Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa
File:                     1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa (raw, json)
Hash identifier:          UTNQWvkUXJxgXBZ9gIaFBSdUjYqqaXoD8gDKJaOvnxw=
Subject key identifier:   F9:F7:5A:3F:FC:98:59:31:83:F2:9B:D7:FD:E0:DB:BA:FE:8A:09:2C
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       086CA714
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa
Signing time:             Sat 01 Jan 2022 13:03:06 +0000
ROA not before:           Sat 01 Jan 2022 13:03:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30407
IP address blocks:        46.232.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141338388 (0x86ca714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Jan  1 13:03:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9f75a3ffc98593183f29bd7fde0dbbafe8a092c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:53:3b:f2:3d:df:19:72:28:eb:02:6a:ca:
                    a9:73:fc:87:23:aa:9f:96:c0:5b:cf:3b:b6:f3:1e:
                    f1:f4:46:19:ea:7d:2f:df:55:9a:a7:29:a2:b5:23:
                    a6:19:c4:f5:5e:05:30:36:51:3f:67:13:3c:78:67:
                    c8:da:6e:83:f9:57:5f:5c:58:ca:0a:a9:10:2b:95:
                    99:41:ff:f1:9b:2f:d2:28:06:85:a9:37:c1:70:b2:
                    c9:e9:84:b4:33:c6:ca:01:f9:4a:35:c7:59:e4:24:
                    a9:65:11:17:56:10:6a:33:e0:d3:aa:96:e2:c8:34:
                    a3:bc:a5:62:b0:9b:60:f5:fc:fb:79:ac:bf:f5:32:
                    e3:8d:53:9e:e6:3d:0e:d0:31:15:69:e9:f6:55:4f:
                    97:01:9f:e2:f6:e7:3b:3e:d3:19:ff:13:24:16:90:
                    b7:67:4e:14:18:63:af:82:7e:5c:11:be:8d:1d:12:
                    ff:24:15:14:82:50:4d:29:f8:a7:df:6d:d8:c9:f7:
                    41:30:be:b4:99:e0:76:10:eb:3f:f4:66:a8:bb:a1:
                    ca:8a:ad:22:9d:da:40:5e:f0:fe:fe:b1:9b:6b:b0:
                    9b:a9:df:39:cf:44:e2:cd:c8:ea:a1:78:8e:26:ad:
                    26:d4:8d:ab:da:cf:5e:da:a6:15:45:62:16:3e:95:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F7:5A:3F:FC:98:59:31:83:F2:9B:D7:FD:E0:DB:BA:FE:8A:09:2C
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:42:71:53:f6:1f:52:70:42:23:59:62:2f:4d:02:d5:70:
         3d:1c:db:75:fa:2c:11:f5:ba:00:13:68:6c:c6:ee:23:48:82:
         3b:35:3d:00:af:a5:42:99:79:23:d7:09:9d:8a:0a:e2:a7:cb:
         0e:f5:73:70:88:56:86:a5:da:cf:23:ef:07:f6:fb:fc:35:26:
         bc:67:90:35:94:19:e7:87:65:eb:07:97:d4:a7:c5:4a:85:39:
         c5:ce:07:a3:25:77:a0:ba:48:31:0e:f6:c6:f5:fb:ae:eb:71:
         be:09:83:1a:c5:64:f0:de:a2:f7:d2:12:ef:3b:30:8e:e1:22:
         72:1f:44:e0:23:f5:eb:d8:49:c0:d4:c1:77:c3:dc:7e:52:94:
         84:a8:b0:3b:96:e1:98:b8:13:86:ac:d0:06:cd:23:40:61:2e:
         40:fe:89:64:03:1b:3a:6a:76:11:9c:15:4f:0d:6e:3c:c1:b3:
         68:da:ce:e4:a4:45:1e:b9:a4:b6:7e:a4:bc:e1:8b:c4:b1:4c:
         82:f4:c9:cf:19:e9:ef:54:2f:15:ea:31:a1:b8:9d:18:27:d4:
         17:61:19:a9:8e:5b:1f:4d:48:6a:1f:0a:2e:e1:dc:5c:20:7c:
         24:0f:8c:49:05:1d:0b:39:15:23:39:19:66:59:dd:78:0a:47:
         75:6a:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org