Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/VVwldcxpjWQpj0J-EChCMEAcEFk.roa
File:                     VVwldcxpjWQpj0J-EChCMEAcEFk.roa (raw, json)
Hash identifier:          oGIToDAh6bbyt1USePj8ihJARno9AMRv4gwxGt1kT5Y=
Subject key identifier:   55:5C:25:75:CC:69:8D:64:29:8F:42:7E:10:28:42:30:40:1C:10:59
Certificate issuer:       /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial:       03F9CC
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/VVwldcxpjWQpj0J-EChCMEAcEFk.roa
Signing time:             Wed 06 Apr 2022 07:14:46 +0000
ROA not before:           Wed 06 Apr 2022 07:14:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     32322
IP address blocks:        193.239.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260556 (0x3f9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
        Validity
            Not Before: Apr  6 07:14:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=555c2575cc698d64298f427e10284230401c1059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:60:1c:c4:9a:3a:a9:70:f4:f4:d7:3d:a2:
                    f2:0f:98:79:95:2e:ca:bd:65:43:4b:f2:9e:54:c8:
                    51:ea:45:7a:08:60:54:25:13:8f:56:06:3e:59:a9:
                    fe:01:bb:58:a1:9b:6d:e9:2c:91:f9:0c:b2:dd:10:
                    06:62:a8:5c:af:bb:d2:81:4f:e5:d4:4c:e0:3c:ec:
                    9b:a0:fe:c9:bf:41:37:12:28:9c:91:ae:2c:b0:62:
                    75:65:4e:62:be:d9:46:cb:28:1d:62:bd:0b:f9:37:
                    18:a1:97:5c:16:5d:4d:95:ed:ba:67:e0:1e:8c:47:
                    00:19:8b:e6:da:08:62:71:1c:2c:94:bc:03:ff:d8:
                    5a:c1:ea:3c:09:7c:b8:85:9d:3b:0d:95:7a:43:73:
                    50:13:5c:64:d8:2f:00:57:2b:6e:c8:51:eb:ef:2c:
                    4c:20:50:1e:97:a2:06:29:33:33:5d:e5:16:5c:8b:
                    e2:7d:93:c5:a0:bd:b9:7d:1b:48:aa:2e:59:6a:57:
                    da:72:5a:46:15:8c:79:3b:6d:6f:10:65:17:58:1c:
                    6b:56:b1:79:fc:ad:6f:c2:8a:ba:8a:1c:5e:57:b9:
                    3d:f6:88:09:bb:af:05:31:73:07:75:59:a0:ce:69:
                    e7:31:08:3d:e5:44:67:85:67:c8:44:1d:8b:bd:eb:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5C:25:75:CC:69:8D:64:29:8F:42:7E:10:28:42:30:40:1C:10:59
            X509v3 Authority Key Identifier:
                keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/VVwldcxpjWQpj0J-EChCMEAcEFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:11:0f:3c:a1:5d:1c:8f:1c:f2:18:c1:0d:d3:66:38:41:1e:
         f7:21:54:68:c0:3c:3e:17:8e:13:04:6d:6b:66:84:95:f2:f6:
         32:20:41:1c:96:9e:47:69:b5:2c:9d:23:1b:0a:dd:e3:d7:99:
         00:4a:23:60:2d:61:47:cf:1a:5a:2b:fc:c1:98:19:58:5d:5e:
         24:3d:30:14:35:83:52:09:bb:56:fa:94:d6:3b:91:dd:9f:15:
         9e:c4:7a:d1:37:10:97:97:c2:2e:b0:6e:8f:c4:32:c6:ec:56:
         15:9e:9b:53:29:ff:17:cb:7a:40:5a:1d:2b:92:ff:c5:31:bc:
         d5:ad:bb:cc:35:09:a1:13:fb:c4:a5:06:70:6f:26:0e:f4:55:
         fd:43:8f:6a:fc:65:02:10:2b:59:a6:9d:95:9c:0d:45:a8:fc:
         02:2b:79:e8:10:44:c7:b4:47:f7:81:c8:29:a9:24:80:86:76:
         93:41:87:ab:ae:ce:b0:c8:5e:3c:30:4c:cd:c2:8c:c3:2c:6a:
         c6:f9:0f:48:7b:a9:cc:9d:7c:9b:14:0f:13:95:f1:48:9f:f3:
         13:07:63:49:1b:73:d0:6b:d0:fd:96:0e:27:21:83:96:15:9c:
         74:eb:1b:2e:85:b4:1f:1f:c3:af:4f:3f:16:b7:3f:a4:61:b3:
         fb:83:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:09 2023 by rpki-client on console-ams.rpki-client.org