Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_6__xawkjtkFxfusul-VvHetZY8.roa
File:                     _6__xawkjtkFxfusul-VvHetZY8.roa (raw, json)
Hash identifier:          Zlii48DS7nfuvva4YZXRMv9ANGC/MUA4HDRDwLJQPxM=
Subject key identifier:   FF:AF:FF:C5:AC:24:8E:D9:05:C5:FB:AC:BA:5F:95:BC:77:AD:65:8F
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       13A89805
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_6__xawkjtkFxfusul-VvHetZY8.roa
Signing time:             Tue 08 Feb 2022 09:22:40 +0000
ROA not before:           Tue 08 Feb 2022 09:22:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60025
IP address blocks:        185.36.192.0/22 maxlen: 24
                          82.115.31.0/24 maxlen: 24
                          82.115.30.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329816069 (0x13a89805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Feb  8 09:22:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffafffc5ac248ed905c5fbacba5f95bc77ad658f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:2f:64:bd:bb:f1:28:2d:4d:a3:31:7c:2c:
                    8e:ac:6a:20:cc:37:32:eb:4e:e6:c9:81:eb:69:28:
                    81:4a:c8:78:ff:98:0c:2b:dd:9a:ec:1c:7a:c0:d1:
                    8d:94:b0:e8:a3:5c:41:c7:28:83:fb:62:93:a0:7d:
                    67:aa:c7:aa:9c:96:1c:cc:75:21:b0:46:95:45:60:
                    1b:b9:0e:d4:cd:b8:55:2b:19:9c:03:a1:3c:3f:4c:
                    24:24:4a:d5:04:2b:b2:cf:75:51:46:bb:2a:f4:f3:
                    7e:b2:6e:d1:d9:5c:61:d4:38:c0:9f:0d:9e:92:56:
                    84:33:61:42:5d:db:a3:73:c7:52:05:c8:c0:df:94:
                    99:8f:5c:30:a8:04:bf:d7:f7:ee:a3:fd:b3:5a:74:
                    10:8e:8e:53:12:dd:63:a8:16:d2:4f:66:b7:37:a0:
                    d0:38:0a:bf:0d:05:86:e0:52:07:04:f3:23:77:2b:
                    44:e2:cc:2e:7c:0f:fd:93:3e:59:bf:c1:f3:53:e6:
                    10:0a:c7:08:ac:0e:da:2f:cb:22:80:a2:9c:db:c6:
                    e7:5e:7a:b1:a3:3e:41:58:32:a0:70:42:9c:2b:46:
                    a0:e3:eb:1c:52:5d:96:2e:9e:cf:7c:40:fa:9a:1b:
                    7f:19:63:3a:5a:c0:8f:39:9a:12:9a:84:75:9e:14:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:FF:C5:AC:24:8E:D9:05:C5:FB:AC:BA:5F:95:BC:77:AD:65:8F
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_6__xawkjtkFxfusul-VvHetZY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.30.0/23
                  185.36.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:83:ba:a8:c0:24:56:ba:fb:55:87:ec:68:7f:41:48:f6:08:
         a7:87:89:e0:a8:29:d3:3e:47:c9:85:cd:e2:7c:29:78:81:18:
         ad:e6:3a:39:16:bc:40:a8:f9:56:5f:c8:b4:b4:01:16:bf:29:
         36:7c:b7:b5:a2:88:d1:47:cb:21:66:1a:65:04:9e:4a:40:eb:
         54:74:08:30:24:47:b2:f3:2c:cd:bc:4b:78:e2:26:a4:8f:f2:
         94:db:a6:63:d0:b5:8f:26:3e:fb:e5:60:45:0f:3a:23:97:b9:
         a3:58:a6:fd:75:5a:57:f5:7c:9b:cf:ab:9f:28:b6:17:61:f4:
         38:b4:49:b2:78:39:d8:f8:83:19:78:f0:ae:4f:16:5e:ac:de:
         94:6e:35:16:3e:b6:9a:13:ef:28:42:c6:75:7f:ba:52:dd:9b:
         23:28:45:54:63:e9:d1:f5:5a:8f:76:ba:e8:07:cb:d7:10:02:
         3e:86:0c:84:42:21:8c:26:f5:79:ee:26:b7:85:ef:31:16:40:
         d1:75:6e:a9:5f:ae:1d:49:a5:19:77:67:6d:86:fe:cb:d6:42:
         a3:bc:e5:a9:b4:e9:9c:f6:a0:9c:81:31:43:fa:bb:64:81:40:
         d1:00:7a:c4:53:7f:b8:55:d4:15:a7:29:8b:8f:37:0d:af:08:
         4e:b2:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org