Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UIEUtE5CBL40U8ul2sQbgiX9GVI.roa
File:                     UIEUtE5CBL40U8ul2sQbgiX9GVI.roa (raw, json)
Hash identifier:          I6lHp5ERXIoa3uemlKT4YBxHcvT6T0gSiaTRs7I1L+s=
Subject key identifier:   50:81:14:B4:4E:42:04:BE:34:53:CB:A5:DA:C4:1B:82:25:FD:19:52
Certificate issuer:       /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial:       1244AE1A
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UIEUtE5CBL40U8ul2sQbgiX9GVI.roa
Signing time:             Tue 01 Feb 2022 16:19:40 +0000
ROA not before:           Tue 01 Feb 2022 16:19:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201849
IP address blocks:        185.62.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306490906 (0x1244ae1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
        Validity
            Not Before: Feb  1 16:19:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=508114b44e4204be3453cba5dac41b8225fd1952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:27:63:df:fb:1e:ee:62:5c:e5:04:50:6a:
                    72:3c:33:8a:43:38:d6:42:7b:f0:b8:ce:f9:1d:7a:
                    ad:f0:fa:90:aa:69:e9:73:08:a3:a9:8c:df:61:88:
                    e4:66:ce:bf:33:3b:7b:cc:00:f7:28:74:39:ec:80:
                    25:df:df:19:f5:69:0c:f6:d9:d0:51:fa:06:38:ed:
                    ab:e1:2d:03:5d:c2:1a:fe:f1:e1:a0:82:a3:9e:a3:
                    1c:80:4b:a5:9e:03:6b:24:f4:fc:5d:0c:e9:a1:f7:
                    8f:4e:b7:26:34:7c:f2:30:c5:aa:d6:5e:6b:0a:09:
                    11:61:fd:38:c7:15:e5:79:af:91:15:ad:47:e6:43:
                    da:de:be:eb:48:d1:7d:38:d6:04:07:82:26:e8:0f:
                    3a:1d:61:3e:4c:4b:3a:ba:e2:48:d9:15:73:d1:05:
                    9f:4c:ee:c7:fb:b2:cd:e9:ad:42:ce:fb:5a:03:23:
                    ac:7d:06:f1:27:3f:b9:5d:9f:1a:37:98:23:b0:0e:
                    6d:c3:98:55:62:dd:37:70:6c:df:09:9c:da:3d:0f:
                    07:1f:39:16:fe:7d:f7:a6:44:69:98:ff:43:4b:80:
                    00:3f:13:7a:95:54:5a:ae:53:c3:fa:52:19:91:7b:
                    ac:91:f5:c0:26:f6:2d:27:55:68:fc:e8:f2:47:66:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:81:14:B4:4E:42:04:BE:34:53:CB:A5:DA:C4:1B:82:25:FD:19:52
            X509v3 Authority Key Identifier:
                keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/UIEUtE5CBL40U8ul2sQbgiX9GVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:7c:80:d6:11:c5:0d:a5:2c:9c:a0:06:af:f5:95:7f:81:
         22:8c:f1:6a:7d:72:2d:f1:db:0d:35:76:07:cb:88:75:47:2f:
         c3:dd:b6:01:76:87:93:49:1a:ce:f9:aa:96:e3:fa:4c:b9:33:
         d4:aa:f8:ad:f9:42:d1:6d:93:8e:ca:72:58:84:5d:dd:6a:4e:
         e7:90:de:f7:1e:6e:75:d8:7c:d9:49:aa:cf:eb:4f:03:99:cc:
         19:ec:eb:00:29:3f:43:e1:87:98:80:98:45:7b:72:f9:47:b3:
         bb:18:2d:4c:72:2d:8c:75:c6:6a:fc:03:7d:6a:ce:e8:e8:97:
         2a:56:3e:85:42:85:7b:d7:31:e5:25:56:29:79:16:aa:b1:71:
         18:db:11:b7:6b:66:e6:b7:84:cf:9b:40:52:7e:31:07:05:8e:
         46:30:0d:c1:da:4d:10:b5:9e:ab:bb:f8:70:b7:b2:44:e7:b0:
         4c:90:e7:2e:a1:f8:8c:3f:3e:8d:65:02:21:88:2f:a6:29:ec:
         45:6a:ca:d3:bd:fa:4e:94:58:02:ae:6a:50:66:7f:6d:58:bb:
         7b:f5:77:62:c9:06:73:26:b5:bd:f8:80:9b:dd:aa:e9:f5:69:
         b5:07:1d:d9:ac:f5:1f:00:4d:b3:6e:5d:c7:37:3e:64:92:8e:
         23:6f:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org