Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zqyS5UkYn5f_hUq4_ViO8A_o95o.roa
File:                     zqyS5UkYn5f_hUq4_ViO8A_o95o.roa (raw, json)
Hash identifier:          IQV4zS/Qg3f7IurTnz0WERSQV96C/AjVK7gjsQc/0vM=
Subject key identifier:   CE:AC:92:E5:49:18:9F:97:FF:85:4A:B8:FD:58:8E:F0:0F:E8:F7:9A
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       0182A76BD154D214194AD19FF177EB75E551
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zqyS5UkYn5f_hUq4_ViO8A_o95o.roa
Signing time:             Tue 16 Aug 2022 16:10:37 +0000
ROA not before:           Tue 16 Aug 2022 16:10:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.80.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a7:6b:d1:54:d2:14:19:4a:d1:9f:f1:77:eb:75:e5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Aug 16 16:10:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ceac92e549189f97ff854ab8fd588ef00fe8f79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:b6:53:4c:fe:5b:3f:bd:f4:d8:c1:ab:9d:
                    e3:92:b2:11:71:56:93:02:4a:65:ad:32:09:ef:80:
                    6f:0a:23:37:fe:7f:42:39:67:b4:21:25:9f:0d:2f:
                    5d:9d:39:9b:a5:af:c8:3a:aa:98:d9:7b:5d:58:3c:
                    7b:47:c9:e9:d1:52:f5:44:78:4f:ee:37:f1:1a:dc:
                    46:6c:76:2b:74:54:91:4d:64:76:67:b7:71:74:61:
                    3d:be:cd:14:7f:fe:bf:cb:00:85:ae:8d:4a:6b:ae:
                    a8:67:b2:c4:64:8f:f8:df:3e:ec:a6:e6:67:a1:c5:
                    e1:67:ca:35:2d:b1:e8:7d:f8:61:a7:eb:3a:df:bb:
                    80:ac:ae:49:3d:cc:9d:a7:2d:7a:62:02:f4:2f:24:
                    7f:2f:54:26:3c:bd:28:11:c9:ec:d1:f6:c4:8a:fa:
                    b7:0d:5b:2d:42:67:a8:46:af:6b:fe:e7:93:bb:10:
                    d4:cf:3f:74:19:e6:c1:c0:26:c7:84:9a:73:48:2e:
                    49:d9:ae:9d:39:81:5d:25:1f:6c:aa:e7:6d:fe:83:
                    a5:15:0b:ce:56:c0:46:32:6b:61:81:35:39:9f:cf:
                    52:c2:3c:f2:a2:94:66:6e:2a:fc:0e:2a:27:ea:5d:
                    7d:e5:c5:54:a5:8e:17:af:78:47:3e:0b:0a:76:94:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AC:92:E5:49:18:9F:97:FF:85:4A:B8:FD:58:8E:F0:0F:E8:F7:9A
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zqyS5UkYn5f_hUq4_ViO8A_o95o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:27:0f:39:d8:3e:a4:13:2d:f0:45:0a:16:f2:47:bf:05:
         42:90:95:c6:ab:ab:ae:eb:a9:6a:55:62:57:33:a3:9c:f6:af:
         2d:6e:b2:66:ad:6b:b1:19:6a:de:ec:24:75:e9:ae:ea:08:91:
         ae:64:48:3e:b0:dc:fd:3b:92:14:4b:b0:95:96:76:93:a9:25:
         2a:52:92:fa:ad:51:c9:28:e2:bb:f7:bf:63:c1:98:8e:4a:c8:
         de:d9:d0:6a:a7:e8:ce:e1:8e:7f:7b:62:e0:cd:87:3b:b6:e4:
         61:01:f1:e2:fa:53:1b:a2:65:80:be:db:8a:a0:71:6e:b2:bf:
         cb:ce:b5:59:3c:0b:77:79:f1:1f:19:96:70:5d:9c:75:21:38:
         4c:dc:be:7b:7f:87:43:bf:c3:40:c6:5a:e4:ec:91:eb:77:dd:
         29:e1:8e:65:e5:68:64:76:41:73:94:c4:71:30:d7:2d:7e:11:
         7a:c3:0f:71:d2:c1:bf:0a:1f:22:d1:72:79:53:9c:45:d1:1d:
         25:d3:85:ec:b6:08:f9:ea:93:e0:3c:f0:1a:a7:cb:e4:d9:2f:
         a4:92:16:e7:57:4e:42:aa:27:04:4b:2a:eb:56:12:73:ab:8d:
         bc:9e:59:45:82:0d:11:43:e1:dd:1d:14:ec:cb:cd:f4:7c:35:
         3b:6c:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:05 2023 by rpki-client on console-ams.rpki-client.org