Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jigv-mWY9gIKKFUaF8kZPi_JdXY.roa
File:                     jigv-mWY9gIKKFUaF8kZPi_JdXY.roa (raw, json)
Hash identifier:          c/htL3EhHsLbhTmvxe8oRLjiQViHw5HdgPZKUgu6Tig=
Subject key identifier:   8E:28:2F:FA:65:98:F6:02:0A:28:55:1A:17:C9:19:3E:2F:C9:75:76
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A6877C0
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jigv-mWY9gIKKFUaF8kZPi_JdXY.roa
Signing time:             Sat 01 Jan 2022 04:51:48 +0000
ROA not before:           Sat 01 Jan 2022 04:51:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33806
IP address blocks:        195.136.182.0/23 maxlen: 23
                          195.136.180.0/23 maxlen: 23
                          195.136.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979924928 (0x3a6877c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:51:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e282ffa6598f6020a28551a17c9193e2fc97576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:ab:b5:ef:ff:d6:59:9a:09:ad:18:26:85:
                    e3:5b:62:52:b7:66:a1:fe:8a:65:fd:a3:d6:f4:38:
                    80:02:9d:98:89:ff:70:31:d2:d9:d1:e6:98:2b:7b:
                    50:f3:93:f2:7a:e1:c6:1f:6e:48:31:c0:ed:48:6d:
                    27:ad:24:07:e3:00:86:5e:1a:91:6f:14:ec:2c:b1:
                    45:59:bc:c4:81:be:61:d7:3f:d7:fd:54:9f:c6:6a:
                    0f:58:8a:5a:21:03:b9:09:c6:f5:b6:ee:1d:17:b9:
                    d2:d5:b4:48:34:36:ad:b0:21:f1:04:de:01:e9:fe:
                    11:50:a1:5b:2b:e5:9a:d0:37:75:27:26:f7:62:6d:
                    e5:bd:8e:91:35:25:c3:ec:51:9a:59:b6:46:87:33:
                    82:86:1a:1c:35:18:01:4b:cc:f8:f5:98:64:2d:7e:
                    ff:6f:61:bc:30:6d:01:85:e3:3e:97:0a:78:35:c0:
                    50:82:03:e1:93:0f:4a:63:95:32:e3:97:2e:ba:38:
                    56:50:c4:15:a4:17:66:f7:8d:f6:65:37:f3:c7:4b:
                    ff:90:07:d1:26:ed:70:ba:25:63:eb:52:c5:6d:fb:
                    ad:8c:e2:b9:c1:3c:2b:ce:c3:a0:8e:77:c0:cd:32:
                    82:9c:28:22:91:ca:e7:8b:13:d2:6e:f0:7c:ba:b7:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:28:2F:FA:65:98:F6:02:0A:28:55:1A:17:C9:19:3E:2F:C9:75:76
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jigv-mWY9gIKKFUaF8kZPi_JdXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.136.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:23:9a:80:ac:a7:cb:2f:06:18:d2:20:55:64:0c:02:d0:a1:
         84:d2:ad:c5:62:79:be:fe:b6:bf:a6:ee:df:57:3c:3f:f1:a9:
         88:9c:a4:5c:5c:83:6a:78:4c:8b:5c:f9:52:b5:fa:3e:a6:48:
         15:8b:32:94:9b:96:ab:0d:db:70:9e:b8:bb:12:bd:f9:a0:1a:
         56:28:33:99:6c:94:3e:bf:2e:e4:17:35:32:0d:77:6d:67:e8:
         1c:b5:bf:6a:59:72:14:11:53:b6:45:fb:34:89:be:cb:ea:15:
         43:32:50:46:3b:4a:1a:af:4c:f3:d0:bd:fb:45:ed:ee:04:b5:
         60:6d:b8:0e:af:26:01:53:89:97:a4:0f:0f:8c:7d:23:3e:d3:
         04:7e:cb:82:5f:f6:49:79:91:10:f2:ab:8c:b4:c9:af:08:0c:
         e3:ec:94:01:34:02:c7:fa:18:82:9e:12:29:a9:be:1f:7b:2b:
         01:ac:8f:9c:41:69:79:28:96:09:19:36:7b:5b:ee:60:9b:ac:
         94:72:bb:b3:82:a9:1a:97:b9:bf:e4:21:9f:9b:1a:21:33:d2:
         e8:be:ac:a1:8b:66:0e:43:2d:39:82:80:c4:9c:5b:9e:5f:8f:
         6c:b9:8a:7a:6b:71:73:c6:32:34:fc:91:e1:24:4c:18:ae:f8:
         6a:9a:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org