Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/a-Uit6VphtTO6NvXA6qrqRRnxcY.roa
File:                     a-Uit6VphtTO6NvXA6qrqRRnxcY.roa (raw, json)
Hash identifier:          7Mfww13J6usz88SKd3rnbGjPyEW81Uq6E4P/6kU4ntM=
Subject key identifier:   6B:E5:22:B7:A5:69:86:D4:CE:E8:DB:D7:03:AA:AB:A9:14:67:C5:C6
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       065B79A8
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/a-Uit6VphtTO6NvXA6qrqRRnxcY.roa
Signing time:             Tue 19 Apr 2022 14:08:12 +0000
ROA not before:           Tue 19 Apr 2022 14:08:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60006
IP address blocks:        79.133.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106658216 (0x65b79a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 19 14:08:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6be522b7a56986d4cee8dbd703aaaba91467c5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:fc:06:d3:62:47:73:30:09:e4:26:86:95:
                    68:f9:1d:37:75:6e:61:1e:41:25:b9:95:91:5a:25:
                    4b:72:ae:a2:71:15:a4:cd:23:99:3a:aa:8c:e3:ec:
                    a8:41:f9:25:7c:34:7b:e2:5c:b0:8e:03:a5:02:15:
                    ad:31:91:26:49:97:5e:ab:c5:6d:5b:e2:e1:91:a8:
                    58:ab:4a:74:97:63:00:ac:5a:d1:48:df:31:43:4f:
                    d2:9d:07:20:28:fe:dc:d1:33:f2:c3:35:d4:2f:22:
                    e2:d5:af:d7:ca:24:34:d2:b2:bf:7e:92:e5:db:a0:
                    b4:fb:ec:7d:b4:9a:6d:10:96:02:09:4f:74:55:f8:
                    d2:ea:08:2d:8a:9f:cf:51:d4:2c:a2:f7:6f:cb:15:
                    6a:dc:f3:6b:e3:16:f3:32:f8:32:32:af:1e:14:3a:
                    e2:ad:07:d3:79:fd:1b:56:47:e5:d0:38:89:f5:9f:
                    bc:a7:a0:de:71:da:10:ad:0b:ca:dd:c7:40:a3:47:
                    5d:f7:5a:35:2b:26:ce:93:28:41:df:62:81:8a:02:
                    46:00:61:1f:96:f0:3e:bf:82:6f:26:87:01:8f:e7:
                    e6:d3:85:d4:77:b6:e0:4c:4f:99:59:0b:63:ca:5e:
                    4f:ac:1a:5e:2d:96:6f:fa:8f:22:89:5a:56:57:51:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E5:22:B7:A5:69:86:D4:CE:E8:DB:D7:03:AA:AB:A9:14:67:C5:C6
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/a-Uit6VphtTO6NvXA6qrqRRnxcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:d5:6a:b2:1d:fd:01:e7:f4:f2:51:2c:ea:07:42:ba:68:
         89:ff:8a:b2:de:a8:8f:02:29:d5:38:61:d8:f7:d8:e6:c0:49:
         1a:ed:7c:a7:8a:89:e8:08:72:c5:78:b4:b7:6e:e3:63:93:40:
         a8:3e:be:f6:35:09:8b:47:c6:6c:5f:90:c5:58:b0:86:c7:ae:
         28:3f:a9:11:a4:80:7c:dc:a8:af:7e:07:a7:97:2c:b0:58:48:
         52:4e:09:51:ef:7e:f7:f9:cd:70:99:58:8b:07:ec:3d:c5:97:
         d7:58:46:32:58:47:f3:3b:7c:ed:a3:0c:52:61:fd:e2:f4:ff:
         8b:90:cb:83:1b:df:40:31:de:bd:f3:f1:70:be:46:22:4b:50:
         2b:71:b8:a0:76:f8:6b:15:46:83:a8:64:92:a6:92:2f:e6:e6:
         58:1c:08:75:36:4b:d7:37:ac:7d:ee:ec:bd:36:05:63:a6:47:
         02:ed:c1:d6:26:3d:63:f6:0a:60:dd:56:14:d0:bc:6a:3a:eb:
         5b:ba:5e:12:21:10:46:16:b3:dd:78:8a:a4:32:19:6e:c4:53:
         d0:3d:82:78:7b:e3:6e:c0:5c:0f:17:42:29:64:bb:22:bd:d5:
         94:b0:54:7a:b8:73:82:05:51:57:a5:99:ed:67:1d:24:b3:05:
         e3:dc:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:48 2023 by rpki-client on console-ams.rpki-client.org