Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/vENpaZgzU9T5JELFdytEMC3SA6M.roa
File:                     vENpaZgzU9T5JELFdytEMC3SA6M.roa (raw, json)
Hash identifier:          ebXNq8/8NsS1p/CFMQ+wRx4JQJbY0nC2Q7ZMojuQ5+4=
Subject key identifier:   BC:43:69:69:98:33:53:D4:F9:24:42:C5:77:2B:44:30:2D:D2:03:A3
Certificate issuer:       /CN=c5483453041593075038881b8d5df31495d942b4
Certificate serial:       FAD055
Authority key identifier: C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/vENpaZgzU9T5JELFdytEMC3SA6M.roa
Signing time:             Sat 01 Jan 2022 07:58:42 +0000
ROA not before:           Sat 01 Jan 2022 07:58:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        178.22.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16437333 (0xfad055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5483453041593075038881b8d5df31495d942b4
        Validity
            Not Before: Jan  1 07:58:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc436969983353d4f92442c5772b44302dd203a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:86:89:62:b8:e1:ab:53:cc:42:1f:ce:46:
                    ff:f6:f5:ca:c5:3c:cc:4e:43:0d:e2:de:1e:a5:05:
                    d8:e6:b6:24:d0:21:2a:2a:fb:b9:b4:63:5b:bf:c9:
                    5b:79:6a:1f:09:be:f3:a1:60:cc:ee:e8:2f:b5:47:
                    71:97:39:8e:a3:86:f3:05:e3:13:13:07:88:0b:e2:
                    05:5f:6f:db:ec:52:f0:73:cb:23:40:4e:0f:57:b7:
                    8b:82:9b:d9:2d:fa:45:de:c3:75:d0:d9:ad:89:6e:
                    06:fc:4f:92:63:c7:fd:da:b4:12:86:d3:2a:51:1a:
                    79:a2:8c:25:1a:dd:1d:d2:ae:36:80:54:e7:d2:b8:
                    f4:27:02:91:bd:a1:45:93:df:69:22:07:76:72:d7:
                    c0:00:c6:36:01:b2:83:4c:89:c0:e6:4a:00:19:37:
                    19:a3:92:71:e0:27:5c:09:86:88:be:77:3f:89:e8:
                    5c:4b:7f:8d:8f:92:44:c6:a9:ea:05:a2:b5:c8:b0:
                    63:64:5a:33:89:31:22:07:1e:2c:ab:65:bf:c9:82:
                    84:0e:1e:ae:d1:b7:91:7f:bf:f7:c3:38:19:62:53:
                    03:9e:4a:9f:cc:22:db:7d:68:ec:1d:6d:7a:5b:32:
                    77:94:82:67:67:9d:10:0f:55:8c:fd:fe:13:73:22:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:69:69:98:33:53:D4:F9:24:42:C5:77:2B:44:30:2D:D2:03:A3
            X509v3 Authority Key Identifier:
                keyid:C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/vENpaZgzU9T5JELFdytEMC3SA6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:d2:1d:4f:d8:bf:64:f5:2f:bf:45:0f:f5:76:86:b7:e7:
         ee:d3:45:63:df:9f:97:25:ec:d1:06:cd:b8:2a:15:92:1e:7e:
         f0:6e:ae:ab:93:09:1d:af:0c:1a:d0:4b:63:3d:4b:ce:30:de:
         cf:0f:98:43:e0:bb:98:9a:01:02:50:10:25:d7:1d:2e:78:ae:
         65:c1:c9:56:b5:64:b0:5f:17:f1:3a:23:e9:56:97:e9:57:b7:
         b9:de:94:75:fb:95:27:4e:59:e4:ce:11:c2:a1:66:d9:eb:dd:
         69:68:75:1d:b8:87:b0:fa:ff:a8:f2:3a:b7:67:af:51:b3:eb:
         6b:40:46:02:21:63:5c:b1:11:16:93:db:96:85:9e:08:ab:09:
         df:ee:5a:19:6c:70:a7:52:3d:e8:32:c5:ee:d1:11:21:3b:10:
         7e:9d:9e:0a:9b:bc:31:25:8d:3f:70:64:16:6f:db:a9:2f:66:
         9a:69:bd:3d:40:01:65:2b:fc:7a:0c:46:97:e5:41:18:f2:2c:
         f7:9c:73:dc:36:e9:c4:b4:87:b7:b3:06:2a:a1:e6:b3:f8:ac:
         76:d5:51:17:ac:d2:38:2b:e4:dc:0c:31:3a:56:9f:05:be:94:
         a1:ae:93:23:8a:a3:f3:dd:c5:09:8f:34:89:1d:07:04:2f:ac:
         7a:00:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org