Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g5LSk0BzmWd8JHoq5myBV797ECI.roa
File:                     g5LSk0BzmWd8JHoq5myBV797ECI.roa (raw, json)
Hash identifier:          4XPo5De0+cZvYe/vjpKqqRU7Aa7tY4u64FMaOJnPdmg=
Subject key identifier:   83:92:D2:93:40:73:99:67:7C:24:7A:2A:E6:6C:81:57:BF:7B:10:22
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       012AD2B1
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g5LSk0BzmWd8JHoq5myBV797ECI.roa
Signing time:             Wed 18 May 2022 07:11:17 +0000
ROA not before:           Wed 18 May 2022 07:11:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        2.59.183.0/24 maxlen: 24
                          2.59.182.0/24 maxlen: 24
                          45.156.144.0/24 maxlen: 24
                          45.156.145.0/24 maxlen: 24
                          2.59.180.0/24 maxlen: 24
                          45.156.146.0/24 maxlen: 24
                          45.156.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19583665 (0x12ad2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: May 18 07:11:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8392d293407399677c247a2ae66c8157bf7b1022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:88:39:a5:62:b9:5b:df:cc:55:2d:34:92:3e:
                    ba:c4:a9:b1:98:ca:7a:19:bb:b2:df:b3:3c:98:27:
                    a2:1d:95:d6:61:40:35:ac:f3:ab:a2:63:e4:77:d3:
                    d6:b6:3c:d4:51:0b:40:61:a2:9f:71:45:17:67:b5:
                    c3:ad:23:8b:d2:89:81:e1:c2:58:19:61:4e:ac:6f:
                    23:bd:8d:c0:68:da:b2:a3:9e:ac:a2:df:76:5a:da:
                    78:96:94:f4:1e:5b:bf:eb:1e:39:16:c5:69:cf:1d:
                    0f:4c:72:ef:46:66:ba:45:9f:08:10:2b:18:55:76:
                    f6:d9:3c:b0:a2:c0:04:9e:9f:57:c2:07:7e:9e:53:
                    9a:21:ab:b6:2c:fa:81:e8:2b:c8:fb:d1:20:f8:10:
                    80:be:2a:47:1d:c6:21:f6:b5:c7:c9:77:31:64:1c:
                    bf:6f:68:77:b3:cb:5a:7f:9f:fc:71:0a:59:79:bb:
                    8c:e5:be:1d:a2:3a:2e:72:1c:70:78:e2:5b:99:06:
                    43:b8:4c:8f:b3:d0:6f:12:e1:ef:34:cf:64:68:d1:
                    86:a9:38:84:26:3d:58:46:dd:9f:0f:5d:f7:00:bd:
                    2a:28:0f:e7:fd:72:2a:a4:48:5e:87:01:85:24:f1:
                    4f:f1:cf:3d:55:5f:7c:7c:9f:8d:fb:17:15:46:d0:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:D2:93:40:73:99:67:7C:24:7A:2A:E6:6C:81:57:BF:7B:10:22
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g5LSk0BzmWd8JHoq5myBV797ECI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.180.0/24
                  2.59.182.0/23
                  45.156.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:18:c6:33:d1:7b:9e:c2:6d:ca:9d:1e:c5:28:bd:c0:4c:fe:
         61:fa:0b:4b:aa:e9:83:a5:9c:42:50:ef:ab:46:88:4a:cd:14:
         cb:b4:86:91:bb:fe:c0:4d:72:48:e0:2a:ed:d7:94:9c:69:97:
         b7:a3:30:91:b6:21:4e:d3:30:e3:bc:7b:d5:e2:44:47:ae:46:
         62:8c:77:ed:32:08:49:18:51:4f:0b:c3:39:65:f7:50:ad:97:
         b0:b3:55:63:3a:96:cb:8a:43:47:71:43:02:12:03:54:a0:b8:
         d2:35:14:38:b6:61:8d:2a:eb:85:be:f7:96:38:4c:b7:44:ed:
         b0:e0:8b:c3:29:20:c6:3e:8b:c6:53:34:30:e3:97:19:28:29:
         ed:46:fd:61:66:78:75:b5:09:2b:36:a0:82:8f:e7:a1:32:8a:
         55:e5:13:1f:d8:0b:66:c0:71:63:57:70:ee:2b:4c:a9:f8:6f:
         22:4f:89:8c:d6:78:31:5f:a1:3e:9d:36:25:cb:c5:1e:e0:c1:
         78:74:b3:f1:f4:9e:ce:9b:78:12:74:a0:ce:04:88:8e:a2:a3:
         f8:f6:ec:c8:7d:11:7a:a9:5e:6b:c8:cb:66:03:2e:8c:03:12:
         eb:23:50:d2:5d:82:ad:2e:31:62:71:d7:9a:e6:b1:14:04:aa:
         13:1c:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-fra.rpki-client.org