Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/lmKLryBmMU8Y4yV2bMSeL0md6CM.roa
File:                     lmKLryBmMU8Y4yV2bMSeL0md6CM.roa (raw, json)
Hash identifier:          tIhIOhEmcmV/w1s5EPo2MBjsneRPgnnic2C7G07RBps=
Subject key identifier:   96:62:8B:AF:20:66:31:4F:18:E3:25:76:6C:C4:9E:2F:49:9D:E8:23
Certificate issuer:       /CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Certificate serial:       01824E7E198F238E6F2A08B08988F7176AB2
Authority key identifier: 4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/lmKLryBmMU8Y4yV2bMSeL0md6CM.roa
Signing time:             Sat 30 Jul 2022 09:44:23 +0000
ROA not before:           Sat 30 Jul 2022 09:44:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399641
IP address blocks:        62.204.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4e:7e:19:8f:23:8e:6f:2a:08:b0:89:88:f7:17:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
        Validity
            Not Before: Jul 30 09:44:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96628baf2066314f18e325766cc49e2f499de823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:72:e8:46:eb:d3:55:c6:d3:dd:2a:5a:72:
                    59:52:8c:80:e4:69:de:5a:9c:ff:0e:80:e3:15:ab:
                    02:b4:c2:70:90:28:dd:ec:c4:b3:9b:ac:4a:9a:d9:
                    07:3e:ac:84:de:f0:44:29:bb:5e:68:d3:63:7f:a9:
                    d9:98:14:2b:c8:fe:1d:ca:02:51:09:5b:04:c6:38:
                    bc:da:a7:5f:bf:2b:2c:40:e7:a4:90:d6:a3:1e:9c:
                    de:90:7f:7b:94:fd:c1:c0:e8:da:27:af:37:c7:e1:
                    34:a9:72:7b:70:8b:2f:bb:87:c9:df:b3:c8:aa:8b:
                    81:39:d5:12:df:ce:5d:13:c8:4c:b3:16:39:66:a9:
                    78:4e:22:73:cc:c9:46:4e:00:a4:96:53:1e:94:c9:
                    62:bb:89:2e:eb:d9:a8:d1:5d:35:38:4d:e5:7b:dc:
                    d9:91:af:15:4f:1a:a0:4a:8f:c0:28:6e:56:81:af:
                    8b:f3:58:d2:c5:7d:9e:21:ab:ba:ca:bd:cd:1e:02:
                    8c:3a:d0:86:d3:2c:9f:76:18:40:30:0d:51:dd:ea:
                    5e:55:78:a7:91:d9:1b:77:22:8e:ac:a1:c4:95:fb:
                    ab:85:f0:2b:eb:d0:cf:cc:21:13:04:58:9c:e0:a0:
                    be:2a:b1:b5:c1:bb:d4:8d:62:b6:75:60:04:a7:f7:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:62:8B:AF:20:66:31:4F:18:E3:25:76:6C:C4:9E:2F:49:9D:E8:23
            X509v3 Authority Key Identifier:
                keyid:4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/lmKLryBmMU8Y4yV2bMSeL0md6CM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/Tpn0wuvUl5v9RhUwo44jVAv5V40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:41:e7:a6:a5:99:b2:b5:08:ea:9a:3a:43:3f:f2:28:c7:b9:
         73:6a:c5:b9:63:15:be:6d:5a:c9:33:c3:ba:3e:8a:d2:81:1f:
         a1:ca:cb:19:bb:a5:fd:37:a6:27:e5:b7:e2:58:70:13:1a:ae:
         c7:6f:0d:aa:1e:7b:46:90:9a:6f:6e:8d:56:0b:03:57:e9:9f:
         80:d1:e0:7a:37:d3:2f:2b:e7:db:d9:57:b4:25:bd:02:31:03:
         61:87:16:a4:1b:ff:59:53:d2:49:f4:42:4c:3e:0b:64:fd:99:
         0c:8d:9c:54:f3:75:80:54:38:81:6f:ae:ff:dd:ee:ae:b8:7b:
         2b:b9:1d:c2:fc:ed:68:0a:96:e0:32:88:e9:96:1a:63:9e:7a:
         ba:ee:5d:8e:fe:34:a7:98:1c:7b:09:db:23:80:35:99:d7:33:
         4c:69:da:8d:f0:8e:ce:27:b1:da:e5:81:78:20:d2:23:12:03:
         b9:b2:f5:39:d0:6a:f7:c1:99:f5:e2:85:3e:50:dd:df:c8:e1:
         ae:db:9a:9e:cf:9e:5e:d3:88:ab:14:2d:5f:65:d3:ea:8c:e1:
         5c:c5:77:f9:2e:65:2d:ca:09:b0:7e:27:5f:0b:e1:0d:1d:89:
         90:52:1c:31:bf:f9:01:97:fa:65:45:77:74:c6:0b:0e:df:fa:
         81:bf:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-fra.rpki-client.org