Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/AvZDcvBN0blTP5rSsJbEA6rKo8I.roa
File:                     AvZDcvBN0blTP5rSsJbEA6rKo8I.roa (raw, json)
Hash identifier:          oYagyTdV8Ks5wacy2txGKPpvk1QWpuhr+F1gxz2jT+U=
Subject key identifier:   02:F6:43:72:F0:4D:D1:B9:53:3F:9A:D2:B0:96:C4:03:AA:CA:A3:C2
Certificate issuer:       /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial:       04461611
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/AvZDcvBN0blTP5rSsJbEA6rKo8I.roa
Signing time:             Wed 02 Mar 2022 00:45:59 +0000
ROA not before:           Wed 02 Mar 2022 00:45:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5588
IP address blocks:        178.183.0.0/18 maxlen: 18
                          178.183.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71702033 (0x4461611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
        Validity
            Not Before: Mar  2 00:45:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02f64372f04dd1b9533f9ad2b096c403aacaa3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:88:6f:0a:bc:89:a5:00:3c:4b:e1:7c:cb:
                    dd:fa:3c:5b:20:bf:3e:1d:a6:1c:4f:90:b2:ba:a4:
                    a4:56:d3:ff:cf:f4:ad:f3:e1:60:6f:d5:e7:a3:63:
                    16:85:73:83:35:05:5d:00:02:9f:c7:87:41:ab:d5:
                    3a:8e:bc:ca:f8:93:ae:d9:ff:93:b6:7e:cd:4a:7b:
                    f3:71:d7:a0:63:56:cb:33:07:53:8e:5f:84:73:e7:
                    0c:60:e9:ca:80:52:c9:fc:35:6a:f5:c1:5e:58:0b:
                    56:c4:5a:50:19:d8:a5:05:0c:25:4b:70:c5:c7:f9:
                    69:4f:1a:92:27:f7:d4:28:ae:70:7b:f4:69:9e:5d:
                    8a:94:27:50:58:e5:7e:e6:5c:a0:c2:39:aa:c0:0d:
                    58:5c:eb:06:9c:ab:df:e5:7c:a7:2b:fc:c0:db:3f:
                    dd:7d:2f:f6:6a:85:29:c6:4a:c9:62:e5:87:eb:55:
                    19:b9:b5:43:94:58:28:e0:56:92:af:ad:fb:66:8b:
                    8c:11:d4:75:6b:f2:59:41:c4:e7:79:29:38:2e:4e:
                    59:a5:6f:04:1d:a3:2f:04:39:ea:64:27:28:5e:ee:
                    21:86:d0:25:b4:28:97:ee:b6:4a:89:2c:91:c3:66:
                    b5:3f:5d:94:b4:d8:1c:f5:af:dc:65:b0:aa:e3:0d:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F6:43:72:F0:4D:D1:B9:53:3F:9A:D2:B0:96:C4:03:AA:CA:A3:C2
            X509v3 Authority Key Identifier:
                keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/AvZDcvBN0blTP5rSsJbEA6rKo8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.183.0.0/18
                  178.183.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:3e:94:58:73:94:a0:c4:09:10:75:04:3f:fb:4b:4e:07:50:
         23:ef:1c:d7:4e:11:ac:80:5f:a7:65:9a:4f:82:62:17:2c:ad:
         35:34:bf:89:5e:63:a6:4b:d5:f6:6c:34:00:1a:09:5a:7c:69:
         af:80:d7:8a:24:60:d3:35:7d:d9:fd:27:ce:7d:02:a2:94:67:
         00:60:ad:52:a7:71:4e:f3:d8:82:0f:3f:dd:8e:24:ea:0c:e5:
         f0:0a:00:04:a3:28:78:ed:dd:bc:ad:97:0c:a4:22:7b:21:ff:
         e7:b9:c1:b0:f5:97:89:f1:b2:8f:f6:74:c1:0a:ea:7d:d1:82:
         41:9b:b9:07:97:84:35:28:61:67:96:cf:50:04:a2:c8:68:4f:
         0f:1b:d9:ca:12:ca:8a:4a:00:9b:68:49:93:a5:cb:e2:c4:88:
         20:44:d0:63:53:f6:5c:ab:4c:00:6c:f0:d6:b2:95:7a:7e:2f:
         03:49:cb:b1:e0:7f:6a:c8:81:82:eb:44:44:e6:32:6b:43:fc:
         8d:0c:ce:fd:92:6c:21:12:2a:b8:6a:3b:4b:76:5e:9b:d9:40:
         d5:10:ce:11:61:3c:02:22:a9:e5:e2:65:e2:b1:45:a6:de:7b:
         f6:c9:97:24:1d:fd:4e:8c:fa:a1:fe:8c:58:6c:64:bd:28:e2:
         e2:88:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org