Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W2YMFsApdz9QJXfTd5byw8MT4jA.roa
File:                     W2YMFsApdz9QJXfTd5byw8MT4jA.roa (raw, json)
Hash identifier:          qMac/86nIpNDp9LJxL9FyPw9uWqdxO9hfd78+CwbT4c=
Subject key identifier:   5B:66:0C:16:C0:29:77:3F:50:25:77:D3:77:96:F2:C3:C3:13:E2:30
Certificate issuer:       /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial:       08BCFE93
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W2YMFsApdz9QJXfTd5byw8MT4jA.roa
Signing time:             Sat 09 Apr 2022 09:57:51 +0000
ROA not before:           Sat 09 Apr 2022 09:57:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49581
IP address blocks:        45.155.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146603667 (0x8bcfe93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
        Validity
            Not Before: Apr  9 09:57:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b660c16c029773f502577d37796f2c3c313e230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:27:ec:0f:44:a7:c0:15:b0:bc:4f:bd:0c:
                    88:4f:08:07:6c:76:28:47:d7:f0:c0:5f:9f:bb:08:
                    ff:e3:49:90:c3:73:f1:19:8d:24:1b:3d:9b:23:9e:
                    cc:94:15:f3:0d:01:09:6a:67:3c:b6:98:44:f1:e7:
                    d9:f7:40:be:a7:65:f6:83:57:df:18:27:c1:e3:d7:
                    f3:62:d9:e3:2b:36:0c:60:7e:9d:c8:70:55:14:27:
                    8f:eb:97:95:9e:d7:fe:c8:50:c4:34:85:65:30:cc:
                    37:75:a4:c7:84:b4:c5:af:37:a1:74:e6:8e:0a:66:
                    a7:0e:c9:41:31:66:8c:6b:8b:54:60:77:48:0d:f5:
                    56:25:ac:3a:5a:9a:c8:de:91:ba:55:15:f4:b7:2e:
                    b7:29:0c:76:6b:3e:b0:34:9a:10:48:d6:ed:d7:0d:
                    fc:5a:1c:bb:78:7b:f1:72:b3:fa:31:b2:f2:ec:40:
                    00:b1:39:6e:9a:59:0f:2e:e8:de:b7:c3:ae:6e:2c:
                    a2:fa:44:27:1b:94:50:d7:b1:37:9d:08:3d:3b:46:
                    68:d8:40:7b:ed:90:8b:c8:3f:a6:26:5d:90:8d:db:
                    58:ed:92:2e:32:5e:16:61:3b:9b:2f:31:5e:ee:80:
                    6a:40:00:1f:94:d4:b6:a3:81:c1:4f:cc:bd:96:e8:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:66:0C:16:C0:29:77:3F:50:25:77:D3:77:96:F2:C3:C3:13:E2:30
            X509v3 Authority Key Identifier:
                keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W2YMFsApdz9QJXfTd5byw8MT4jA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:5d:2f:98:96:ff:84:e9:fb:87:72:be:42:0e:25:11:4a:
         0b:f2:bb:33:2d:25:26:b4:7e:89:fb:18:d5:95:f8:fd:a1:70:
         88:5d:81:6c:af:e9:47:05:0c:21:0b:dd:d6:c6:d9:20:29:d9:
         2a:4c:bf:1a:1c:48:1d:7d:c3:7b:23:39:f4:9f:e8:b1:4b:a4:
         d6:d1:ee:a2:8f:15:74:c1:e3:cd:3d:16:a4:42:3b:2f:99:bb:
         7a:79:c6:89:f3:3b:fa:96:3c:28:29:e8:ff:d3:43:7c:10:af:
         4a:3d:54:7c:17:40:5c:20:56:c2:97:1f:92:fa:2a:2b:60:a8:
         83:9f:de:bc:09:eb:fb:a2:53:1b:53:ea:c0:26:f9:60:1e:8e:
         38:7f:a3:37:7a:9f:55:f3:7d:5f:c4:bf:8f:79:03:a8:6f:18:
         73:3c:7c:fe:61:c1:bf:47:39:93:0f:e0:c5:0a:76:7e:8a:59:
         99:5d:35:2e:92:66:b0:2b:9e:14:d6:4e:7d:5d:13:4e:3f:92:
         45:90:bd:f7:b4:eb:f0:03:fb:dd:d9:bf:33:76:ad:1b:8c:79:
         a7:9a:d4:ee:c3:48:0c:1d:3f:2f:eb:1b:d2:25:09:a2:0f:7e:
         44:24:03:21:a4:28:41:8d:5a:d1:bd:0f:98:fa:6f:dc:69:bd:
         c4:45:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:59 2023 by rpki-client on console-ams.rpki-client.org