Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/2vt_rJ_RT6D-5CaEkZEUpXcS8Ow.roa
File:                     2vt_rJ_RT6D-5CaEkZEUpXcS8Ow.roa (raw, json)
Hash identifier:          BYDBkWiWz5TbDsD/0DXT+lBN5ly/ow9PsaOja2yecRo=
Subject key identifier:   DA:FB:7F:AC:9F:D1:4F:A0:FE:E4:26:84:91:91:14:A5:77:12:F0:EC
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       016DE2
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/2vt_rJ_RT6D-5CaEkZEUpXcS8Ow.roa
Signing time:             Fri 25 Feb 2022 05:57:18 +0000
ROA not before:           Fri 25 Feb 2022 05:57:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200551
IP address blocks:        37.157.31.0/24 maxlen: 24
                          77.73.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93666 (0x16de2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Feb 25 05:57:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dafb7fac9fd14fa0fee42684919114a57712f0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:dc:fb:d6:85:6a:49:e1:db:e1:b5:ea:59:
                    c4:65:6f:30:fe:6d:90:fb:ef:71:02:ed:d0:06:f9:
                    39:5d:0f:6c:cf:d2:b0:12:f8:95:8b:07:1f:13:ca:
                    71:f8:7b:fd:ef:f6:72:03:b0:cb:7b:b5:80:2a:c2:
                    da:31:c0:70:67:2e:3b:1e:b5:e1:6a:58:fb:f7:f4:
                    e9:13:c5:b1:ed:2a:53:d3:2c:be:f0:09:2e:99:42:
                    f1:ea:7b:cf:54:3e:38:ea:28:e1:46:c4:8e:87:e7:
                    09:c7:b0:ed:47:05:1c:cd:9d:b3:49:85:3a:c8:1d:
                    ec:a0:32:53:97:33:1a:81:95:4f:ed:52:a5:14:74:
                    78:f0:0d:f1:f1:fe:ce:72:51:c4:40:c1:60:11:eb:
                    61:ba:99:ab:33:06:40:20:fd:5a:dd:36:d6:0f:87:
                    c6:90:d1:bd:79:65:ba:7d:a3:59:7e:b0:72:66:f5:
                    e4:d1:39:c1:8b:b7:69:ee:21:d7:d2:48:5e:ed:2d:
                    3a:eb:bc:2a:60:1f:8e:b3:e7:0e:9d:f2:09:c1:3c:
                    ba:f0:e8:48:c8:8b:63:5f:a1:8a:6e:ce:46:21:13:
                    4f:81:3f:75:bf:66:48:66:af:cc:05:5a:14:7a:5c:
                    b7:97:e1:14:00:a8:26:65:a8:bb:b1:56:1c:0f:ea:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:7F:AC:9F:D1:4F:A0:FE:E4:26:84:91:91:14:A5:77:12:F0:EC
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/2vt_rJ_RT6D-5CaEkZEUpXcS8Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.157.31.0/24
                  77.73.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:05:eb:ae:44:8f:05:f8:52:9b:d9:41:8e:27:b5:83:ae:
         97:bf:d4:83:75:14:f3:70:43:27:82:cc:eb:f0:2a:bb:43:b5:
         20:55:a7:d6:67:cc:07:b3:55:13:3f:4c:da:d5:1e:9f:54:42:
         6c:a6:de:12:f9:98:fc:b9:cf:b8:39:11:ee:09:bf:8f:14:d7:
         5a:89:1f:43:fc:51:43:70:8e:e1:f9:9d:7a:72:33:17:33:d5:
         9d:f2:28:b2:88:f8:10:c1:9f:26:71:57:ee:75:56:3d:1d:09:
         e7:54:be:63:56:22:cc:ca:0c:7c:bf:e3:e2:da:53:3a:df:52:
         b5:f4:c8:e3:8d:5d:a6:46:87:07:33:23:ee:ef:7c:22:30:35:
         86:2b:c2:65:fe:4f:18:7c:f2:0e:77:55:9a:55:19:4f:6f:a9:
         15:42:33:bf:b2:a2:df:24:97:a9:6a:00:d3:fa:21:97:c4:61:
         66:d0:94:19:97:02:62:55:6c:9e:1f:2f:c1:de:da:aa:10:08:
         4b:27:58:c7:96:aa:a9:94:f1:c8:21:1c:f4:9c:38:5c:50:57:
         ba:b0:8d:1f:27:48:e9:3d:4b:63:55:13:a8:f1:8b:8d:5b:23:
         5d:29:1b:52:f3:f2:c3:cd:8f:1c:9e:94:3c:cf:44:f1:01:de:
         74:12:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:05 2023 by rpki-client on console-fra.rpki-client.org