Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/F_Qyt6WuObK1Tquq393tELRzFHU.roa
File:                     F_Qyt6WuObK1Tquq393tELRzFHU.roa (raw, json)
Hash identifier:          7R52KDmMttvdWGpCzEKXDiq7UESwNecl2br/BXp9isE=
Subject key identifier:   17:F4:32:B7:A5:AE:39:B2:B5:4E:AB:AA:DF:DD:ED:10:B4:73:14:75
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       018481C509F6AC4D67DA7BF6D7CFDE780181
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/F_Qyt6WuObK1Tquq393tELRzFHU.roa
Signing time:             Wed 16 Nov 2022 18:48:04 +0000
ROA not before:           Wed 16 Nov 2022 18:48:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        178.253.12.0/23 maxlen: 24
                          178.253.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:81:c5:09:f6:ac:4d:67:da:7b:f6:d7:cf:de:78:01:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Nov 16 18:48:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17f432b7a5ae39b2b54eabaadfdded10b4731475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:0a:ff:6b:4f:7f:2e:45:5a:e9:83:60:ac:
                    59:b1:38:21:c9:dc:2f:e9:7b:eb:53:b5:d2:02:7d:
                    c8:77:08:6e:df:6f:f4:ae:ef:00:16:41:2c:40:e0:
                    7e:62:2c:30:09:70:9b:78:99:02:64:04:d6:9c:48:
                    c2:aa:3f:f6:00:a7:9f:56:8c:30:cc:34:a1:dc:91:
                    3d:45:af:19:b1:5c:e1:63:3e:e5:8d:b1:68:15:0a:
                    10:ae:9b:c0:9e:86:e4:df:87:6b:39:bb:6e:5c:17:
                    2f:e3:de:a7:f7:71:85:2b:e5:a3:51:d2:ee:5b:56:
                    9e:6b:4b:06:1f:0f:36:7d:c5:5c:e2:ce:15:3d:98:
                    a0:99:1e:34:c1:91:88:a9:15:91:2d:30:13:b2:dc:
                    ed:cc:ce:74:a7:50:e4:2b:8e:c1:57:48:de:e1:78:
                    ec:b3:52:39:25:eb:84:03:00:df:79:a9:4b:b9:80:
                    41:11:3f:fe:a9:51:73:8f:e8:20:50:40:b0:67:54:
                    bf:c5:29:10:d5:95:a3:db:8b:b0:e3:96:5b:f3:f1:
                    73:ae:e8:68:da:ed:95:0c:49:d3:41:32:02:83:46:
                    76:c0:4d:14:9c:54:89:36:b2:5c:d6:a4:c3:08:b4:
                    c5:9f:81:de:b8:93:ce:3d:f9:2c:20:70:9c:15:c1:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:32:B7:A5:AE:39:B2:B5:4E:AB:AA:DF:DD:ED:10:B4:73:14:75
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/F_Qyt6WuObK1Tquq393tELRzFHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.12.0/23
                  178.253.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:78:63:e4:ef:4e:04:d3:32:a9:8e:3a:72:90:47:de:97:12:
         45:9a:8b:b4:ea:2b:3d:c0:10:a8:49:b6:98:ea:50:b6:22:d0:
         0c:b5:fa:53:9f:b5:04:61:79:64:9b:54:f7:ea:2c:e3:a7:00:
         fb:d5:8b:45:59:5d:22:5f:23:4f:82:d6:a1:25:de:6f:68:f0:
         29:7b:4b:e9:70:f3:ce:1b:c0:88:9c:93:84:dc:6e:32:39:86:
         11:0f:eb:fa:5b:a1:b7:95:ff:4b:8a:ae:67:d1:b1:a5:b3:dc:
         0e:38:ba:96:b5:85:e7:4a:6a:c9:db:15:d8:c4:41:e2:60:b6:
         78:75:71:d2:7d:18:bb:df:55:d4:79:34:e2:24:76:62:0c:b0:
         2f:a7:08:1d:57:da:72:5e:9a:93:de:9a:15:0a:8f:77:31:04:
         08:5d:ea:d4:2a:bf:ee:92:86:44:c7:57:f3:0a:7b:18:b6:e0:
         98:fa:a9:55:15:bc:d1:7d:d0:2b:1f:f0:af:41:de:2a:70:f6:
         7e:0d:68:87:55:03:fb:f4:66:43:e7:fb:dc:d6:0f:21:11:fe:
         4f:d0:1a:cf:e7:c3:da:1c:e6:9b:59:4a:af:a8:7f:02:7d:a0:
         5b:0f:1b:d8:2d:ba:59:07:dd:34:6f:cf:98:63:4a:bd:75:6b:
         9b:6a:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org