Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2gSKel1_LitScmueD0v5uEh5jeM.roa
File:                     2gSKel1_LitScmueD0v5uEh5jeM.roa (raw, json)
Hash identifier:          bq4DSXVC3oujqz+q2bicUex1/0ulPoqv0fQ/yDxTK2g=
Subject key identifier:   DA:04:8A:7A:5D:7F:2E:2B:52:72:6B:9E:0F:4B:F9:B8:48:79:8D:E3
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0182A60A66A59BFCB7B5C8138D7A4E774B0A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2gSKel1_LitScmueD0v5uEh5jeM.roa
Signing time:             Tue 16 Aug 2022 09:44:35 +0000
ROA not before:           Tue 16 Aug 2022 09:44:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210773
IP address blocks:        193.222.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a6:0a:66:a5:9b:fc:b7:b5:c8:13:8d:7a:4e:77:4b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Aug 16 09:44:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da048a7a5d7f2e2b52726b9e0f4bf9b848798de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:cd:6f:a7:f4:2b:f0:56:0d:52:b6:49:70:
                    39:de:f6:05:02:48:d8:4a:91:78:79:ab:70:4d:22:
                    5c:dd:40:d7:d6:2f:ab:0a:07:a7:bb:1f:4a:f3:70:
                    c5:63:98:80:0b:1c:3d:0d:eb:7b:7f:b6:19:4c:73:
                    1e:b6:ee:d8:4c:31:c6:36:7c:01:74:96:75:c9:d4:
                    e0:d5:ea:d5:16:bd:8f:5b:97:84:b2:ca:85:14:40:
                    41:66:7b:31:8c:82:3c:e1:76:c2:0e:cd:0f:5f:5b:
                    d6:5e:ae:44:4a:2b:66:04:a9:5f:bc:93:29:2b:04:
                    1c:62:6f:97:74:4f:67:99:88:e1:aa:f5:08:fb:58:
                    4f:50:d4:d1:2c:1f:ac:17:31:29:a6:71:d5:7a:fa:
                    2e:48:b2:ce:32:22:c8:3d:42:05:9b:3f:69:b7:95:
                    74:25:97:40:c3:7f:58:33:fa:3c:51:ee:76:13:7e:
                    d3:05:59:36:6c:92:17:2a:e7:b6:bd:fe:1d:c5:cf:
                    f8:e9:12:a5:d4:df:2a:4b:43:61:03:48:fd:47:5d:
                    cc:e9:16:e3:89:d3:85:2f:bf:72:44:c9:05:80:31:
                    d7:fd:8b:b1:10:a3:12:f5:56:8d:db:d9:bc:05:cf:
                    2a:ac:14:cd:e9:65:b2:48:00:11:7d:4b:09:71:98:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:04:8A:7A:5D:7F:2E:2B:52:72:6B:9E:0F:4B:F9:B8:48:79:8D:E3
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2gSKel1_LitScmueD0v5uEh5jeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:49:9b:34:69:43:99:47:b0:74:16:eb:bb:87:f7:cc:c6:6e:
         84:ac:06:cd:68:1d:5e:5e:82:2f:f7:00:4f:02:cb:6a:ed:17:
         cc:9b:33:c7:fd:34:02:d8:4b:71:3e:2a:f7:24:53:0e:6a:aa:
         c3:d9:4b:f9:90:96:c7:fe:01:88:0a:89:87:7b:08:c5:3e:9a:
         a4:2e:e2:ce:7a:94:73:4f:a2:03:4a:b9:26:75:39:99:a9:57:
         a5:38:5e:66:60:be:94:45:b8:9c:83:fe:b3:75:54:53:a4:ca:
         2d:e5:f9:5e:8a:fe:4b:58:b0:a9:b0:e7:bc:64:a3:82:92:0d:
         db:dd:0a:b5:74:cc:92:08:fb:5c:14:40:6a:54:1c:e0:cf:0f:
         a8:29:f2:99:92:df:58:32:22:10:10:e6:48:43:6a:26:f5:27:
         99:8e:f0:c2:3e:f0:ce:51:fc:bf:34:ff:ee:09:b1:02:22:4f:
         03:9c:88:8a:e0:ac:ce:65:9f:e7:5f:35:80:bd:19:03:01:5f:
         60:28:b9:8b:6a:6c:82:58:50:96:8f:a2:e6:b7:bb:65:42:ab:
         62:00:c6:a6:18:24:db:99:1a:4d:51:bc:04:00:8e:a6:f2:f1:
         49:fe:fc:bb:92:53:cf:8c:db:56:99:96:da:6c:c6:0d:86:22:
         df:21:37:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKmCmalm/y3tcgTjXpOd0sKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwODE2MDk0NDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTA0OGE3YTVkN2YyZTJiNTI3MjZiOWUwZjRiZjliODQ4Nzk4ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8LNb6f0K/BWDVK2SXA53vYFAkjY
SpF4eatwTSJc3UDX1i+rCgenux9K83DFY5iACxw9Det7f7YZTHMetu7YTDHGNnwB
dJZ1ydTg1erVFr2PW5eEssqFFEBBZnsxjII84XbCDs0PX1vWXq5ESitmBKlfvJMp
KwQcYm+XdE9nmYjhqvUI+1hPUNTRLB+sFzEppnHVevouSLLOMiLIPUIFmz9pt5V0
JZdAw39YM/o8Ue52E37TBVk2bJIXKue2vf4dxc/46RKl1N8qS0NhA0j9R13M6Rbj
idOFL79yRMkFgDHX/YuxEKMS9VaN29m8Bc8qrBTN6WWySAARfUsJcZiJcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNoEinpdfy4rUnJrng9L+bhIeY3jMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMmdTS2VsMV9MaXRTY211ZUQwdjV1RWg1amVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd5gMA0G
CSqGSIb3DQEBCwUAA4IBAQCDSZs0aUOZR7B0Fuu7h/fMxm6ErAbNaB1eXoIv9wBP
Astq7RfMmzPH/TQC2EtxPir3JFMOaqrD2Uv5kJbH/gGIComHewjFPpqkLuLOepRz
T6IDSrkmdTmZqVelOF5mYL6URbicg/6zdVRTpMot5fleiv5LWLCpsOe8ZKOCkg3b
3Qq1dMySCPtcFEBqVBzgzw+oKfKZkt9YMiIQEOZIQ2om9SeZjvDCPvDOUfy/NP/u
CbECIk8DnIiK4KzOZZ/nXzWAvRkDAV9gKLmLamyCWFCWj6Lmt7tlQqtiAMamGCTb
mRpNUbwEAI6m8vFJ/vy7klPPjNtWmZbabMYNhiLfITeh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org