Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zWW0lSIQ3ROhKWr_MtkBcJRYCIo.roa
File:                     zWW0lSIQ3ROhKWr_MtkBcJRYCIo.roa (raw, json)
Hash identifier:          TAtoqkhgGAEU6oYGbv+V3RtqYtWnlCPEhD28IvJ2X3Q=
Subject key identifier:   CD:65:B4:95:22:10:DD:13:A1:29:6A:FF:32:D9:01:70:94:58:08:8A
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       0A3890E5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zWW0lSIQ3ROhKWr_MtkBcJRYCIo.roa
Signing time:             Thu 30 Jun 2022 15:42:02 +0000
ROA not before:           Thu 30 Jun 2022 15:42:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        46.232.80.0/20 maxlen: 20
                          46.232.24.0/21 maxlen: 21
                          46.232.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171479269 (0xa3890e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Jun 30 15:42:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd65b4952210dd13a1296aff32d901709458088a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:63:9c:6f:48:98:86:9e:f0:0c:c4:46:4a:
                    3c:93:73:2b:7b:a7:e4:69:5c:41:30:af:d5:4f:42:
                    41:ae:e4:6f:0a:83:c6:69:e4:06:3c:75:81:2c:68:
                    0b:1d:70:8f:fe:2d:b6:33:0e:2d:c0:72:1b:a5:d0:
                    7e:a6:60:b4:3f:d3:3e:6b:63:0b:c6:68:19:f3:fd:
                    9c:01:19:a7:eb:84:57:b9:13:ba:df:e7:16:e8:1f:
                    97:f3:d7:e7:85:51:db:a2:b5:35:62:5c:9b:00:bb:
                    87:b2:f0:ab:a7:63:6d:d0:00:11:10:8f:f4:d1:e4:
                    8a:93:b3:14:85:e0:69:10:a5:5e:e8:86:fd:86:6e:
                    54:93:e7:45:c0:1f:ea:02:43:ca:fb:78:3a:8e:8b:
                    c1:f2:5d:c3:6f:79:ed:51:65:54:2a:b4:2c:ee:c2:
                    8d:5d:0b:b5:9a:21:b7:d6:69:a4:3f:9e:20:2e:82:
                    9d:cb:69:54:c0:65:5a:ac:89:cb:e6:97:3e:85:24:
                    bc:e9:8c:c3:70:3e:e9:8a:e9:98:65:b4:da:0a:ec:
                    de:53:c0:64:5d:5a:1a:01:9d:6a:f1:65:12:86:54:
                    78:1e:5c:6c:a6:d5:18:6f:f8:e2:31:3a:5e:d6:4b:
                    78:11:6e:9c:a1:e9:ea:4f:fa:9b:dd:4c:3d:89:85:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:B4:95:22:10:DD:13:A1:29:6A:FF:32:D9:01:70:94:58:08:8A
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zWW0lSIQ3ROhKWr_MtkBcJRYCIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.24.0-46.232.47.255
                  46.232.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:30:2f:65:79:f6:fd:53:4d:78:0e:32:cb:41:65:c3:c3:
         ef:d9:70:06:06:d6:25:a3:30:46:6c:27:b8:d9:96:6a:55:47:
         bf:cb:24:fc:cf:c6:0c:bd:e1:eb:76:2a:89:42:3f:ff:09:7f:
         f0:d2:73:96:88:bf:5d:43:3c:e3:4a:a9:74:8e:99:52:66:50:
         51:cf:2c:47:75:36:46:49:c0:68:91:57:0b:cd:6c:d9:8c:cc:
         5b:60:13:cf:02:d1:ea:fe:04:74:83:9d:9e:bb:90:76:67:4d:
         e5:a0:1a:5e:c6:85:aa:3d:b8:a0:2f:84:c3:e2:f6:04:eb:e8:
         13:cc:46:8f:c9:f5:53:b7:83:6d:9e:6d:c0:ca:65:73:1c:49:
         4d:64:3c:a0:fa:9d:1a:82:f1:52:3e:0c:0f:80:27:d8:d8:df:
         fb:67:4b:69:2a:16:13:4f:ca:cb:b1:c7:2e:95:c2:5e:68:9b:
         7b:89:d9:4c:2d:e1:83:ba:9c:e5:ba:34:53:3d:15:1a:37:7b:
         d3:32:a4:e8:50:40:bf:ff:48:a9:16:df:9d:df:00:10:b4:16:
         e3:54:28:16:b7:fb:84:84:14:21:94:99:22:5d:35:7a:83:1c:
         2c:76:6d:51:da:49:0e:cb:94:4a:b0:7e:cd:fd:7c:54:58:03:
         da:0c:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org