Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/cryWoGnWCrL61d7Fo_ntBHY4m1U.roa
File:                     cryWoGnWCrL61d7Fo_ntBHY4m1U.roa (raw, json)
Hash identifier:          HRY5YGAx6bdQYIGi3qXe/4Dj9GkczVi9EzjOaP3cYz4=
Subject key identifier:   72:BC:96:A0:69:D6:0A:B2:FA:D5:DE:C5:A3:F9:ED:04:76:38:9B:55
Certificate issuer:       /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial:       01124F
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/cryWoGnWCrL61d7Fo_ntBHY4m1U.roa
Signing time:             Sun 22 May 2022 18:54:14 +0000
ROA not before:           Sun 22 May 2022 18:54:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44884
IP address blocks:        176.103.208.0/22 maxlen: 22
                          195.216.210.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70223 (0x1124f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
        Validity
            Not Before: May 22 18:54:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72bc96a069d60ab2fad5dec5a3f9ed0476389b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:2f:f4:56:3e:3a:b9:24:04:64:e4:3e:90:
                    92:07:eb:53:9b:12:de:ee:ff:39:7c:eb:db:35:63:
                    32:5e:0b:17:d6:2b:cd:77:d2:0f:2c:62:45:67:c2:
                    be:bc:91:50:01:db:aa:de:6c:f2:a8:ce:ac:3a:09:
                    b0:ef:4d:be:2d:3a:60:34:4d:82:8a:52:a8:5f:3a:
                    6d:d2:34:39:03:57:65:fc:2d:0a:77:6f:f8:e6:c0:
                    e9:26:ad:bc:c0:54:22:a0:cd:e3:4b:b6:15:bd:04:
                    1b:b8:f7:75:45:ae:05:c6:e9:7a:7b:45:e0:39:03:
                    ea:72:71:d0:8a:5e:fc:80:cc:11:71:61:37:fa:02:
                    7e:9f:e2:04:19:58:a5:68:51:50:3d:ed:08:0a:eb:
                    8d:e3:85:42:ea:62:50:7a:b4:2f:16:77:45:ac:a2:
                    0e:ae:8c:38:7d:59:f7:69:85:f0:5e:d3:c0:83:69:
                    35:11:87:03:0e:70:11:40:f3:63:24:6a:ae:ae:fd:
                    b7:29:0b:be:f9:98:9b:e2:f4:b6:f8:01:02:bd:56:
                    2d:49:1f:8a:9b:db:37:db:95:8d:0a:b1:84:d1:5f:
                    89:bb:46:e1:b5:13:58:1e:dd:df:7b:6c:f8:25:d8:
                    45:03:8c:83:45:a8:db:f0:8f:3b:74:0c:2d:5d:de:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:96:A0:69:D6:0A:B2:FA:D5:DE:C5:A3:F9:ED:04:76:38:9B:55
            X509v3 Authority Key Identifier:
                keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/cryWoGnWCrL61d7Fo_ntBHY4m1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.208.0/22
                  195.216.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:81:7b:e4:9f:2c:ac:22:de:13:39:ca:f7:2b:19:0e:9d:67:
         e3:a0:70:e5:af:64:bc:31:bb:43:88:ea:08:62:69:6c:1f:ff:
         b5:92:4e:41:ab:f3:b9:5c:30:3d:70:ee:6d:6d:03:25:38:a4:
         b9:da:79:18:26:78:27:1a:40:e4:51:92:52:d8:0b:f2:87:17:
         58:6e:e6:05:79:c4:91:83:62:0d:47:3c:6c:19:b9:79:8b:de:
         a1:38:65:d0:85:7f:5d:56:75:06:af:60:f0:9e:a9:16:b4:28:
         b8:81:1c:37:3f:01:a7:1c:2d:73:51:02:ad:b0:37:36:d6:e9:
         e2:46:66:22:a2:45:de:e5:2c:6e:6b:5d:f7:16:91:de:23:a4:
         df:27:b1:b5:53:8a:6a:75:15:3c:ec:cf:be:47:38:ea:43:85:
         7b:2a:49:ae:07:d6:23:ef:38:30:92:2b:d1:c3:30:d5:93:0c:
         c6:57:3c:09:53:fe:21:23:39:43:f9:64:99:dc:cd:32:08:bf:
         8e:20:8e:fc:1c:6d:6c:9f:e8:1d:f4:aa:a8:fd:13:96:59:f2:
         88:69:73:53:18:ff:5c:d9:00:49:c2:ae:a7:4f:88:0f:d9:ae:
         36:71:52:27:5b:b8:81:9b:78:0f:69:54:ce:2e:9e:7d:2d:e0:
         c5:f5:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:11 2023 by rpki-client on console-ams.rpki-client.org