Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VRp1XL-7usgjGoEaM6pi7OwJPhs.roa
File:                     VRp1XL-7usgjGoEaM6pi7OwJPhs.roa (raw, json)
Hash identifier:          VxpUUcb4NNXctYZlN2h0v/2L1etfekZd+kCVZVQS/F8=
Subject key identifier:   55:1A:75:5C:BF:BB:BA:C8:23:1A:81:1A:33:AA:62:EC:EC:09:3E:1B
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0330E377
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VRp1XL-7usgjGoEaM6pi7OwJPhs.roa
Signing time:             Sat 01 Jan 2022 16:04:28 +0000
ROA not before:           Sat 01 Jan 2022 16:04:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202306
IP address blocks:        91.103.252.0/24 maxlen: 24
                          45.138.74.0/24 maxlen: 24
                          2a04:5200:5977::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53535607 (0x330e377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan  1 16:04:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=551a755cbfbbbac8231a811a33aa62ecec093e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:95:e3:ed:ec:c8:b5:6d:6f:60:51:9a:b8:
                    01:0a:ef:05:d9:1b:10:02:e4:93:f3:3c:11:c9:d0:
                    ec:1c:db:f2:37:8b:8f:4f:b2:b6:a5:1b:40:10:15:
                    2c:24:ad:a4:d6:f0:7b:41:27:79:8e:36:f3:e6:b6:
                    3c:57:11:5f:22:58:29:a0:41:1c:77:05:16:98:76:
                    55:3e:46:f5:21:91:90:9f:b3:8f:80:89:1d:6b:12:
                    e5:ec:5f:b7:3a:c9:dc:0f:ff:22:56:1e:84:bc:de:
                    8a:9f:b3:74:4c:fb:de:9b:4a:48:28:75:3c:2c:b4:
                    df:71:01:33:13:bc:40:9c:b2:17:0c:a5:81:c8:b2:
                    73:60:d8:cc:4b:b0:11:0b:20:8c:68:a1:43:ff:fb:
                    92:d7:8b:61:e9:40:ae:00:8f:f0:1f:29:42:2b:e6:
                    bd:08:81:0f:9b:2d:91:79:cf:fd:8c:e8:9b:7a:15:
                    92:3b:dc:6f:70:8c:b0:b8:68:00:60:82:8b:9b:0d:
                    5c:6a:c1:95:80:3e:6e:a9:40:86:16:e0:23:8e:21:
                    bd:8d:81:0a:df:0c:9d:16:00:49:fa:8e:9c:93:81:
                    ce:6d:e4:e3:45:c4:0e:6a:8c:77:5b:70:76:53:0f:
                    38:bf:a8:ee:b4:1a:1a:77:f3:d1:df:dc:5d:07:4d:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:75:5C:BF:BB:BA:C8:23:1A:81:1A:33:AA:62:EC:EC:09:3E:1B
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VRp1XL-7usgjGoEaM6pi7OwJPhs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.74.0/24
                  91.103.252.0/24
                IPv6:
                  2a04:5200:5977::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:2a:1f:d3:f1:52:7c:be:57:e2:42:25:f0:3a:bc:20:9e:c4:
         0f:d1:9e:65:46:2e:9f:4a:96:66:8a:aa:71:f9:28:cc:9f:7b:
         32:8d:b1:4e:db:9e:33:0a:41:54:54:03:48:aa:4b:18:99:75:
         19:56:ac:4b:6c:fd:7b:d4:9c:d7:8a:40:1b:84:9e:e5:2d:2b:
         e2:20:6a:a8:6c:0f:ac:6e:25:c8:9b:a6:73:91:92:00:8e:15:
         5a:e8:83:ae:1d:cb:0a:8d:4d:c4:66:e8:98:f9:d9:b9:af:c7:
         e2:7c:5a:46:7a:5e:e6:61:cc:5b:1a:b2:d9:1e:23:01:29:8d:
         84:bc:e5:01:4f:3b:af:0d:27:4a:88:6f:25:3e:76:71:6b:8d:
         35:f2:48:66:6f:11:93:25:ec:bb:46:0e:14:76:64:9b:d2:79:
         e6:64:e0:c7:97:87:3d:5c:ef:ee:5d:78:9a:42:eb:fa:40:2b:
         43:51:5e:0b:01:b4:45:78:62:fd:55:ce:e6:49:68:72:32:bd:
         88:48:e6:48:08:e2:45:b5:cb:8b:d0:ce:8e:e2:e8:66:45:09:
         7a:9c:e2:74:fa:61:0f:dc:45:7b:65:c0:30:02:d7:7d:d2:21:
         02:79:b0:40:b0:9d:db:38:c8:56:ef:08:29:67:3b:af:55:64:
         f8:9a:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org