68:a5:04:b3:97:c5:f5:52:92:
         6a:09:7a:b5:d1:e9:6e:83:67:22:25:30:00:52:df:d8:cf:f0:
         e3:07:96:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org