Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ws8VjXyag7d0xqMbWPyyWEA72nE.roa
File:                     Ws8VjXyag7d0xqMbWPyyWEA72nE.roa (raw, json)
Hash identifier:          yNeRdrZC+axUM7Q+9u2xmbATKIh5tKmIyZnGV/D/aMk=
Subject key identifier:   5A:CF:15:8D:7C:9A:83:B7:74:C6:A3:1B:58:FC:B2:58:40:3B:DA:71
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       098858D4
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ws8VjXyag7d0xqMbWPyyWEA72nE.roa
Signing time:             Wed 01 Jun 2022 15:53:20 +0000
ROA not before:           Wed 01 Jun 2022 15:53:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        83.147.232.0/22 maxlen: 24
                          83.147.240.0/22 maxlen: 24
                          83.147.252.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159930580 (0x98858d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jun  1 15:53:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5acf158d7c9a83b774c6a31b58fcb258403bda71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:30:bb:28:63:cc:1d:34:96:84:52:36:c2:
                    8e:b3:31:13:48:4f:d9:1b:07:22:9a:57:67:d3:75:
                    d1:9f:33:6e:6b:ba:a3:83:38:ef:80:df:4a:6e:b4:
                    8d:f7:a5:b7:62:7d:a4:be:0d:c7:9a:75:1f:5d:cc:
                    9d:14:03:fa:bb:ea:3d:ee:ed:e2:8c:8a:cb:80:7b:
                    f5:e6:1a:41:e7:74:2b:e1:60:b8:f1:43:54:b5:95:
                    43:f2:93:b1:67:32:7d:cd:e9:a1:1f:36:5f:0d:4f:
                    4f:cb:bf:65:b7:7b:e7:7d:cc:53:04:91:5b:e3:4a:
                    c8:8e:b3:3d:f6:b3:aa:f2:ad:6c:ba:eb:f0:b9:b1:
                    0a:e5:7a:25:5e:13:41:ea:6a:1a:6f:53:42:61:77:
                    b0:c7:a1:a7:ac:fc:37:f5:cc:77:97:5f:c3:b5:87:
                    17:0a:49:ae:fd:76:ba:de:a4:15:8f:08:3a:4f:4f:
                    af:3c:ff:9a:2c:34:33:21:b3:88:78:84:45:85:b1:
                    27:18:e7:56:31:75:b8:2a:da:a4:3e:81:b7:22:68:
                    c5:b7:56:a9:ce:7e:f6:8a:a7:b8:1a:15:23:d3:6d:
                    7f:8d:91:10:fc:e9:1f:9b:c8:ce:00:6a:19:10:9d:
                    fd:9d:8a:f5:86:09:3c:b0:50:75:37:17:5b:c3:eb:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:15:8D:7C:9A:83:B7:74:C6:A3:1B:58:FC:B2:58:40:3B:DA:71
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ws8VjXyag7d0xqMbWPyyWEA72nE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.232.0/22
                  83.147.240.0/22
                  83.147.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:90:e6:b0:cc:52:8a:54:02:9f:5c:a9:56:ae:ca:f0:ce:
         15:41:88:c1:a0:73:51:74:52:99:25:33:dc:26:c1:86:1b:70:
         70:90:b4:ae:ee:95:50:43:31:fd:28:b5:15:f4:e3:2a:35:d9:
         c8:c9:cf:ac:82:59:a6:61:6e:a0:0a:3d:c5:c8:5d:38:55:fb:
         94:66:07:c0:d2:42:44:28:47:54:19:95:ae:c5:6b:b6:88:71:
         93:55:51:05:8b:35:d3:50:e0:49:89:d9:41:d7:e6:fb:cc:c8:
         5d:32:24:c7:5b:03:cd:ce:15:81:68:a0:9a:72:29:d1:26:96:
         8e:2b:d8:db:4b:be:34:00:a8:7b:15:e7:61:c0:8d:e4:6a:84:
         2a:3d:70:c5:06:dc:3d:9c:64:9c:8a:bb:01:31:19:84:a2:4e:
         6f:29:07:37:61:3d:6e:bc:38:41:c1:b4:51:18:a5:9f:df:9a:
         b5:f3:5f:2f:b0:e3:77:ce:90:f5:6f:a1:71:7c:8e:d3:89:6e:
         bc:71:69:5f:ca:0c:02:f8:d9:04:44:c9:91:4e:7a:49:3f:35:
         d3:49:f1:fb:03:e2:03:b8:a7:e4:df:40:59:84:90:c3:1a:96:
         14:69:59:c5:33:0a:af:d3:fc:5c:13:da:db:77:81:bd:da:e8:
         7f:44:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org