Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-c_4RrUH1JSDVz8TN9bdALkwLPc.roa
File:                     1-c_4RrUH1JSDVz8TN9bdALkwLPc.roa (raw, json)
Hash identifier:          IvoVDfa7XHkfv4Bs6GM5rabmonU5YlWOOhWa9C2Tbjc=
Subject key identifier:   F9:CF:F8:46:B5:07:D4:94:83:57:3F:13:37:D6:DD:00:B9:30:2C:F7
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018322979B75FB2C647E951961E963B3D4E7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-c_4RrUH1JSDVz8TN9bdALkwLPc.roa
Signing time:             Fri 09 Sep 2022 14:11:44 +0000
ROA not before:           Fri 09 Sep 2022 14:11:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60117
IP address blocks:        83.219.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:22:97:9b:75:fb:2c:64:7e:95:19:61:e9:63:b3:d4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Sep  9 14:11:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9cff846b507d49483573f1337d6dd00b9302cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:1a:4c:21:1e:97:06:4b:99:3e:63:c0:07:
                    52:17:66:44:79:80:9d:12:aa:fc:f2:e6:f0:4b:75:
                    ba:ae:92:b1:7e:3a:d8:50:84:0b:0f:2d:e1:fe:a3:
                    9a:96:32:a4:bb:60:fd:3e:68:43:71:ab:8c:14:04:
                    7e:6e:e3:cb:31:27:2f:4d:84:67:d4:e0:86:3b:5d:
                    22:75:3c:b1:65:2b:c3:a4:d1:49:bd:8d:97:c5:2e:
                    f6:7c:f2:fb:2e:a1:b7:65:9f:ee:d7:6b:6c:29:e5:
                    4f:0a:89:2d:4e:84:a5:1d:cc:96:b9:89:2e:94:20:
                    19:03:a9:dd:a5:59:dc:69:6a:10:9d:b0:28:fc:cf:
                    a4:3c:21:80:2c:95:7c:fb:24:bb:71:f4:f2:d6:ba:
                    5d:b8:69:63:0d:26:d3:4f:3c:1b:66:20:80:1c:cb:
                    d7:fd:5b:bb:fa:51:2a:f0:8a:7b:8d:91:6c:3a:95:
                    b6:c3:97:a8:7a:cd:d0:41:63:ed:30:2b:42:68:d1:
                    75:4e:8f:27:28:a6:df:ab:7c:45:f4:af:e8:da:db:
                    99:e5:76:87:36:96:30:3c:c5:5c:73:0e:75:86:44:
                    c4:d6:3d:11:c7:b0:3d:82:d4:ec:75:88:39:46:eb:
                    1f:01:6d:a4:da:a4:c8:36:9f:c0:13:2e:dc:98:ae:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:F8:46:B5:07:D4:94:83:57:3F:13:37:D6:DD:00:B9:30:2C:F7
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-c_4RrUH1JSDVz8TN9bdALkwLPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.219.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:fd:35:bf:07:56:b3:7f:d5:a3:c4:be:e2:6f:39:b9:04:
         17:0e:66:3d:cb:ed:32:a2:7a:c8:96:32:26:9f:df:5c:73:e7:
         10:8b:ec:c1:5f:7e:b7:df:01:50:4b:fc:76:2c:b7:fa:8f:2b:
         93:d2:63:03:41:8a:a6:41:0a:eb:98:5a:74:4f:37:e2:2f:f7:
         45:2d:65:75:9b:b7:02:36:c0:8e:fb:ad:8c:fb:ec:4f:5f:3a:
         07:61:24:fd:27:33:22:8d:c6:a1:c0:ea:8f:f2:18:04:b3:c5:
         6e:0f:cf:02:8f:8b:69:27:0f:64:f3:51:1a:09:48:30:a3:9a:
         6b:96:bc:31:82:d4:66:6d:49:2f:fe:8b:c1:e6:d5:17:4c:9e:
         d4:e2:a3:67:d1:33:15:6b:1d:5a:07:b0:17:b1:40:14:75:60:
         f5:e2:60:ee:23:44:c6:dd:bb:c0:89:3f:65:f1:53:45:b3:a3:
         10:ab:76:5f:9a:60:83:c8:77:92:b5:35:62:6a:37:50:f8:cb:
         be:8c:5a:7c:1c:51:7b:08:81:69:6d:6d:09:f3:8b:42:7e:3e:
         e3:c3:29:d0:43:fe:58:b5:e6:27:ea:83:4e:ef:7a:4f:e3:66:
         e6:43:fe:ca:4c:93:36:21:f4:f5:5a:b0:b2:a4:01:d6:0f:9c:
         9e:c9:fa:c2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYMil5t1+yxkfpUZYeljs9TnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwOTA5MTQxMTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWNmZjg0NmI1MDdkNDk0ODM1NzNmMTMzN2Q2ZGQwMGI5MzAyY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj0aTCEelwZLmT5jwAdSF2ZEeYCd
Eqr88ubwS3W6rpKxfjrYUIQLDy3h/qOaljKku2D9PmhDcauMFAR+buPLMScvTYRn
1OCGO10idTyxZSvDpNFJvY2XxS72fPL7LqG3ZZ/u12tsKeVPCoktToSlHcyWuYku
lCAZA6ndpVncaWoQnbAo/M+kPCGALJV8+yS7cfTy1rpduGljDSbTTzwbZiCAHMvX
/Vu7+lEq8Ip7jZFsOpW2w5eoes3QQWPtMCtCaNF1To8nKKbfq3xF9K/o2tuZ5XaH
NpYwPMVccw51hkTE1j0Rx7A9gtTsdYg5RusfAW2k2qTINp/AEy7cmK71UQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPnP+Ea1B9SUg1c/EzfW3QC5MCz3MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMS1jXzRSclVIMUpTRFZ6OFROOWJkQUxrd0xQYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcx
Mi8xL0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFPbYDAN
BgkqhkiG9w0BAQsFAAOCAQEAFu/9Nb8HVrN/1aPEvuJvObkEFw5mPcvtMqJ6yJYy
Jp/fXHPnEIvswV9+t98BUEv8diy3+o8rk9JjA0GKpkEK65hadE834i/3RS1ldZu3
AjbAjvutjPvsT186B2Ek/SczIo3GocDqj/IYBLPFbg/PAo+LaScPZPNRGglIMKOa
a5a8MYLUZm1JL/6LwebVF0ye1OKjZ9EzFWsdWgewF7FAFHVg9eJg7iNExt27wIk/
ZfFTRbOjEKt2X5pgg8h3krU1Ymo3UPjLvoxafBxRewiBaW1tCfOLQn4+48Mp0EP+
WLXmJ+qDTu96T+Nm5kP+ykyTNiH09VqwsqQB1g+cnsn6wg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org