Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/1-mVVi-QQRH-RpnqdFiigoS3DB-s.roa
File:                     1-mVVi-QQRH-RpnqdFiigoS3DB-s.roa (raw, json)
Hash identifier:          rqMy44HWeY6y5P1xSewdkbV0coDDkW1dm1dREbbao7Q=
Subject key identifier:   FA:65:55:8B:E4:10:44:7F:91:A6:7A:9D:16:28:A0:A1:2D:C3:07:EB
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       0183EEDCCE40905ACFBFB61BA5D521E30AB8
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/1-mVVi-QQRH-RpnqdFiigoS3DB-s.roa
Signing time:             Wed 19 Oct 2022 06:09:51 +0000
ROA not before:           Wed 19 Oct 2022 06:09:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50131
IP address blocks:        45.156.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ee:dc:ce:40:90:5a:cf:bf:b6:1b:a5:d5:21:e3:0a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Oct 19 06:09:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa65558be410447f91a67a9d1628a0a12dc307eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:f4:7c:e5:61:55:ad:d7:69:86:93:7f:30:
                    d9:d1:6b:e6:81:f0:7c:c5:82:9b:18:58:8e:a1:dd:
                    fd:50:d4:7f:63:88:0e:f1:48:50:1d:1e:9e:3f:64:
                    62:2a:e1:69:f7:ba:b0:27:60:f4:41:d5:a5:d5:25:
                    46:df:ec:f2:2d:c6:35:6b:63:4d:eb:a4:b3:1d:27:
                    0e:79:ee:a3:ea:11:a7:f3:9c:f6:b4:3c:25:42:b6:
                    ec:0c:13:ae:62:ee:6d:84:c9:61:ff:98:e2:7b:ad:
                    b2:aa:78:49:81:5e:ce:89:4b:98:88:38:1e:68:37:
                    da:79:9d:ab:50:26:2c:c3:9b:c2:49:35:06:01:f0:
                    64:9f:1e:25:31:e0:30:50:5e:75:df:06:4a:42:a3:
                    92:04:d9:b9:64:0e:17:37:4e:80:3f:3b:3d:1a:98:
                    12:8f:47:1e:2a:ea:3f:39:b7:77:7e:97:c3:14:c4:
                    43:7a:e2:d6:cb:32:b4:b4:34:70:90:b0:b4:44:ac:
                    ba:54:5b:d5:53:8f:6b:82:67:e3:80:1d:00:dd:7d:
                    f0:36:08:81:d7:48:1e:bf:21:6b:6f:e6:d6:73:89:
                    01:b7:c5:45:93:26:e8:7b:55:43:e6:06:8b:c6:19:
                    36:2b:22:a4:d9:db:43:c8:85:e3:94:7d:00:a5:47:
                    4c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:65:55:8B:E4:10:44:7F:91:A6:7A:9D:16:28:A0:A1:2D:C3:07:EB
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/1-mVVi-QQRH-RpnqdFiigoS3DB-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:1c:34:0a:92:ca:ca:05:8b:8e:1c:a7:fc:24:6c:21:5c:
         2d:ae:79:59:96:2e:a6:19:e6:58:d0:fe:d9:95:34:ad:0f:d6:
         d4:a5:27:59:2b:70:cf:88:7c:1d:ee:5a:a9:43:7a:56:d2:8c:
         6d:d7:bd:8b:a5:df:b1:85:4a:c1:e4:96:0d:06:ce:53:a5:3a:
         ac:68:25:86:19:8c:2d:8b:4e:c3:90:f2:ea:b7:ec:3a:26:d5:
         fd:51:3b:88:51:b9:90:e3:3e:e8:10:80:9c:56:2c:27:af:93:
         40:47:7d:88:88:b4:9d:03:b1:67:1d:0e:47:32:09:83:b9:89:
         e2:ec:f4:14:b6:0c:e6:08:d9:72:ae:df:fd:43:ee:40:66:75:
         c7:66:39:39:e8:66:56:f2:26:18:57:05:79:09:1d:39:56:0f:
         99:eb:ee:a7:94:5e:7a:c2:17:d4:80:cb:e9:86:c3:fb:7b:36:
         c4:47:49:a1:75:3d:5d:a4:94:b7:14:ea:9b:b5:61:d8:9c:78:
         6e:a0:f2:df:d8:e3:3d:6b:34:1a:91:2e:62:a6:74:f1:a0:bc:
         7f:9a:77:af:44:2e:15:5b:b3:bc:d0:fa:e5:df:aa:f2:2a:a5:
         cc:f7:1e:33:b0:5e:5f:1b:02:2b:82:9f:59:fe:2b:67:0f:62:
         c0:a7:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:53 2023 by rpki-client on console-ams.rpki-client.org