Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/2uUelouj-A1DJLHx4Fjb39yqGc0.roa
File:                     2uUelouj-A1DJLHx4Fjb39yqGc0.roa (raw, json)
Hash identifier:          tiyK3LVqmlOPJ8W/KdgUtiJypmr/417Ovw4D/LqpcL8=
Subject key identifier:   DA:E5:1E:96:8B:A3:F8:0D:43:24:B1:F1:E0:58:DB:DF:DC:AA:19:CD
Certificate issuer:       /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial:       06B80344
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/2uUelouj-A1DJLHx4Fjb39yqGc0.roa
Signing time:             Sat 01 Jan 2022 11:03:58 +0000
ROA not before:           Sat 01 Jan 2022 11:03:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62094
IP address blocks:        185.48.80.0/22 maxlen: 24
                          5.154.244.0/22 maxlen: 24
                          2a01:9560::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112722756 (0x6b80344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
        Validity
            Not Before: Jan  1 11:03:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dae51e968ba3f80d4324b1f1e058dbdfdcaa19cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:31:c8:13:62:98:f0:ab:3d:85:06:9e:aa:
                    a3:61:88:4c:59:ce:58:0c:5f:e8:8e:a9:dc:bd:a2:
                    00:70:05:14:19:9c:a5:34:05:9e:ae:62:83:7c:ae:
                    07:58:51:07:72:b4:63:88:4b:ac:86:87:11:5e:91:
                    f5:a5:3a:64:e2:72:6c:69:ce:fb:39:07:80:5a:d4:
                    92:ab:56:a8:87:41:da:bc:7d:41:5f:96:0f:dc:a3:
                    b3:90:9e:3f:69:a5:30:e6:94:e9:f1:99:a5:fc:09:
                    be:98:35:5b:66:39:ec:92:80:7f:21:c1:a8:2e:dd:
                    a7:32:92:87:7e:2f:5d:82:3d:2c:4c:7a:34:51:92:
                    c9:ae:8f:62:94:28:06:d1:9f:0c:65:2c:62:bb:ab:
                    99:95:31:ac:8a:e0:e6:a6:41:42:1d:b5:3b:d0:2a:
                    27:04:29:8d:42:36:bb:a5:6c:4c:25:b6:ac:e9:69:
                    c8:05:33:b8:3f:85:be:7d:33:fc:64:b4:8f:15:2c:
                    b5:82:4e:9d:c3:e5:fe:30:53:65:56:54:71:dd:05:
                    ba:59:04:30:26:2e:ad:e5:19:e3:75:73:bd:29:7a:
                    07:3b:b0:99:da:26:f8:48:16:0f:13:50:9e:42:28:
                    3e:15:0d:82:4e:35:c5:08:64:ab:01:6f:7b:d8:c7:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E5:1E:96:8B:A3:F8:0D:43:24:B1:F1:E0:58:DB:DF:DC:AA:19:CD
            X509v3 Authority Key Identifier:
                keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/2uUelouj-A1DJLHx4Fjb39yqGc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.154.244.0/22
                  185.48.80.0/22
                IPv6:
                  2a01:9560::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:60:69:44:a7:73:26:7d:33:ae:7b:4e:6f:29:c6:dd:4f:
         f7:a2:79:2c:d1:13:7b:42:ce:b2:fc:77:02:66:3e:bd:dc:78:
         64:e0:d0:05:27:27:aa:82:1d:11:52:9c:ac:34:69:69:73:81:
         d2:ea:b9:6a:a8:2e:86:fc:e0:ca:30:24:fd:cd:62:b6:65:78:
         1f:6f:27:d5:29:2a:5b:e9:c2:a6:52:d1:65:77:c2:d5:b7:5d:
         e8:21:6c:23:d7:12:46:83:d5:4b:c5:86:b0:65:b7:40:d5:f8:
         48:ff:da:23:a8:f2:52:d4:28:05:d2:ef:ab:83:4c:2e:5f:a3:
         67:8d:52:5a:80:ed:01:80:ae:88:d4:fa:47:c5:a7:47:1e:5f:
         cb:52:8b:f9:07:c3:bb:9e:38:2e:cd:c5:6b:d7:6b:2d:b3:ce:
         13:e1:0b:2d:75:28:e9:b3:05:6a:55:d3:f2:d9:42:a8:ab:34:
         72:06:44:2f:dc:0a:f4:ae:08:23:8e:a6:a9:d9:45:48:d5:5c:
         d7:e4:9d:75:c0:b7:75:64:c9:9c:b9:d8:bf:13:18:bb:79:6e:
         4b:c6:d5:90:0e:79:7f:69:09:c0:4d:77:cb:00:30:47:5d:3b:
         18:01:1f:7d:af:a3:d5:7a:9e:87:a3:92:bf:d3:58:b0:7c:f7:
         f4:3f:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org