Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/13K30QEDveineYgpWVLKo0o07Xs.roa
File:                     13K30QEDveineYgpWVLKo0o07Xs.roa (raw, json)
Hash identifier:          l8dpJLfdeMtV2B1MOSA1ljEUEnIjwWn6JPdGmt2ZJZI=
Subject key identifier:   D7:72:B7:D1:01:03:BD:E8:A7:79:88:29:59:52:CA:A3:4A:34:ED:7B
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       03CD63E4
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/13K30QEDveineYgpWVLKo0o07Xs.roa
Signing time:             Sat 01 Jan 2022 02:56:36 +0000
ROA not before:           Sat 01 Jan 2022 02:56:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210636
IP address blocks:        45.150.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63792100 (0x3cd63e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jan  1 02:56:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d772b7d10103bde8a77988295952caa34a34ed7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:b0:4b:2c:78:2f:f4:21:92:a6:c4:d5:5c:
                    9b:d7:a2:6f:58:3a:80:97:e8:70:8d:4b:c0:b3:1e:
                    19:71:b5:4b:98:98:de:cf:1c:d5:f1:c2:11:75:3a:
                    94:b9:17:d0:a7:0c:7c:6c:ae:22:f3:a8:bb:36:31:
                    7d:a9:34:6a:45:82:04:6f:08:c8:44:c4:67:63:64:
                    22:c1:4e:29:7c:a8:0e:b4:93:34:03:ae:b5:b1:9d:
                    31:40:56:1a:70:88:9d:ac:69:c4:4f:be:67:59:12:
                    dc:4d:94:a1:61:50:fc:a0:25:f3:79:dc:82:e3:97:
                    d5:92:c1:fe:0d:06:b7:80:05:8e:d9:2a:df:ed:79:
                    26:94:b7:eb:ea:fc:81:c9:8a:6b:59:39:27:75:fd:
                    27:db:d0:8b:44:01:2a:07:45:e4:50:72:67:e5:ad:
                    e1:7c:73:e7:12:a6:cf:ba:74:c2:e3:16:93:9f:61:
                    fd:29:57:d2:e4:08:7b:b5:a9:8c:7d:27:d6:53:07:
                    66:79:d9:7c:3c:71:64:14:e9:8f:37:e4:7d:11:a2:
                    40:27:c1:f5:3b:95:d5:eb:72:79:1e:4b:b0:82:fd:
                    e8:eb:f3:db:a5:9b:34:41:a4:fc:03:ea:b5:71:24:
                    18:73:2c:92:87:e5:9a:24:6a:a2:b2:9a:c5:d8:31:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:72:B7:D1:01:03:BD:E8:A7:79:88:29:59:52:CA:A3:4A:34:ED:7B
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/13K30QEDveineYgpWVLKo0o07Xs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:16:cc:57:f2:c5:f2:7e:5f:c6:b1:fb:69:8f:dc:80:6a:bf:
         d9:c7:4e:3b:ef:aa:fa:f9:84:5b:ed:5a:47:73:63:b5:b5:45:
         0f:0a:1c:be:9b:26:f4:f7:55:5b:ce:84:fd:28:3b:b0:0a:30:
         45:ab:33:13:4e:2a:6d:96:e6:42:03:04:a0:99:dd:70:61:f1:
         4c:f7:25:99:7f:a9:da:70:49:f6:b7:36:ca:85:e8:c5:dc:ba:
         34:bb:89:a3:fd:35:84:c1:91:00:91:9f:c1:1a:be:ed:4b:1b:
         d7:bb:70:82:ad:d9:ca:aa:3a:48:6d:ab:61:ff:47:9b:56:a2:
         31:68:11:21:fd:4c:df:27:e6:d3:19:df:80:59:1b:4f:6a:7c:
         56:d2:08:bb:fc:60:e5:91:4c:39:10:c9:e8:ba:29:92:dd:96:
         2d:a1:b3:28:53:c5:98:e1:27:d5:09:fc:65:7f:86:cf:a9:40:
         b7:64:9a:90:b3:e8:f8:57:6b:39:dc:ea:c7:9e:81:76:f3:90:
         dc:c7:bc:1a:87:95:c1:9c:a5:b5:b4:90:83:75:04:8f:38:38:
         44:e8:c4:52:5f:10:3f:12:05:2a:2e:af:84:97:65:f8:79:f5:
         d3:f2:1e:08:0f:f8:9c:f3:43:a3:c2:b2:cb:f4:f5:90:ce:12:
         65:96:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org