Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Vmy5_oykW_pIdYPNB8_UHy8r2s4.roa
File:                     Vmy5_oykW_pIdYPNB8_UHy8r2s4.roa (raw, json)
Hash identifier:          7OIbwpIEKFNGFekb9Ku69RbYdjU6PhGH4gXUsw+WGQ4=
Subject key identifier:   56:6C:B9:FE:8C:A4:5B:FA:48:75:83:CD:07:CF:D4:1F:2F:2B:DA:CE
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       0184E75C6171961BEF7D8791B502B98AD46C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Vmy5_oykW_pIdYPNB8_UHy8r2s4.roa
Signing time:             Tue 06 Dec 2022 12:15:01 +0000
ROA not before:           Tue 06 Dec 2022 12:15:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212669
IP address blocks:        81.29.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:5c:61:71:96:1b:ef:7d:87:91:b5:02:b9:8a:d4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Dec  6 12:15:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=566cb9fe8ca45bfa487583cd07cfd41f2f2bdace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:0f:d7:b2:20:32:3f:cb:79:bd:e2:ad:5b:
                    73:97:09:6c:61:00:c7:37:36:f0:cd:cf:ee:1f:d4:
                    c3:d6:84:6e:c3:48:de:07:3a:3c:51:ea:eb:86:2e:
                    28:fb:9e:f1:a7:13:54:73:34:82:20:1c:d6:a9:89:
                    dc:33:42:67:8e:16:b6:d9:14:15:cc:aa:31:76:d4:
                    58:79:51:ba:47:d0:54:1a:09:d1:de:42:ec:d8:7a:
                    22:da:b9:85:aa:57:1a:dd:3d:10:c6:ef:27:a3:80:
                    54:5d:5a:a0:6f:dd:0d:e7:4e:dc:d2:62:0b:8b:18:
                    55:21:97:ee:ce:48:cd:d2:7f:f4:12:cc:bb:7e:61:
                    7c:a5:ef:60:79:95:50:a4:3b:4a:7d:17:03:b1:b9:
                    13:40:1c:2e:ce:49:e8:9c:42:37:58:b8:37:de:d5:
                    a2:ed:88:cf:76:96:92:4f:71:27:77:7d:fa:a8:59:
                    4c:5b:56:4d:68:a1:f4:09:30:65:4a:02:41:ef:96:
                    81:73:f7:9e:60:f8:76:bc:f9:49:1f:34:79:cc:b6:
                    74:ad:ae:96:73:5a:e1:c0:ee:4a:8b:f8:60:ad:73:
                    99:23:10:52:83:c7:8e:5f:84:67:ea:1d:5f:f3:50:
                    98:9b:a8:4a:4d:38:41:71:c3:0d:6b:94:ae:48:02:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6C:B9:FE:8C:A4:5B:FA:48:75:83:CD:07:CF:D4:1F:2F:2B:DA:CE
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Vmy5_oykW_pIdYPNB8_UHy8r2s4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.29.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:3d:5d:f4:91:04:70:c2:3a:9f:9c:3b:12:b9:6a:c8:ef:
         f4:42:61:f4:40:82:42:64:16:e9:91:b4:2f:5b:9b:7f:f7:95:
         b6:69:f6:1e:b4:99:64:c4:db:d7:25:63:db:42:de:6a:c4:62:
         b1:b8:e0:74:fa:e8:cc:5e:9f:35:6e:d4:7e:d9:a3:12:91:f8:
         56:b5:ac:18:04:71:a9:12:92:85:37:fc:c0:ba:f3:75:16:25:
         2a:47:b3:b1:7a:e8:dc:f1:20:b4:b2:ef:bd:1a:42:fc:28:48:
         e5:59:06:b2:9d:9b:d9:18:6e:cd:de:fa:4b:ba:1f:0f:d8:28:
         2a:d2:36:4b:05:02:99:9a:da:b4:5d:91:07:80:09:ac:83:c5:
         75:6d:d2:d0:4d:aa:94:1e:9c:22:e8:29:5c:cd:a0:05:ef:32:
         b8:44:c2:99:39:d0:1a:2d:ab:a9:09:bd:73:03:27:af:62:82:
         a3:9a:7a:47:8f:59:10:cb:93:80:f3:ab:f1:93:b6:7c:cd:41:
         a7:0d:3b:d3:5d:d4:a6:5d:9c:f4:93:97:73:43:00:83:57:a8:
         a4:ce:2b:1b:dc:43:dc:c4:55:a5:67:66:1a:c8:e5:ab:4c:bf:
         55:ea:dd:f8:17:88:4e:ab:d4:03:3a:70:03:47:34:97:f5:94:
         3f:62:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org