Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/vyuBjKRIi6czg4DxEReyhhxwQBk.roa
File:                     vyuBjKRIi6czg4DxEReyhhxwQBk.roa (raw, json)
Hash identifier:          SK8xeJZGSTmLBwGuwW1+31SxDK4uveibhVe4UkqT4ng=
Subject key identifier:   BF:2B:81:8C:A4:48:8B:A7:33:83:80:F1:11:17:B2:86:1C:70:40:19
Certificate issuer:       /CN=57b81833f364bc6425b4255b7ee33de0072200b3
Certificate serial:       CBC550
Authority key identifier: 57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/vyuBjKRIi6czg4DxEReyhhxwQBk.roa
Signing time:             Sat 01 Jan 2022 12:06:13 +0000
ROA not before:           Sat 01 Jan 2022 12:06:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2856
IP address blocks:        194.26.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13354320 (0xcbc550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b81833f364bc6425b4255b7ee33de0072200b3
        Validity
            Not Before: Jan  1 12:06:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf2b818ca4488ba7338380f11117b2861c704019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:a5:f9:23:9c:2a:79:0c:bb:f6:ea:fc:71:
                    dd:12:c0:77:1d:6c:28:a1:59:db:b4:0c:51:47:a2:
                    ce:7a:52:9c:ac:6f:11:87:d2:08:1d:5f:7f:b2:76:
                    07:33:be:80:ac:36:66:a5:59:20:0d:44:b3:17:e3:
                    e7:e9:3d:72:b8:3f:eb:ba:fd:51:db:be:08:74:4b:
                    72:76:d7:97:86:fd:0a:b5:8a:a8:be:ca:a1:27:95:
                    9a:45:bc:a1:e5:46:13:07:72:85:da:86:ff:63:ae:
                    cf:4f:86:3b:30:31:88:7b:50:61:9c:87:9c:af:d6:
                    0b:75:79:bf:43:8d:02:c2:07:92:f7:5a:b6:4b:db:
                    24:61:f8:23:28:b7:89:97:05:8c:56:37:d1:1f:1f:
                    45:08:cc:9a:d1:39:19:f1:4a:8d:1f:3a:65:00:c3:
                    a5:86:12:d2:44:d7:0f:7c:8e:da:ff:fd:17:bc:ad:
                    fe:63:de:d0:1b:8a:d7:36:84:83:4f:5f:4c:85:40:
                    fe:fc:06:19:5d:9d:9d:34:2f:87:77:9f:54:dc:14:
                    69:95:ce:2b:f5:ac:3b:93:16:b3:3b:22:64:64:6a:
                    16:ba:62:af:c7:b9:d0:8c:de:d0:b8:61:8a:8d:03:
                    ed:fc:ba:3f:c0:fe:7d:b0:76:6f:6e:23:0b:78:e5:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2B:81:8C:A4:48:8B:A7:33:83:80:F1:11:17:B2:86:1C:70:40:19
            X509v3 Authority Key Identifier:
                keyid:57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/vyuBjKRIi6czg4DxEReyhhxwQBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:82:e5:80:2c:9d:f6:ed:db:ce:23:37:3c:ab:5f:af:3c:32:
         12:d2:bc:e9:34:d1:03:b5:8f:f6:e1:62:ad:d3:25:37:69:1f:
         8f:07:3d:17:b2:e0:70:39:a1:6c:5e:ab:47:96:91:32:5c:67:
         d4:c0:8e:78:b0:4a:02:5a:23:78:b9:c1:eb:ca:f3:71:40:ac:
         35:19:6e:58:91:60:2e:41:03:28:b6:33:a9:14:94:ab:dc:df:
         16:1d:05:19:2f:34:fe:c7:3d:21:fe:ad:90:f2:f1:61:88:df:
         19:50:11:90:ba:8d:e2:96:1d:c3:4b:0f:37:26:31:55:c3:ae:
         17:20:e5:f8:79:28:16:8c:74:d1:9f:cc:30:f7:b9:c9:b9:ec:
         d5:a5:38:be:53:e0:04:b9:8d:a3:40:ff:e7:9d:6e:40:5f:30:
         8b:b1:22:3d:11:6c:a8:04:04:da:8a:66:96:2a:fe:fc:ff:0a:
         9f:7b:13:9a:30:33:1c:0d:39:c4:6b:eb:bf:f2:16:da:9a:ce:
         e6:eb:43:92:7d:9e:14:d5:68:50:43:93:c2:d8:94:49:9c:b7:
         e6:af:9d:48:da:db:25:df:d1:14:87:b9:96:6a:3a:53:1e:53:
         de:94:62:e0:ca:5b:eb:9e:94:8f:c8:63:0d:64:7a:93:bb:0c:
         11:c8:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:26 2023 by rpki-client on console-ams.rpki-client.org