Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/vBSQhhj_37Kh2Mn0LB8FbOUO1T4.roa
File:                     vBSQhhj_37Kh2Mn0LB8FbOUO1T4.roa (raw, json)
Hash identifier:          G7P5Vf18usPp7jDsW6DD0the05FYyDQDvJGMkVv8ezM=
Subject key identifier:   BC:14:90:86:18:FF:DF:B2:A1:D8:C9:F4:2C:1F:05:6C:E5:0E:D5:3E
Certificate issuer:       /CN=6e83f698800d6ae719970adfaa4fb882fa5156df
Certificate serial:       0838BA32
Authority key identifier: 6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/vBSQhhj_37Kh2Mn0LB8FbOUO1T4.roa
Signing time:             Thu 24 Mar 2022 17:35:47 +0000
ROA not before:           Thu 24 Mar 2022 17:35:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.144.172.0/24 maxlen: 24
                          45.144.175.0/24 maxlen: 24
                          45.144.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137935410 (0x838ba32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f698800d6ae719970adfaa4fb882fa5156df
        Validity
            Not Before: Mar 24 17:35:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc14908618ffdfb2a1d8c9f42c1f056ce50ed53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:d1:95:44:c1:fc:94:43:41:8c:06:98:82:
                    47:0a:10:ba:66:d3:da:52:f4:e4:d6:2e:69:76:1b:
                    1b:6c:87:38:39:4d:ab:f9:34:e8:88:21:8f:f7:2e:
                    22:02:8b:6a:a4:8b:8e:48:a5:74:56:08:10:89:b8:
                    5e:d2:96:17:d9:73:e8:70:e4:b1:8c:be:db:83:df:
                    58:0f:8d:8b:fa:d0:41:c3:1c:0d:92:3a:0d:33:a0:
                    05:d8:a9:d6:aa:46:22:00:20:05:2c:69:ea:60:ca:
                    2c:3a:0f:0a:02:06:8a:c9:40:06:e3:b8:a5:0c:8d:
                    bf:ca:03:d8:35:76:4f:b6:7b:91:9b:77:a2:2c:a9:
                    bc:67:a0:26:56:61:10:b6:02:a9:d2:96:ea:4c:40:
                    02:e0:b9:a6:85:d9:b3:0e:05:14:79:b4:7f:7c:78:
                    5c:dd:af:c2:c4:4c:d4:17:ea:e1:69:ba:8e:10:7b:
                    70:ec:d1:26:b4:7b:06:55:12:2c:c7:48:76:1d:ac:
                    cd:71:7d:b9:ba:7b:4d:46:5b:ac:0e:d5:0a:be:14:
                    9d:5d:4b:99:f0:61:09:bd:51:67:90:57:f7:cf:0f:
                    a5:ad:fb:62:94:f0:56:71:90:e1:6f:a8:9e:d0:67:
                    34:e3:df:6d:55:1f:2a:93:36:e7:2a:08:ec:a3:9e:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:90:86:18:FF:DF:B2:A1:D8:C9:F4:2C:1F:05:6C:E5:0E:D5:3E
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/vBSQhhj_37Kh2Mn0LB8FbOUO1T4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.172.0/23
                  45.144.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:32:4a:52:d8:13:c2:ca:62:4a:99:08:54:49:a7:c8:b0:
         2f:3e:ba:22:af:b6:88:6e:df:de:90:4b:1c:5b:6e:e3:af:78:
         be:8e:18:89:37:47:2a:ab:ea:7b:83:f5:ca:46:6a:f6:7f:0f:
         25:b6:91:4d:6c:4d:d8:45:7a:f3:39:ad:f0:38:3e:5f:b8:f3:
         71:5b:05:f9:39:36:60:36:72:fd:68:eb:aa:3f:37:dc:db:6a:
         73:f0:e0:7a:69:63:63:45:9a:c4:5a:f9:30:47:3e:8a:59:bd:
         89:28:ce:bf:7f:e9:a1:89:e7:e0:b2:ff:d7:2a:44:36:33:81:
         e8:d1:66:33:a0:cb:da:66:6e:97:bb:c6:77:d4:49:8a:0d:c9:
         63:6b:ec:47:6d:48:e3:4d:93:d3:fb:7e:9f:f4:af:b6:8b:20:
         a5:b3:7e:c2:19:cd:7a:65:dd:e0:c5:42:b6:58:f5:d3:cb:f8:
         67:58:f9:56:51:ba:9c:8c:51:ef:04:2a:e7:86:35:8f:28:5c:
         d6:d5:66:34:ec:40:7b:5b:ea:7f:ef:a3:39:d1:ba:87:9b:17:
         98:af:4e:83:8b:ab:b2:df:4d:04:6a:b9:3c:79:54:1b:78:ca:
         35:a5:d5:11:8c:20:12:b5:55:4e:66:c0:21:99:41:c9:30:c5:
         7d:2b:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:45 2023 by rpki-client on console-ams.rpki-client.org