Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/FWP-J0qjttVRpu0QzrVdKglRzJU.roa
File:                     FWP-J0qjttVRpu0QzrVdKglRzJU.roa (raw, json)
Hash identifier:          +9PIPZHneEjQ4fkYDAgkgZdvmgbZKk+TUnGoZ4XfK+c=
Subject key identifier:   15:63:FE:27:4A:A3:B6:D5:51:A6:ED:10:CE:B5:5D:2A:09:51:CC:95
Certificate issuer:       /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial:       01E065
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/FWP-J0qjttVRpu0QzrVdKglRzJU.roa
Signing time:             Wed 23 Feb 2022 07:47:36 +0000
ROA not before:           Wed 23 Feb 2022 07:47:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42184
IP address blocks:        194.49.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122981 (0x1e065)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e505d93497f19d2563066b409200969711f28c67
        Validity
            Not Before: Feb 23 07:47:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1563fe274aa3b6d551a6ed10ceb55d2a0951cc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:ec:cd:fa:8b:71:eb:2e:72:de:95:0a:82:
                    4b:df:70:c2:3d:a1:1a:55:36:c6:48:3d:bd:01:f6:
                    47:3f:f7:de:01:0e:91:9a:6a:8e:46:32:42:ea:9c:
                    22:93:71:36:87:a8:51:57:21:8e:29:fa:d2:90:ab:
                    eb:d7:64:0e:b7:12:c2:fe:6a:96:b3:52:a5:05:8d:
                    53:c2:27:f7:e1:a7:2b:e2:c7:cf:b8:f4:d5:6b:6a:
                    1f:54:80:67:34:4d:bb:88:db:c1:2f:e7:4e:0d:7d:
                    24:ce:f1:66:a1:cf:0b:a2:6a:40:05:d2:fa:56:4d:
                    d8:f0:0a:74:fb:a3:c6:48:61:b9:a3:71:54:80:dd:
                    81:03:93:52:f0:84:25:db:f9:fe:1d:78:66:be:2c:
                    68:d2:b7:dd:61:93:c7:33:fc:0e:91:25:41:82:40:
                    53:f9:18:35:16:6d:d5:04:b2:2b:84:c6:24:10:2c:
                    92:16:16:1e:99:02:11:77:81:f8:e9:4e:f3:0a:a3:
                    69:d9:96:a3:e0:38:8d:6e:6f:36:70:f5:b5:28:17:
                    79:6c:75:f6:f4:ea:83:98:d1:e8:b5:9a:94:40:f7:
                    7b:9c:9a:f6:aa:0e:78:41:73:68:09:d6:83:82:f6:
                    6b:17:20:1d:9d:37:d7:36:84:07:7a:f3:5b:7a:8e:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:63:FE:27:4A:A3:B6:D5:51:A6:ED:10:CE:B5:5D:2A:09:51:CC:95
            X509v3 Authority Key Identifier:
                keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/FWP-J0qjttVRpu0QzrVdKglRzJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:4f:81:94:de:a1:5b:c3:70:e7:0d:d5:5b:11:e0:e2:cc:d8:
         40:94:0f:ef:ab:f3:a1:52:3a:80:0a:27:5c:a7:08:5a:2a:58:
         a3:fb:72:4c:f5:8a:27:bb:b2:fa:2f:33:fa:9e:f1:8a:ce:a9:
         19:be:d1:d7:07:9e:aa:47:b4:3f:ba:a3:2b:55:6d:b0:33:e6:
         c2:a7:8d:90:35:e2:6b:1c:14:f6:97:e1:ca:b0:16:ce:27:e3:
         63:73:b6:1b:f0:9f:b8:66:85:d3:58:77:ef:f3:6b:21:26:af:
         f4:71:9d:fb:e9:36:70:0d:60:aa:43:94:bf:a3:05:71:f6:5d:
         d7:45:08:1b:82:d6:ab:73:e9:3e:21:f2:a7:ad:f3:87:d4:64:
         97:98:da:70:8f:20:7e:c7:37:f7:bd:5e:6e:cb:a6:ec:7f:f9:
         a9:2d:89:1f:9d:53:29:6e:f4:9b:d4:4f:c3:df:a8:ae:42:7f:
         82:04:f9:52:fa:ac:53:eb:1f:b1:63:04:47:9a:29:84:ae:cf:
         bc:d6:4f:20:85:12:fa:37:86:c0:35:f0:b9:95:5e:cd:b8:20:
         7d:27:e6:08:0f:ac:70:e9:ab:3e:46:e6:7f:cc:bd:25:1a:d0:
         db:a4:b2:79:2f:8d:62:c0:ea:81:4b:4d:03:4d:5c:1d:ff:53:
         d1:f5:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-ams.rpki-client.org