Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/efx12B4kThBgS-0l50j8JM3cixM.roa
File:                     efx12B4kThBgS-0l50j8JM3cixM.roa (raw, json)
Hash identifier:          u5nmpQkWwLYBJ16FDRVc8JZSGJxtpcsMSSsvKSV84Wk=
Subject key identifier:   79:FC:75:D8:1E:24:4E:10:60:4B:ED:25:E7:48:FC:24:CD:DC:8B:13
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A7D2829
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/efx12B4kThBgS-0l50j8JM3cixM.roa
Signing time:             Sat 01 Jan 2022 04:52:01 +0000
ROA not before:           Sat 01 Jan 2022 04:52:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62258
IP address blocks:        81.15.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981280809 (0x3a7d2829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:52:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79fc75d81e244e10604bed25e748fc24cddc8b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:18:fa:46:84:b4:d5:2f:07:ae:30:d3:27:
                    ae:54:94:e2:03:80:16:bd:66:64:28:76:4a:0d:f8:
                    cf:bc:32:f5:62:80:d7:b0:65:a7:86:1a:9a:11:77:
                    58:08:c2:ee:1e:27:b4:9b:f3:fc:ae:0e:86:6b:a0:
                    43:73:92:7e:13:6b:10:84:ba:23:6e:f2:6a:55:34:
                    f3:d6:36:7d:57:6f:91:47:c8:4c:ca:62:5b:60:a0:
                    04:4e:e3:47:9a:79:ea:36:36:76:4a:58:bf:eb:b5:
                    7d:43:05:16:3f:0b:df:65:00:15:77:43:bd:07:68:
                    fb:ef:3a:c7:e8:63:9d:c7:5f:0f:cf:0d:37:a4:83:
                    2a:c2:5b:ae:20:53:1b:5d:1a:bf:87:41:aa:de:cf:
                    1f:5c:94:5d:b4:6b:36:d6:a1:25:5d:d9:cc:e8:3d:
                    ec:3a:79:ac:70:15:bb:e2:2c:68:b4:59:2a:aa:fa:
                    91:4f:b1:0c:c6:d6:71:c1:7d:ac:af:26:01:d3:70:
                    15:c0:fb:39:f9:c9:cc:32:87:a4:4b:d8:ad:60:c1:
                    72:aa:28:5a:7c:54:96:01:5e:62:0d:d2:95:a2:ea:
                    bc:69:98:45:32:1d:23:ff:8e:54:fe:6e:4b:5c:cd:
                    e6:b2:d5:e2:99:8c:7c:a5:a0:77:a6:79:4f:b9:21:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:75:D8:1E:24:4E:10:60:4B:ED:25:E7:48:FC:24:CD:DC:8B:13
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/efx12B4kThBgS-0l50j8JM3cixM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:b3:e2:5d:be:0d:bc:9d:59:07:21:7b:93:30:7c:24:f6:
         c9:cb:16:30:fa:a5:15:66:60:3a:07:48:63:74:ac:f3:6a:c9:
         d5:d8:01:ab:a3:0c:2a:ef:e3:b8:42:9f:3a:e3:ad:06:1f:77:
         12:b6:ca:51:c6:98:cd:f8:1e:dc:f0:f8:f9:ab:99:15:68:b0:
         b4:c7:c0:fa:4e:3e:66:ab:16:43:90:34:37:e3:7b:31:5c:7b:
         20:14:e6:ec:88:49:5b:65:9d:85:57:71:98:bb:27:67:61:1d:
         51:85:41:3d:33:3f:eb:3a:fe:64:c3:1b:0a:b4:95:7e:33:3f:
         1a:51:3e:7e:b5:1e:79:2d:25:33:24:a0:0f:94:1a:77:8d:d6:
         70:24:f2:dd:fc:27:65:7c:f9:4d:74:ce:3c:22:ea:0a:cd:73:
         1e:0d:b6:64:11:b8:25:09:be:b2:b6:69:a8:02:8e:65:ac:e5:
         21:8a:0d:58:f7:fa:b4:d4:8c:d1:e5:9c:98:7f:ca:0e:c9:35:
         ee:72:f0:4a:d0:0d:22:5c:e0:79:ec:a8:72:55:b2:7e:51:34:
         01:5d:31:59:d4:65:f5:04:e6:3e:e3:e4:16:74:40:3f:13:cb:
         56:53:86:df:0a:7a:92:01:b5:90:a0:b8:a5:e9:7b:2d:ae:db:
         40:0b:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org