Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/2c8FKe15B_5MrJQuHVwP-2Tiszk.roa
File:                     2c8FKe15B_5MrJQuHVwP-2Tiszk.roa (raw, json)
Hash identifier:          somBt9m0Xr56U7PLGR863TN/ksHFIOfiNi55DWAZPv8=
Subject key identifier:   D9:CF:05:29:ED:79:07:FE:4C:AC:94:2E:1D:5C:0F:FB:64:E2:B3:39
Certificate issuer:       /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial:       0792A422
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/2c8FKe15B_5MrJQuHVwP-2Tiszk.roa
Signing time:             Sat 01 Jan 2022 03:53:48 +0000
ROA not before:           Sat 01 Jan 2022 03:53:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57986
IP address blocks:        45.15.201.0/24 maxlen: 24
                          45.15.202.0/24 maxlen: 24
                          45.15.203.0/24 maxlen: 24
                          45.15.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127050786 (0x792a422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
        Validity
            Not Before: Jan  1 03:53:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d9cf0529ed7907fe4cac942e1d5c0ffb64e2b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:76:48:2b:e3:fa:2c:5d:28:85:d0:c9:b2:f5:
                    f6:e7:b0:0c:82:b7:3d:d9:8f:f6:24:28:a7:0f:d6:
                    91:13:5e:07:09:c0:1e:c7:a8:d0:f2:3f:47:9a:ec:
                    f1:25:f3:1b:66:3b:d9:29:e6:3d:99:88:9b:88:aa:
                    db:03:4e:80:5f:5d:4a:fc:be:e9:c2:5b:83:ae:88:
                    95:c6:e6:6d:68:e9:aa:c5:c3:11:8b:f9:d9:46:75:
                    51:1f:56:99:79:27:ae:c5:42:bc:5c:c9:d5:5f:1e:
                    3f:bd:5a:83:74:f1:ea:67:39:f7:72:f2:b9:ab:90:
                    15:0f:bd:07:0b:31:3e:df:76:ce:dc:c6:20:90:d5:
                    a8:c0:24:f3:72:d5:58:e9:bf:70:60:78:87:bf:3e:
                    36:b3:98:53:2e:88:51:cc:f4:00:7d:c5:6e:76:cb:
                    cc:f5:54:c1:94:73:b7:78:68:dd:c2:6b:5f:6f:42:
                    a4:52:e3:05:f7:0d:37:ad:db:95:4c:49:e0:e1:74:
                    f2:65:eb:2a:b9:54:ef:28:1e:19:3d:51:1b:71:30:
                    49:58:18:b9:6c:0e:09:18:5e:09:b8:b8:af:4b:59:
                    ac:20:2d:23:b8:07:2e:d9:d5:c9:4c:50:3a:1d:8e:
                    c6:40:d1:c2:e1:ad:c6:85:99:66:fe:be:e4:94:d4:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CF:05:29:ED:79:07:FE:4C:AC:94:2E:1D:5C:0F:FB:64:E2:B3:39
            X509v3 Authority Key Identifier:
                keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/2c8FKe15B_5MrJQuHVwP-2Tiszk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:51:2a:4d:5f:a7:9d:90:f0:27:4d:dd:49:a9:a5:80:3b:
         7f:a3:43:f0:08:c4:7d:90:e5:24:d3:18:4f:b2:dc:61:64:c4:
         09:cb:1e:0b:fd:aa:1a:df:ef:71:7f:58:fc:bd:5e:07:1d:17:
         08:c0:97:e2:7c:0a:de:af:05:70:72:8f:e5:53:e0:45:31:00:
         9a:1b:fd:88:fb:fa:19:6a:53:6c:c1:a5:27:15:cf:d5:56:77:
         77:90:3e:49:fa:e2:93:bb:0f:8c:13:2e:e0:32:d1:6b:bd:ba:
         63:16:59:7a:61:74:68:ac:c6:84:d4:87:e0:58:e4:18:90:6a:
         e1:d4:dc:8d:b5:79:08:f3:8e:10:67:ca:2e:16:a8:3b:1e:bf:
         9d:f8:dc:d5:2d:76:11:69:93:d5:88:c5:cc:cb:60:05:86:d3:
         5b:d2:e7:4d:98:74:3e:0b:8d:54:db:d0:f6:06:ba:f2:a8:bd:
         5b:4d:b2:5a:21:37:d6:50:76:d0:e8:c1:65:03:ff:c1:2b:a0:
         58:d9:09:b0:30:01:aa:99:76:ac:7e:53:a2:61:c5:87:00:50:
         44:e3:bb:fb:46:69:ca:60:db:7b:96:38:3e:58:e8:69:2a:06:
         58:20:ff:69:33:69:1b:3c:7e:0f:f9:3e:c8:52:c4:70:bc:2b:
         96:da:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:20 2023 by rpki-client on console-ams.rpki-client.org