Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/7FTYFU-ff6TZvYs0LJuGe-yfPgE.roa
File:                     7FTYFU-ff6TZvYs0LJuGe-yfPgE.roa (raw, json)
Hash identifier:          n4HhwKfix3b6S7/dxRyORjYWT1SwkWxI+v4EH1aj2t0=
Subject key identifier:   EC:54:D8:15:4F:9F:7F:A4:D9:BD:8B:34:2C:9B:86:7B:EC:9F:3E:01
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       0816625A
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/7FTYFU-ff6TZvYs0LJuGe-yfPgE.roa
Signing time:             Sat 01 Jan 2022 02:52:58 +0000
ROA not before:           Sat 01 Jan 2022 02:52:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210083
IP address blocks:        185.130.44.0/24 maxlen: 24
                          185.130.45.0/24 maxlen: 24
                          185.130.46.0/24 maxlen: 24
                          185.130.47.0/24 maxlen: 24
                          2a07:e00:a::/48 maxlen: 48
                          2a07:e00::/48 maxlen: 48
                          2a07:e00:b::/48 maxlen: 48
                          2a07:e00:bb::/48 maxlen: 48
                          2a07:e03::/32 maxlen: 48
                          2a07:e02:41::/48 maxlen: 48
                          2a07:e00:19f::/48 maxlen: 48
                          2a07:e00:ff::/48 maxlen: 48
                          2a07:e02:1000::/36 maxlen: 40
                          2a07:e02:b00::/40 maxlen: 56
                          2a07:e00:bc::/48 maxlen: 48
                          2a07:e00:c::/48 maxlen: 48
                          2a07:e00:ac::/48 maxlen: 48
                          2a07:e01::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135684698 (0x816625a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Jan  1 02:52:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec54d8154f9f7fa4d9bd8b342c9b867bec9f3e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:19:2a:21:3d:98:4c:cc:8a:3c:30:64:05:
                    d1:cf:04:7f:1e:b4:ca:3d:93:ab:1e:47:7d:2d:96:
                    17:fc:35:3a:74:25:92:b3:6a:cd:b0:d4:cf:cb:7d:
                    1d:0d:78:4e:a5:07:8c:5a:05:08:dd:01:e6:a9:6d:
                    a0:17:41:1e:29:b4:5f:66:46:6e:b4:aa:93:9f:61:
                    94:83:16:cb:fb:6e:b1:4b:92:9e:f5:8b:ed:9b:24:
                    92:d6:80:58:8e:59:94:fc:97:90:30:f8:8d:1d:f2:
                    8c:5b:52:d3:ee:46:46:35:95:1c:fb:89:42:75:6d:
                    85:ef:f8:91:14:ea:9c:30:34:00:29:86:7d:d0:2d:
                    4c:0a:cb:b8:de:d8:dc:4c:b6:0d:26:67:3c:13:b5:
                    74:7a:a5:31:c3:94:7e:df:8c:f4:03:ac:26:54:03:
                    2f:74:15:0b:58:12:ac:81:a3:98:c8:f5:3f:0a:98:
                    ed:db:23:fa:bd:cb:98:05:77:fc:19:88:fa:d4:34:
                    fe:cd:b5:ae:34:3a:5d:56:49:38:b9:65:b5:cc:48:
                    8b:c9:7d:6d:ba:6e:45:3e:0f:cd:af:e1:b6:fa:65:
                    03:9e:4d:65:98:fd:d0:d8:56:fc:c7:80:2e:07:20:
                    81:54:c6:c1:a3:0a:9e:86:e9:f7:6b:64:fd:c5:63:
                    8b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:D8:15:4F:9F:7F:A4:D9:BD:8B:34:2C:9B:86:7B:EC:9F:3E:01
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/7FTYFU-ff6TZvYs0LJuGe-yfPgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.44.0/22
                IPv6:
                  2a07:e00::/48
                  2a07:e00:a::-2a07:e00:c:ffff:ffff:ffff:ffff:ffff
                  2a07:e00:ac::/48
                  2a07:e00:bb::-2a07:e00:bc:ffff:ffff:ffff:ffff:ffff
                  2a07:e00:ff::/48
                  2a07:e00:19f::/48
                  2a07:e01::/32
                  2a07:e02:41::/48
                  2a07:e02:b00::/40
                  2a07:e02:1000::/36
                  2a07:e03::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:f3:42:5a:b4:e4:5d:2f:ce:8c:f0:0e:c2:a4:63:0d:52:
         ef:8f:f6:bf:78:9d:3b:ad:bc:74:0d:da:a6:dc:f5:20:5e:90:
         b6:38:02:9c:d4:b3:bb:d5:01:94:84:a3:76:db:19:a8:df:8d:
         ed:cb:0c:a2:31:03:bd:ab:73:91:1c:00:01:d0:09:aa:c5:10:
         a1:5a:3c:ba:2e:41:64:04:69:23:60:4a:42:cc:77:fb:54:5c:
         49:40:2d:45:e6:e6:7e:34:58:e0:70:e8:9e:6b:1e:b6:7b:84:
         82:df:90:1e:b9:11:aa:c1:ea:59:4e:13:f7:f2:77:4c:98:d8:
         9a:39:15:3e:7d:97:cb:b7:51:3f:e1:18:6a:52:68:3d:e3:d7:
         3e:37:69:62:ef:3a:ae:26:86:ec:04:b2:f3:2d:7e:ec:5c:09:
         6d:a2:aa:a0:81:ee:ae:30:a3:0e:06:0e:1f:cf:ae:35:7d:dc:
         6c:e4:4b:da:ae:f3:67:89:98:77:56:c2:72:6c:dc:ac:07:0e:
         01:75:89:8f:f4:77:ed:b0:0b:b3:47:99:ee:9c:6b:60:4b:5f:
         5f:95:9d:59:ce:31:94:c0:98:db:8c:f6:58:b0:8a:da:0a:0f:
         ea:f3:b0:4b:5f:9b:5b:e8:8a:7f:f0:c6:5b:62:c1:10:a6:fc:
         81:c6:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:13 2023 by rpki-client on console-ams.rpki-client.org