Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vXuQG_7cfGifGIkQtn3sB5J7Tc4.roa
File:                     vXuQG_7cfGifGIkQtn3sB5J7Tc4.roa (raw, json)
Hash identifier:          pLzvXU/BvsMp4bdcGLS/Dx6l86zatY7V5/Fn0rSHewk=
Subject key identifier:   BD:7B:90:1B:FE:DC:7C:68:9F:18:89:10:B6:7D:EC:07:92:7B:4D:CE
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       17197D4B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vXuQG_7cfGifGIkQtn3sB5J7Tc4.roa
Signing time:             Fri 21 Jan 2022 14:24:45 +0000
ROA not before:           Fri 21 Jan 2022 14:24:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        37.230.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387546443 (0x17197d4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan 21 14:24:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd7b901bfedc7c689f188910b67dec07927b4dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:e7:b2:a7:49:4e:f4:f3:25:90:79:a6:5f:
                    19:0c:c6:38:19:c4:5f:c7:ad:4c:51:87:51:31:b8:
                    c1:0e:2a:d1:ee:9a:02:a6:2f:a4:51:04:14:ad:c2:
                    6b:49:6c:e2:9a:39:c0:18:1d:41:be:ab:6f:ee:7e:
                    db:f7:8d:c9:76:5b:f6:1f:aa:8b:1e:de:9d:75:c6:
                    32:c5:e8:f1:c7:1e:74:cc:26:cd:54:99:5f:13:8b:
                    ff:f9:3f:6a:a5:bf:f8:50:e8:1a:ce:21:88:dd:d7:
                    2b:f1:80:e6:24:0a:03:48:f1:e4:0c:7d:1f:11:57:
                    24:ae:c5:5a:89:78:27:b1:f5:11:40:55:59:33:f0:
                    7f:f8:73:c4:d3:34:f0:fd:c1:fd:f2:26:3f:c3:b5:
                    b3:3f:e7:d4:f6:77:d9:84:db:e2:aa:88:be:b3:8a:
                    1f:ff:7d:e2:ca:53:af:7e:e9:67:55:b4:59:fe:d1:
                    27:30:46:17:8d:37:51:fd:9a:11:5b:a7:4f:90:20:
                    e8:c5:bc:c0:24:d9:69:1a:5a:46:ee:1e:10:29:ca:
                    c8:97:af:17:a6:f9:c7:e9:0b:ad:7f:10:9b:4f:80:
                    48:c3:dd:d5:55:13:ca:37:b6:45:de:39:08:6f:c5:
                    94:b4:c9:b0:21:c5:79:a6:83:c1:68:0d:47:93:a9:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7B:90:1B:FE:DC:7C:68:9F:18:89:10:B6:7D:EC:07:92:7B:4D:CE
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vXuQG_7cfGifGIkQtn3sB5J7Tc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:20:b8:e6:32:5c:41:66:33:7c:23:6e:9c:64:14:62:8f:db:
         19:68:00:78:4a:6e:fd:ac:c8:67:8e:44:7b:cd:3f:91:23:f6:
         56:16:58:a9:6f:1c:94:de:fd:e1:3d:39:1c:94:a4:11:14:35:
         a8:f1:ef:7f:f6:fb:6b:69:45:3d:c4:ac:90:2a:0c:f3:94:4c:
         d2:02:62:78:60:a1:f6:b1:cb:43:14:ba:b5:bb:80:5d:5c:78:
         83:47:2c:7f:5c:4c:bb:d9:30:84:1f:f2:9e:30:a9:d0:4b:73:
         ed:c7:fb:88:69:be:65:5b:6b:ab:11:99:96:d0:d1:f5:63:9b:
         cc:ee:47:bf:48:7e:cf:3d:69:f7:73:7b:b4:c0:8e:ff:52:58:
         27:9f:fc:e2:67:3c:6d:f5:70:0f:4b:05:af:3d:c4:f5:1d:3a:
         68:83:1e:94:a9:31:c3:e0:c9:d3:fc:83:36:9f:1b:97:5a:7d:
         c7:67:f8:3b:2b:b8:d5:6b:cc:8b:fa:ff:33:93:89:0c:b2:4d:
         f3:f5:f4:74:aa:84:5e:5b:3b:93:e7:37:8c:3c:e6:dd:2f:db:
         82:1f:37:a4:e3:76:14:dc:8d:24:df:78:13:50:fb:95:16:0b:
         8a:39:6f:d6:20:98:9a:f4:ec:66:c3:fb:43:4d:8d:96:27:b0:
         50:27:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org