Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/B6eT_5oZmDmw1lWnoOIlCTz_8sI.roa
File:                     B6eT_5oZmDmw1lWnoOIlCTz_8sI.roa (raw, json)
Hash identifier:          VJxyHVmUh7rTuIAEamsZsqovgX29zIosumFIXepKB2c=
Subject key identifier:   07:A7:93:FF:9A:19:98:39:B0:D6:55:A7:A0:E2:25:09:3C:FF:F2:C2
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       0936D32F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/B6eT_5oZmDmw1lWnoOIlCTz_8sI.roa
Signing time:             Mon 21 Mar 2022 10:02:56 +0000
ROA not before:           Mon 21 Mar 2022 10:02:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207710
IP address blocks:        46.232.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154587951 (0x936d32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Mar 21 10:02:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07a793ff9a199839b0d655a7a0e225093cfff2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:d6:15:03:5c:72:a7:e1:b8:63:78:2b:b0:
                    57:69:b3:5a:38:97:40:a5:e5:ee:25:03:d1:06:8b:
                    67:f7:c9:13:d6:58:03:46:7e:d1:5f:25:d6:83:28:
                    d2:f1:7d:86:2d:38:76:e0:e6:57:f6:2b:43:0c:9e:
                    e8:cd:72:93:14:40:1e:f1:19:db:89:d0:bb:a6:1f:
                    34:1c:d0:e6:5e:ce:d5:6b:3d:b1:b9:0f:c5:da:a8:
                    7b:60:a1:d5:b0:cd:c0:8f:ed:e3:2c:b6:2a:26:b5:
                    70:92:dc:d5:0c:38:6f:47:98:25:8c:f4:fc:37:71:
                    e0:80:30:8a:4b:ed:5f:16:45:e8:48:f4:bf:5a:7e:
                    96:c9:07:81:48:93:e6:a8:a5:8e:d4:36:34:1c:68:
                    f0:78:18:8e:35:07:a0:35:f8:b5:c7:16:75:f5:07:
                    6a:91:9c:b5:f3:05:21:4d:c5:0e:2f:26:d4:d8:31:
                    a4:9d:26:ac:85:69:de:0c:ce:bb:22:0a:0e:28:32:
                    48:0f:4c:f0:d8:e8:bf:9b:8d:df:c6:86:80:4d:76:
                    f4:17:d8:1d:3d:4f:9d:c0:a2:c8:5e:f5:f7:95:0b:
                    4f:a5:cd:0a:0e:00:6f:54:82:ab:50:41:af:0d:2f:
                    0b:a7:4c:da:00:4a:cf:2b:b5:fb:55:5b:a8:01:ff:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A7:93:FF:9A:19:98:39:B0:D6:55:A7:A0:E2:25:09:3C:FF:F2:C2
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/B6eT_5oZmDmw1lWnoOIlCTz_8sI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:06:7f:16:e3:64:b8:b2:b8:7d:2e:9a:75:73:f1:1c:3c:
         b8:d6:e7:a1:f5:e9:6d:b5:38:06:33:d4:53:5c:05:c4:7b:d8:
         a0:1a:34:30:4a:46:b4:0c:5f:58:9d:65:2e:23:5d:52:85:c8:
         ae:76:d2:40:bb:96:69:ee:f9:c5:3a:29:38:ca:46:b2:cf:24:
         91:2b:c0:59:f2:09:f9:e7:ed:f2:fc:b4:06:cc:a9:e1:cf:dc:
         fc:af:fa:e1:1b:72:0f:ce:a9:ac:a9:68:ca:52:3f:ae:ca:83:
         ad:78:cc:79:51:86:63:bc:25:8c:e0:0d:33:0c:e1:01:0a:0f:
         33:82:e9:2f:47:a6:26:05:00:ab:cb:5e:57:70:76:dd:b4:22:
         ea:48:cf:45:07:e7:2b:e1:ed:54:4c:e1:85:25:72:33:b8:51:
         a3:43:a1:3b:48:fc:f9:6d:40:8e:56:06:cf:26:8d:d7:e5:53:
         61:dc:bd:f7:65:99:ae:9c:47:49:ac:2a:46:69:92:5c:4a:2a:
         1e:88:8d:ee:66:d4:db:eb:33:00:01:a6:a2:7e:f2:09:3f:e4:
         cf:61:91:b0:18:41:16:c9:2a:30:0b:65:78:d8:e1:8e:fc:a4:
         5c:35:b6:b9:7f:66:95:35:c1:27:2f:12:52:9c:63:a7:f2:bc:
         d1:04:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org