Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/VlGG2CI1e_05NWYBw5uAgs6F4fM.roa
File:                     VlGG2CI1e_05NWYBw5uAgs6F4fM.roa (raw, json)
Hash identifier:          8qGvD+dzfkKlngCFma8+JAtGEpyQL+3vFjkMROcDPwI=
Subject key identifier:   56:51:86:D8:22:35:7B:FD:39:35:66:01:C3:9B:80:82:CE:85:E1:F3
Certificate issuer:       /CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Certificate serial:       02224681
Authority key identifier: 75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/VlGG2CI1e_05NWYBw5uAgs6F4fM.roa
Signing time:             Wed 15 Jun 2022 18:17:45 +0000
ROA not before:           Wed 15 Jun 2022 18:17:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202470
IP address blocks:        213.109.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35800705 (0x2224681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
        Validity
            Not Before: Jun 15 18:17:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=565186d822357bfd39356601c39b8082ce85e1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:be:23:eb:e4:25:10:1a:ed:52:c2:23:10:
                    6e:7e:70:5f:d0:35:07:09:8c:f1:98:35:30:23:09:
                    65:e5:91:69:8f:98:80:c2:f3:89:14:bf:0d:6c:2b:
                    05:0a:9f:f0:ac:01:86:83:81:4c:69:76:b1:de:b1:
                    35:12:be:99:43:e6:1a:53:59:fc:63:02:72:09:57:
                    3e:5f:c3:5c:28:0d:92:48:70:b8:d3:af:25:94:27:
                    be:a9:94:7c:8e:40:23:29:56:8f:52:9e:f7:95:92:
                    6e:71:26:8e:73:9d:bd:6d:8d:51:c2:eb:fd:3d:26:
                    eb:41:e2:9e:26:63:a4:c8:58:a8:b6:60:f5:15:b8:
                    ef:c9:55:54:ff:93:fd:8e:09:26:73:a2:0a:5e:6c:
                    01:1c:ed:a6:77:29:66:ac:d4:20:b3:c3:09:81:5b:
                    0a:47:91:c5:a9:2b:b6:a0:30:11:26:9e:0d:02:47:
                    64:4c:97:24:04:01:2e:b9:4c:c8:be:0c:89:32:66:
                    97:64:15:6f:45:4a:07:a3:c8:04:f4:47:ce:21:bc:
                    e6:79:83:7d:0e:75:10:84:a1:42:54:06:b3:39:03:
                    02:86:be:30:6b:93:ac:28:96:17:24:54:55:64:d3:
                    34:3a:e0:06:e3:3a:47:f2:a7:17:1a:8b:9c:b1:a1:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:86:D8:22:35:7B:FD:39:35:66:01:C3:9B:80:82:CE:85:E1:F3
            X509v3 Authority Key Identifier:
                keyid:75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/VlGG2CI1e_05NWYBw5uAgs6F4fM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/deiysou6PcToYdXL9bwcyYyJ5XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:9d:d7:8c:61:fc:f6:e7:68:b4:52:db:db:e3:cd:7d:be:
         34:3c:93:a1:6a:ab:0b:1f:7b:ef:43:65:f8:c6:0c:47:7e:d6:
         f9:90:3e:62:bd:17:fc:84:d3:6a:b7:af:01:1d:a3:a6:ce:04:
         21:d7:99:2d:1e:b1:98:bb:b1:d0:7a:c3:1a:71:35:e5:b9:77:
         2c:46:5d:d9:07:f7:af:e9:6d:e3:2b:c3:34:0e:cb:94:1f:a7:
         4c:db:6b:f1:d5:db:84:6b:89:14:85:7f:b9:37:d6:b9:c3:4c:
         77:0c:48:84:a6:73:12:4c:84:3c:30:82:e6:88:19:6f:34:1d:
         85:83:3a:ba:59:40:23:9a:c2:d3:54:e6:23:c2:c9:fc:1d:6e:
         82:51:8e:71:87:fc:cf:fc:4a:81:dc:d0:ba:f7:22:d9:00:11:
         b8:56:0a:32:75:15:fb:58:af:e9:81:ff:23:f5:dc:5a:30:44:
         63:42:6d:0c:28:38:d6:9e:fb:00:11:97:72:c3:20:78:db:19:
         3e:3d:ff:27:d8:1e:e7:e0:8c:28:95:93:66:66:cc:5c:b7:5f:
         92:60:58:82:ca:d3:36:7e:b5:c8:6d:16:b5:b0:46:dd:f8:b3:
         2a:a5:25:9b:a7:95:8a:8f:2a:07:ed:93:d5:d8:ed:54:7a:d0:
         ae:5b:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net