Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/l5PYE8odKWryBcwiLfkAgHH14qM.roa
File:                     l5PYE8odKWryBcwiLfkAgHH14qM.roa (raw, json)
Hash identifier:          IHeaPlH7GfOv/fnc/A1NdPffvdHb2nFAypk+99CM7bQ=
Subject key identifier:   97:93:D8:13:CA:1D:29:6A:F2:05:CC:22:2D:F9:00:80:71:F5:E2:A3
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       01827CE45B69492057D72A5ABB6AE21223BD
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/l5PYE8odKWryBcwiLfkAgHH14qM.roa
Signing time:             Mon 08 Aug 2022 09:58:36 +0000
ROA not before:           Mon 08 Aug 2022 09:58:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.247.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7c:e4:5b:69:49:20:57:d7:2a:5a:bb:6a:e2:12:23:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Aug  8 09:58:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9793d813ca1d296af205cc222df9008071f5e2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:e0:ab:fc:56:51:16:53:67:f0:c9:05:78:
                    37:cd:9b:69:4b:fe:54:d7:1e:9a:18:66:f0:b0:81:
                    38:18:64:60:dd:b9:bb:18:80:e0:ef:8f:dc:99:71:
                    ef:9f:f0:c7:39:dd:c7:dc:30:14:6c:15:e4:7f:f0:
                    ff:21:dd:61:0b:e7:29:4d:98:7e:75:52:2d:b2:0b:
                    63:67:ba:9b:bc:16:81:43:f2:d5:e2:7d:c5:d2:99:
                    49:5f:ec:54:1c:bc:7e:75:27:32:cd:4f:f5:e1:3d:
                    9f:80:4a:23:75:b3:da:22:ec:ac:4e:2e:06:15:19:
                    6c:b0:c7:2a:5a:60:f3:ee:a0:21:fc:5f:c4:c0:a2:
                    ee:e9:53:79:ab:b0:70:24:56:04:ec:6d:1c:04:de:
                    4e:90:60:3b:15:55:c1:57:45:26:17:fb:7b:3f:8a:
                    95:a2:e2:29:61:de:98:a1:b6:80:ec:b7:16:0a:af:
                    73:30:a4:1b:d2:29:c4:0e:00:c8:77:be:11:3a:71:
                    cb:f1:cb:48:d0:05:e7:05:a0:10:65:26:3c:5a:e5:
                    06:13:92:78:2e:92:63:d3:fb:d9:df:5e:2f:71:2e:
                    18:b0:e3:56:d0:18:d5:7b:fa:19:d8:06:df:6c:02:
                    19:7e:79:ce:b8:f3:e3:4f:ab:22:58:c5:c4:eb:af:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:93:D8:13:CA:1D:29:6A:F2:05:CC:22:2D:F9:00:80:71:F5:E2:A3
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/l5PYE8odKWryBcwiLfkAgHH14qM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:5c:a2:06:60:b9:85:12:72:03:bb:79:dd:77:5c:e4:8b:
         95:bb:cc:ec:22:0b:9a:fd:bd:8f:97:26:d0:d0:80:6b:46:aa:
         eb:02:f2:51:f5:6a:64:f6:8c:e8:61:4d:21:40:47:74:60:0d:
         0e:7e:6b:89:55:a9:6a:6f:23:05:c0:e1:32:98:43:e5:bf:03:
         36:b5:ee:f5:26:74:a6:3a:cd:b6:82:e4:9e:6c:bd:0a:fc:d1:
         1d:b7:e5:c3:cb:33:e7:71:6c:ea:8b:4c:2a:c4:1c:6a:79:53:
         a0:54:25:61:9e:8d:ab:2d:d7:86:dc:20:1f:5f:4a:65:ab:7a:
         66:7c:ef:b8:a0:63:ab:04:fe:61:b6:78:a1:f6:5a:1b:d2:75:
         9f:01:a4:b4:c4:88:36:28:9f:63:50:60:e9:9d:dd:16:93:79:
         eb:9e:ce:4b:36:3e:f9:bc:db:0c:8d:73:4a:45:ea:db:26:20:
         46:d2:81:30:5e:f0:60:4e:be:fa:60:98:24:ff:0c:c4:6b:e6:
         d4:2f:53:07:d8:32:b6:ff:73:08:c4:64:55:ef:1b:d7:dd:87:
         2a:46:91:a3:64:e6:68:40:61:29:85:bd:30:05:c0:25:3f:1c:
         ea:fd:8a:4d:1b:8a:0f:2f:3a:df:22:ab:9a:56:9c:9d:b3:36:
         c3:cb:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org