Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bt-mu1xnc97RW62OhgEX4JwLN1s.roa
File:                     Bt-mu1xnc97RW62OhgEX4JwLN1s.roa (raw, json)
Hash identifier:          M7d0o0RSF3sn0e4l3tHJOiHfugAJ10RwPvuW25ih4c8=
Subject key identifier:   06:DF:A6:BB:5C:67:73:DE:D1:5B:AD:8E:86:01:17:E0:9C:0B:37:5B
Certificate issuer:       /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial:       01AC0B1F
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bt-mu1xnc97RW62OhgEX4JwLN1s.roa
Signing time:             Sat 01 Jan 2022 00:52:21 +0000
ROA not before:           Sat 01 Jan 2022 00:52:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45671
IP address blocks:        194.15.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28052255 (0x1ac0b1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
        Validity
            Not Before: Jan  1 00:52:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=06dfa6bb5c6773ded15bad8e860117e09c0b375b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:81:18:37:ca:37:28:35:40:50:1c:a0:80:
                    f5:e5:2a:09:ee:c7:c7:a1:c9:ea:26:5a:48:22:6c:
                    13:10:e0:9d:7b:f7:08:8e:ec:a0:48:3d:29:c4:97:
                    b4:a5:cc:36:e0:95:c2:79:73:76:86:f9:a7:f7:2d:
                    01:2b:31:af:2a:b8:46:04:68:6a:4b:ae:46:6c:7b:
                    6b:c5:99:11:d2:5e:0c:83:4a:a7:d2:fb:0b:10:47:
                    44:46:1b:17:c8:14:1a:cc:b6:48:10:be:b9:2a:86:
                    f1:af:1a:04:0c:8d:ab:1a:3b:3d:63:6e:d5:b4:4f:
                    b2:90:c0:34:9b:07:bf:b2:9f:28:7e:c1:8f:20:36:
                    32:f5:48:83:0e:af:ee:57:41:a4:2e:7a:ed:52:3e:
                    82:d2:16:16:15:c7:13:0d:01:02:e2:c0:ba:1f:ae:
                    ce:ee:03:b6:a0:90:65:b9:2d:d2:d7:25:df:5e:82:
                    91:04:bc:95:73:46:87:70:4f:74:2a:ce:2e:b6:80:
                    45:43:61:9c:c6:3c:dc:7a:7d:07:d4:c9:00:02:3b:
                    b3:ff:b3:31:4c:12:6f:c7:fa:3f:87:07:90:1c:aa:
                    05:3e:7b:17:7c:12:61:4e:b2:fd:f7:c9:ab:47:f9:
                    b5:b4:bd:a4:fd:47:a2:64:5e:ee:3a:2e:dd:c6:fd:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DF:A6:BB:5C:67:73:DE:D1:5B:AD:8E:86:01:17:E0:9C:0B:37:5B
            X509v3 Authority Key Identifier:
                keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bt-mu1xnc97RW62OhgEX4JwLN1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:91:43:37:e9:d2:55:a4:05:ac:8d:a6:5b:a6:ac:bd:91:ba:
         9b:2e:42:5d:07:3b:d0:39:fd:2c:6c:d7:ca:cf:ab:96:84:56:
         e9:db:98:a2:01:94:15:29:cd:73:0d:0e:1a:00:ad:fe:cc:85:
         f7:0b:72:72:98:ac:34:a1:9b:48:21:06:19:6b:ac:22:ad:82:
         e3:a8:83:8d:96:a7:48:ff:8b:e4:5c:a3:3b:91:4a:01:63:8e:
         13:47:36:de:58:ad:b1:bc:d6:a2:9a:45:f0:97:e6:79:1d:58:
         83:99:4d:3b:68:de:26:44:7a:ae:c4:b0:49:5e:9d:c9:7e:ea:
         02:e3:63:cb:93:cc:c1:ea:2c:f2:68:af:56:58:2a:0a:36:1e:
         04:ba:b6:79:fd:99:b7:1b:a8:8b:e0:0a:6d:bf:7b:48:ee:05:
         a2:14:0b:48:62:47:df:76:f0:6b:7d:22:b2:7e:34:e7:03:c7:
         4c:e4:ce:65:f1:4a:08:1f:f1:50:b4:7d:22:4a:25:b8:eb:e3:
         13:b8:78:b4:e2:da:83:cd:ae:ac:7d:c6:f1:2a:84:a6:45:fe:
         fb:e2:f9:cd:15:ae:6e:26:e6:89:a0:09:da:8a:cb:36:be:aa:
         58:c4:fb:c8:58:d1:43:4d:d3:a5:f6:5b:6c:97:6d:1f:2c:88:
         c4:d7:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org