Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/swbtsa0OmvunPHEC0m5ZyGDxhQA.roa
File:                     swbtsa0OmvunPHEC0m5ZyGDxhQA.roa (raw, json)
Hash identifier:          aKFVgGLceFpEJPC6MaxPsjjWcJROYohH/ZgS4XqDi80=
Subject key identifier:   B3:06:ED:B1:AD:0E:9A:FB:A7:3C:71:02:D2:6E:59:C8:60:F1:85:00
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       10C0C897
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/swbtsa0OmvunPHEC0m5ZyGDxhQA.roa
Signing time:             Sat 01 Jan 2022 13:02:20 +0000
ROA not before:           Sat 01 Jan 2022 13:02:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201044
IP address blocks:        213.199.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281069719 (0x10c0c897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Jan  1 13:02:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b306edb1ad0e9afba73c7102d26e59c860f18500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:69:c7:2d:44:9e:dd:23:94:ca:cf:31:9b:
                    bb:4b:f3:5d:95:75:af:66:b1:db:96:b5:c6:32:92:
                    6a:a1:2f:8b:8d:fe:b2:3c:61:01:57:2d:fc:86:7b:
                    cb:e3:cc:c3:26:74:f6:f7:4d:34:0d:b2:60:29:aa:
                    f0:f9:f7:03:63:3a:48:d3:26:6c:8a:4f:9a:c7:6e:
                    7c:99:c6:73:02:eb:39:27:55:4b:fc:a0:d3:4e:bc:
                    b8:8f:ea:44:84:48:3d:e7:c1:fb:7c:7e:c2:aa:59:
                    a0:c2:af:fd:76:0e:66:af:8c:bf:3e:4c:86:48:90:
                    66:73:d5:aa:8a:34:5c:b7:fc:08:50:b9:7d:88:41:
                    16:1b:6d:c7:b7:8a:aa:4e:dc:29:30:9f:56:07:37:
                    e6:22:45:25:6a:41:d8:82:2d:63:5a:25:d7:c3:a4:
                    39:b2:62:62:4f:ea:fd:e4:0b:50:ed:49:42:70:2b:
                    50:0c:0a:53:28:97:09:7b:78:a0:7e:48:a4:a9:1a:
                    b8:17:df:c1:6e:e3:3d:06:40:98:71:d0:ec:5b:f3:
                    56:10:66:5e:68:1a:c1:ca:26:7f:1f:29:d2:5a:d1:
                    27:b0:2a:24:56:d9:47:e5:3a:90:fb:75:1e:bf:5c:
                    5a:65:7b:bb:79:97:1a:a4:a6:3e:4b:19:84:86:8a:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:06:ED:B1:AD:0E:9A:FB:A7:3C:71:02:D2:6E:59:C8:60:F1:85:00
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/swbtsa0OmvunPHEC0m5ZyGDxhQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.199.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:68:c1:4b:4b:96:ed:79:a0:60:af:db:83:28:0a:76:ec:e7:
         09:ab:11:83:20:0e:a4:8a:54:63:6c:8f:14:95:93:4c:a2:aa:
         46:54:da:36:18:de:50:20:6c:c6:2d:eb:07:f2:c7:f1:b8:47:
         d7:1e:a6:9d:bb:6c:b1:44:31:9a:90:c1:dc:6f:9c:89:d9:22:
         b0:fe:18:55:a3:8c:cd:74:33:2d:5d:d7:f1:65:82:cc:fc:d3:
         9e:ba:1f:6d:b0:83:13:c0:96:f3:0b:68:9d:35:ed:cd:ad:b2:
         cb:cd:63:dd:5d:90:18:e6:83:16:93:6f:bf:fb:dc:64:f4:0e:
         53:7c:3a:2d:97:59:ec:e0:51:d0:e5:e8:01:c4:9a:7e:86:ee:
         c7:30:1d:4c:87:e9:34:b9:83:43:ea:46:17:74:a7:50:9c:3d:
         cd:fb:ec:73:95:40:e9:9c:0e:36:d3:0f:7f:fe:ff:f5:12:aa:
         41:f2:c9:85:c0:ac:63:04:c5:61:46:0a:97:dc:3f:b0:5a:3d:
         30:f8:ed:80:28:8f:ce:cb:8f:d1:76:fc:3d:33:ca:0a:39:2b:
         d6:bc:84:51:56:6e:e5:81:44:29:0c:2a:e7:c7:3b:33:89:44:
         93:51:ad:d8:a5:48:a3:1d:d2:22:5d:bf:cf:ba:49:94:fe:a9:
         bf:ca:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:56 2023 by rpki-client on console-ams.rpki-client.org