Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6Py6RTTv_Q_y7xJoZjfRI6iq4-o.roa
File:                     6Py6RTTv_Q_y7xJoZjfRI6iq4-o.roa (raw, json)
Hash identifier:          cw6kcGdwXqGgYtG4IIcA/XvT8UDAaA3UELidacVuwj4=
Subject key identifier:   E8:FC:BA:45:34:EF:FD:0F:F2:EF:12:68:66:37:D1:23:A8:AA:E3:EA
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       01821A5D5FE74FF9FDA1ABECCC5977742116
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6Py6RTTv_Q_y7xJoZjfRI6iq4-o.roa
Signing time:             Wed 20 Jul 2022 06:48:23 +0000
ROA not before:           Wed 20 Jul 2022 06:48:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9833
IP address blocks:        46.232.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1a:5d:5f:e7:4f:f9:fd:a1:ab:ec:cc:59:77:74:21:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Jul 20 06:48:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8fcba4534effd0ff2ef12686637d123a8aae3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:de:b6:05:65:6d:b6:2b:6d:81:8a:93:d9:
                    b7:d2:64:a2:62:94:8a:f9:a0:ca:b7:0b:9e:5e:35:
                    1a:c1:89:79:28:76:d5:a7:8c:70:d8:6f:ce:38:d5:
                    d2:f7:14:0a:a4:b5:34:d8:58:93:04:2d:47:1a:a8:
                    8d:c3:c2:4a:c0:cc:da:1d:c5:f8:db:7e:d3:b8:a3:
                    09:c5:84:27:84:e7:f4:6a:f6:47:1c:45:d7:10:3f:
                    80:5c:e1:c6:97:e3:62:12:8f:a9:88:c3:b0:12:03:
                    0b:a5:46:b2:d4:64:23:94:24:14:88:29:59:8d:13:
                    a2:98:b4:22:b9:e6:e1:cc:ea:f8:93:75:96:b5:69:
                    72:fb:ba:ac:03:e8:32:c0:52:01:a8:33:d6:b8:3a:
                    da:8b:e2:fa:c6:d1:ac:d5:39:49:19:6f:fb:52:cc:
                    f3:05:83:f3:d8:0e:f8:85:f8:15:fe:4a:45:32:50:
                    30:fc:da:ab:dc:07:69:d7:b1:64:b8:6c:5b:24:e3:
                    28:bc:63:d4:9e:1b:9b:30:7f:a1:42:b7:60:2b:91:
                    b0:49:29:0c:2a:cf:92:4c:56:e4:93:cf:f9:f8:18:
                    70:b1:5c:c6:d5:e7:87:e2:12:58:e1:ed:c4:e9:4c:
                    e8:81:62:7d:89:5e:32:7e:4f:a9:76:02:48:9a:81:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:BA:45:34:EF:FD:0F:F2:EF:12:68:66:37:D1:23:A8:AA:E3:EA
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6Py6RTTv_Q_y7xJoZjfRI6iq4-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:cb:9b:50:a0:3b:85:27:ea:fe:39:96:65:5b:2d:61:f6:
         93:27:e3:9b:20:8e:9d:8e:24:b1:ba:27:7d:06:09:a7:af:36:
         e4:6d:7a:b1:04:fe:ac:dd:b8:b7:46:26:53:ae:30:7a:46:ba:
         dd:bb:11:8b:8e:d1:2b:35:0e:f5:a2:7e:5c:63:f2:9f:87:c9:
         70:93:ed:45:39:2a:a1:bf:58:57:1c:e3:c3:f4:b0:d4:e1:5d:
         ab:93:60:62:cf:8e:00:9e:84:b1:09:66:eb:6a:02:fb:5e:67:
         a2:8e:cd:64:c1:82:b6:ae:c1:ff:99:0b:c4:c3:3b:cd:30:61:
         fe:83:15:3b:80:4e:9a:8a:cb:62:3f:9f:bb:12:51:88:a4:d9:
         f7:ba:cf:c7:b7:d3:f5:b8:3d:f3:6e:95:94:e0:09:7f:bf:9f:
         f6:21:5d:d1:7a:e3:e5:8f:bf:73:97:13:38:92:31:82:f7:2e:
         76:5b:b3:ab:d3:2b:62:a7:b2:2b:cc:3d:4f:7c:98:98:af:b5:
         91:7b:1c:61:10:76:f6:4c:7d:fb:fa:70:1f:e3:05:dc:ab:11:
         cf:a7:12:a6:77:13:31:62:b7:7a:42:35:b5:06:27:30:91:bd:
         b1:4b:f6:9e:ab:10:7b:89:15:c5:6a:b5:52:7c:30:22:b0:19:
         05:1f:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org