Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/ldhvRs1H1eNVu-O9YAArrijNb-w.roa
File:                     ldhvRs1H1eNVu-O9YAArrijNb-w.roa (raw, json)
Hash identifier:          rE7zrPtZU6v0e8A+1yYyeU2HWQsgsgAumXE2D0o22I4=
Subject key identifier:   95:D8:6F:46:CD:47:D5:E3:55:BB:E3:BD:60:00:2B:AE:28:CD:6F:EC
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       34E8F044
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/ldhvRs1H1eNVu-O9YAArrijNb-w.roa
Signing time:             Sat 01 Jan 2022 08:53:38 +0000
ROA not before:           Sat 01 Jan 2022 08:53:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        82.115.160.0/19 maxlen: 19
                          82.115.176.0/24 maxlen: 24
                          82.115.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887681092 (0x34e8f044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: Jan  1 08:53:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=95d86f46cd47d5e355bbe3bd60002bae28cd6fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:38:66:6c:3b:34:d0:ac:ea:11:85:13:7f:45:
                    64:1a:7a:03:2f:80:ea:80:10:75:9a:73:fa:fa:fd:
                    82:35:92:88:93:d6:c2:e0:67:c4:af:ba:b7:58:2a:
                    3e:b0:5c:38:d4:fd:58:ca:c3:c6:fb:d9:74:99:76:
                    51:9b:d3:b9:a6:1e:06:14:e7:67:38:85:c9:66:5f:
                    84:b5:8c:f9:4d:ef:b8:cc:4d:5a:98:51:3b:79:d7:
                    33:d5:7e:c4:13:43:4d:8d:da:bb:70:87:8e:98:c5:
                    8c:1d:ed:50:da:35:ba:ec:cf:dc:aa:e1:f8:d9:8b:
                    78:fb:b3:0e:5a:75:0e:16:92:a9:e3:65:c3:5a:da:
                    f6:a6:ac:05:b7:07:ea:a2:b5:e1:5d:49:90:29:12:
                    93:b9:da:03:7f:27:26:65:62:10:83:ad:12:0c:a0:
                    af:82:f1:ef:49:57:4a:9b:83:03:aa:1d:51:11:7f:
                    a6:e2:58:92:b6:9d:c3:3e:17:a8:fa:a9:8a:cf:5d:
                    90:c1:49:77:b9:f5:6e:3a:cb:07:02:1e:b5:7d:50:
                    d6:76:37:fd:73:4d:8d:c2:88:d8:f7:14:44:8e:06:
                    4e:68:36:af:dd:53:6b:36:fa:ca:eb:99:64:7a:47:
                    47:59:c8:bb:a4:d7:90:ed:9e:c8:b7:bc:87:60:4f:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D8:6F:46:CD:47:D5:E3:55:BB:E3:BD:60:00:2B:AE:28:CD:6F:EC
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/ldhvRs1H1eNVu-O9YAArrijNb-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:f4:65:80:7e:bf:16:11:0e:d6:3f:f5:60:81:06:4b:c5:31:
         80:c0:d5:4c:64:6b:ec:9d:32:b5:22:91:fe:3c:34:c7:de:27:
         2d:f0:b6:16:ba:fe:da:30:20:0d:6c:c4:ee:f6:85:67:c1:bb:
         5f:c1:1d:27:96:36:d2:7f:36:bf:a3:00:0b:53:aa:16:77:e9:
         c7:a4:a1:ce:cd:a1:80:a7:d3:0f:2a:20:d2:d2:65:d0:1d:c8:
         b3:eb:d5:30:d5:83:84:53:0a:ed:cc:5c:a6:f6:6a:62:4b:50:
         a2:75:26:0a:24:01:a5:8b:7c:17:4e:84:06:6a:86:a4:32:3f:
         ea:aa:20:af:3c:83:97:e7:3a:b6:8c:5c:35:02:15:2f:4c:bb:
         7d:49:14:3f:59:5d:e3:b7:85:89:ca:bb:db:43:cd:42:59:a9:
         df:11:51:05:87:28:61:42:83:89:7b:7e:c7:54:29:24:9f:6a:
         de:1d:44:3e:3b:7a:39:f6:09:41:f5:53:dc:f6:c0:1d:6e:7c:
         ac:21:9b:be:0d:80:17:33:22:62:36:fd:bb:2b:85:d5:a9:de:
         0d:b6:1b:e7:cb:41:49:fe:35:ca:57:66:f3:1a:35:d1:42:fc:
         1f:70:3e:71:a5:0a:f1:6d:d9:b2:91:18:c1:fd:70:71:7c:15:
         da:ea:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:43 2023 by rpki-client on console-ams.rpki-client.org