Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa
File:                     bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa (raw, json)
Hash identifier:          0Lxu0bTOenBhOk96FaoukP/Sciaua+cOdCrLGXWMTIA=
Subject key identifier:   6C:18:30:05:39:02:2B:20:98:6B:60:19:DE:BF:72:96:E7:E6:43:83
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A7B995B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa
Signing time:             Sat 01 Jan 2022 04:52:00 +0000
ROA not before:           Sat 01 Jan 2022 04:52:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60844
IP address blocks:        81.15.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981178715 (0x3a7b995b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:52:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c18300539022b20986b6019debf7296e7e64383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:e9:1f:cd:b2:14:75:e2:cc:72:fd:06:2b:
                    67:98:fe:ed:e7:39:95:5c:ff:df:91:01:76:53:83:
                    e7:99:20:7a:da:02:4a:cb:c5:06:61:00:81:bf:af:
                    b2:1f:a3:30:78:3b:2b:39:05:0c:27:9c:68:c8:f5:
                    5c:84:35:ea:9b:60:58:a6:c2:03:f0:56:88:f8:92:
                    a1:db:6c:23:e4:cc:d4:c5:a1:c8:d8:4a:72:f5:74:
                    0b:24:83:c7:a0:cd:d5:15:45:09:bd:6e:d8:ef:ec:
                    c8:18:b5:f4:e4:4a:3b:3e:be:ee:38:7b:f3:89:22:
                    49:74:26:e0:81:8f:9a:9a:9c:6f:88:10:e2:63:02:
                    aa:77:ad:85:fe:22:9f:52:95:5e:fc:47:3f:71:22:
                    48:d1:d0:d2:95:eb:f9:bc:6e:ee:7b:33:c3:8b:98:
                    32:31:9a:e6:55:3a:f8:8d:fc:5e:34:7f:d1:8d:41:
                    57:13:30:a2:46:57:a0:75:02:1a:40:e6:70:16:60:
                    20:79:23:bc:ff:96:30:eb:21:79:08:4d:e5:16:0e:
                    db:fe:11:0d:cd:7f:00:d7:d4:be:9a:20:5d:47:f8:
                    1e:60:92:21:eb:cc:8e:d6:38:fe:76:2e:43:5e:4d:
                    84:9c:67:52:5f:ca:0b:5d:d6:0d:76:6a:57:1a:54:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:30:05:39:02:2B:20:98:6B:60:19:DE:BF:72:96:E7:E6:43:83
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:84:72:1d:3c:dc:57:dd:d8:e4:11:5d:19:b5:78:15:43:
         1b:96:f1:f9:b0:b8:74:00:95:6f:6d:63:b5:9f:89:06:6e:61:
         da:f5:84:5f:19:dd:b8:f1:57:60:94:13:e9:47:dc:f6:fb:57:
         5e:44:99:b4:38:83:9f:e5:5e:65:f0:b5:ce:f9:57:c6:c8:af:
         cb:1c:8d:2c:80:85:a0:46:48:c3:b0:63:40:e6:59:fd:8e:8b:
         e1:2f:34:8f:d0:13:78:6a:9d:b2:be:28:88:8c:6c:2f:6d:8d:
         2a:81:5c:b9:28:29:5d:62:35:3f:1f:34:63:70:11:04:44:b8:
         c8:24:77:bd:a3:8d:ef:6d:07:f9:08:21:a7:35:fa:4d:77:bb:
         e2:6d:90:0a:60:c2:b7:00:1f:2e:59:6a:9f:89:57:d9:98:cf:
         82:28:f0:db:39:fe:81:6b:04:81:c2:bd:0a:da:84:1b:58:fd:
         dc:79:9c:87:be:4e:c4:f1:bc:53:b8:ac:98:27:5d:5e:7a:08:
         b6:6d:2e:d9:01:1e:55:16:01:96:ab:0b:08:8c:a5:b3:e5:a9:
         ce:86:c6:4c:f6:1e:68:9c:cc:76:87:70:71:7b:35:f2:74:25:
         ec:99:bb:69:7b:37:62:ec:a9:72:b5:64:10:0a:c0:ed:31:c5:
         c0:54:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org