Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0uDVkAR_TDhQWTcuhSqtvwwCDGs.roa
File:                     0uDVkAR_TDhQWTcuhSqtvwwCDGs.roa (raw, json)
Hash identifier:          qGv6ojSQ+xutzVEwGsLRqrNz8RHnJzF1n0brIJ0b+mA=
Subject key identifier:   D2:E0:D5:90:04:7F:4C:38:50:59:37:2E:85:2A:AD:BF:0C:02:0C:6B
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A92FA19
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0uDVkAR_TDhQWTcuhSqtvwwCDGs.roa
Signing time:             Sat 01 Jan 2022 04:52:15 +0000
ROA not before:           Sat 01 Jan 2022 04:52:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206411
IP address blocks:        88.220.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982710809 (0x3a92fa19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:52:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2e0d590047f4c385059372e852aadbf0c020c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:06:20:32:db:8c:d2:81:e3:8f:a6:2f:e5:
                    3b:83:90:63:d7:78:38:b0:a7:98:10:37:75:f2:e5:
                    e0:ef:08:a7:01:5a:3d:dd:a4:b8:25:d7:49:b4:85:
                    83:a9:06:6f:13:bb:68:75:46:b3:80:41:eb:c6:cd:
                    22:8b:41:f8:78:0b:21:9b:86:a5:6b:3d:a4:9e:98:
                    6e:da:ce:44:bb:46:27:7a:a9:c8:fa:97:56:d1:06:
                    10:22:59:c3:ad:75:47:be:7a:c5:a1:d4:8b:54:11:
                    3c:50:e4:ad:72:72:1b:c7:ae:3a:c9:46:44:7d:5d:
                    b1:99:d4:64:10:59:43:bb:6c:5e:14:16:64:aa:cf:
                    d3:a4:24:6d:93:c7:51:6e:ea:66:a6:72:a8:d1:30:
                    98:ed:a1:1b:f9:5f:16:af:15:d9:2a:ca:a8:d6:56:
                    c0:fd:51:14:31:a1:7b:84:86:f6:50:87:21:88:1b:
                    76:a4:44:ec:55:9f:b1:c4:31:13:04:cd:81:73:e8:
                    ed:b7:3d:de:18:52:85:54:55:d0:8f:16:5a:97:5a:
                    55:d7:10:a6:9a:5c:b9:7c:4b:da:ae:45:66:e5:92:
                    98:60:fd:62:66:69:50:8d:bf:a0:9c:43:1c:c4:7e:
                    90:c0:b6:54:e2:d7:06:14:4b:d6:ae:78:95:30:d3:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:D5:90:04:7F:4C:38:50:59:37:2E:85:2A:AD:BF:0C:02:0C:6B
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0uDVkAR_TDhQWTcuhSqtvwwCDGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.220.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:be:79:5a:b8:da:8e:24:35:3f:5f:78:8e:7d:9b:78:9d:40:
         75:d9:58:80:df:66:87:27:74:3b:0c:e9:28:4d:e7:94:c0:80:
         65:67:e5:a3:f5:d5:65:cb:6f:84:51:87:fc:d8:da:db:35:51:
         3a:c3:9c:22:ba:ad:50:f2:92:02:52:ca:88:43:bb:c1:a1:2c:
         24:01:05:12:4a:5e:1e:8d:26:7b:86:5d:a8:07:56:5e:27:26:
         a4:a7:75:5b:7c:d5:2f:6e:eb:a1:b6:20:a8:02:b4:50:1a:ff:
         37:3c:da:6c:53:e4:8e:8d:22:19:c7:6b:d0:68:44:68:cf:3b:
         5c:40:79:78:b9:df:74:24:84:2c:66:78:0e:5e:97:f2:e0:28:
         2e:ef:28:24:2c:fe:a0:cb:d6:04:ff:16:ee:b8:4e:c8:6b:77:
         c9:76:ca:d2:5b:18:20:cb:3b:1e:6b:39:96:28:3a:f9:b7:7b:
         2d:0f:8e:fd:70:d9:75:2b:03:7b:de:a9:73:50:b4:25:e2:b6:
         b2:6c:ae:df:31:bf:99:b5:bd:45:db:55:d4:fe:9e:8e:e2:b5:
         17:5e:5b:50:4b:1a:a8:2e:78:e3:d7:1f:55:c0:d2:65:29:d4:
         12:00:be:34:19:3a:e2:1e:ee:ad:ee:94:2c:fc:e4:d0:30:fe:
         87:d1:5b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org