Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/V-xrGwHM12III3_sXRfViVioWsQ.roa
File:                     V-xrGwHM12III3_sXRfViVioWsQ.roa (raw, json)
Hash identifier:          BTfyHAlIzFPg6sfXf/IxXyynZDm1CP5XKIEb9MYuIRs=
Subject key identifier:   57:EC:6B:1B:01:CC:D7:62:08:23:7F:EC:5D:17:D5:89:58:A8:5A:C4
Certificate issuer:       /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial:       0117EA69
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/V-xrGwHM12III3_sXRfViVioWsQ.roa
Signing time:             Fri 15 Apr 2022 19:20:36 +0000
ROA not before:           Fri 15 Apr 2022 19:20:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        5.249.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18344553 (0x117ea69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
        Validity
            Not Before: Apr 15 19:20:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57ec6b1b01ccd76208237fec5d17d58958a85ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:d5:2d:87:d9:a1:dd:7c:4d:8e:71:ce:3f:
                    98:7d:50:4d:92:39:a6:ad:c3:d2:53:36:31:28:7c:
                    90:6d:c6:77:50:a6:91:70:13:b0:cd:77:db:44:ee:
                    fd:c8:2e:33:6d:ba:92:a2:77:ed:53:a5:bd:a1:8c:
                    21:f4:ee:f1:28:ab:31:8c:9a:7b:fb:26:03:07:a2:
                    3d:46:d9:c9:fb:33:82:00:32:0d:ad:f4:a9:10:ab:
                    e3:a1:14:41:73:bb:db:b4:5a:b3:81:5f:12:8e:f0:
                    b4:fa:99:8d:db:35:68:60:65:cb:f1:37:7e:ee:b3:
                    3a:21:07:f2:23:5a:88:d6:c8:bb:dc:bd:03:42:51:
                    0a:5a:1a:58:8a:d6:85:15:de:1b:31:5d:64:d0:00:
                    62:e1:15:6b:a6:6d:f0:f0:b9:f3:dc:15:9d:94:1d:
                    9b:e4:ac:15:60:f3:b8:6b:9f:0c:05:b9:ca:93:7e:
                    da:c9:dc:fd:20:97:64:e5:99:af:fd:5f:9f:fa:1a:
                    5a:a8:ac:00:14:ee:14:08:74:bb:bc:76:33:14:3e:
                    e0:d4:60:88:a0:c2:b9:85:19:96:c6:f6:ca:70:23:
                    3e:55:19:35:a9:14:6b:ea:26:23:65:99:27:14:89:
                    08:2c:60:ed:f3:dc:47:59:a7:4a:40:80:e1:93:e9:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:6B:1B:01:CC:D7:62:08:23:7F:EC:5D:17:D5:89:58:A8:5A:C4
            X509v3 Authority Key Identifier:
                keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/V-xrGwHM12III3_sXRfViVioWsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.249.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:49:3d:33:ea:d9:41:39:d8:85:2e:f4:36:5e:c2:1c:3c:82:
         52:5f:a7:a5:37:5d:b5:c0:da:f8:6e:93:1f:9b:36:5d:ca:4b:
         c2:5c:da:3a:4e:40:5b:db:16:35:94:3b:04:5d:78:34:64:dc:
         57:c4:cc:b0:16:27:35:04:4d:25:c5:51:6b:54:43:35:75:16:
         4d:72:2a:a5:82:0f:c0:1e:1d:ac:ce:0c:7a:ad:b1:10:24:7a:
         03:c0:cb:33:c3:2c:e1:31:85:83:55:8d:41:f0:5e:c2:a2:74:
         ff:a1:4f:23:c0:88:36:94:86:9d:6b:32:be:e1:05:73:af:a3:
         e1:b5:98:e0:5e:54:36:11:9a:bb:db:6c:d6:f3:cc:f2:14:65:
         48:f2:bd:5c:6f:83:76:37:d7:a3:39:fe:91:d0:56:cf:30:ef:
         4e:13:6e:59:14:0e:14:8e:81:26:b3:f9:63:32:fb:c3:39:8c:
         6f:1b:6d:f4:62:55:f1:29:7e:41:c2:aa:34:c3:14:a1:36:4d:
         16:4a:82:aa:56:6a:6d:e7:ab:d2:c3:d8:04:91:f7:ee:f7:1e:
         2a:dd:bf:90:90:10:be:04:08:08:0d:31:a8:35:6c:49:86:8e:
         a8:fe:ab:c9:26:1a:71:6a:3a:9d:d4:de:3b:a4:c3:35:ca:13:
         52:1e:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org