Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuwQwxQ9Vfh1_AFKiqbUUncGX2U.roa
File:                     ZuwQwxQ9Vfh1_AFKiqbUUncGX2U.roa (raw, json)
Hash identifier:          OvFBqDYLVNLKTuDflGmSQCm1sUYzEZWDHzTFMGOn/N4=
Subject key identifier:   66:EC:10:C3:14:3D:55:F8:75:FC:01:4A:8A:A6:D4:52:77:06:5F:65
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1EE99F92
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuwQwxQ9Vfh1_AFKiqbUUncGX2U.roa
Signing time:             Tue 07 Jun 2022 08:01:21 +0000
ROA not before:           Tue 07 Jun 2022 08:01:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        87.121.122.0/23 maxlen: 24
                          87.121.124.0/23 maxlen: 24
                          185.207.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518627218 (0x1ee99f92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jun  7 08:01:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66ec10c3143d55f875fc014a8aa6d45277065f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:44:c3:a6:16:f0:44:1a:2a:87:93:01:f7:
                    b2:dc:0d:22:d8:f2:2b:16:ae:0d:da:0a:f7:30:ca:
                    1a:56:0c:5d:c0:04:b2:18:6d:ac:4b:1d:e3:ec:9a:
                    cb:7f:06:42:cd:84:58:38:c1:c8:01:bf:3d:e0:4e:
                    ef:d4:09:7c:e4:36:75:d0:13:ed:20:e6:e5:88:09:
                    b5:b4:21:24:21:e2:ff:b9:e9:cb:21:8c:82:0f:a6:
                    90:00:cd:8e:19:b9:89:fa:2f:2d:6a:13:00:3c:0b:
                    3f:81:cf:65:22:1e:f6:ec:41:7d:61:11:16:eb:ec:
                    8f:c9:b8:54:fe:4d:16:3b:05:1d:6f:08:dd:f9:4a:
                    43:6b:69:c2:c1:85:76:fd:fb:7c:b6:e9:6b:6d:50:
                    43:04:39:f4:25:cb:40:e8:a7:cf:a8:d3:54:92:2b:
                    15:03:50:2e:95:4d:47:3e:38:35:d4:4e:14:d2:b0:
                    76:21:50:ea:07:c8:30:50:60:d3:54:d9:53:d2:c2:
                    f0:59:d5:95:14:56:f0:50:fe:78:a5:16:6a:8b:00:
                    9f:6c:81:5e:62:7c:f0:70:1e:8e:37:fb:24:24:5a:
                    c5:b4:ad:72:ba:93:ac:53:ed:ea:be:99:b2:b4:47:
                    33:13:a8:74:7e:7c:1b:a4:b7:f9:d2:2b:a9:19:b6:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EC:10:C3:14:3D:55:F8:75:FC:01:4A:8A:A6:D4:52:77:06:5F:65
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuwQwxQ9Vfh1_AFKiqbUUncGX2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.121.122.0-87.121.125.255
                  185.207.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:31:5a:d4:bd:0a:78:4c:dd:86:b4:e3:51:97:03:07:ad:bf:
         c6:00:ce:99:97:91:ff:a7:ef:8c:60:5f:68:35:30:c2:9f:52:
         4f:dc:d0:bf:f9:fa:d2:46:f7:dd:44:2f:d2:1c:13:cd:47:87:
         35:6f:6f:83:50:77:04:89:a3:57:ba:cd:74:69:c4:38:10:ab:
         64:9e:0b:ad:a6:d3:93:73:9d:18:8a:e3:c0:11:85:d6:1d:86:
         80:00:2b:51:76:bf:3e:0b:fa:c1:54:4b:7b:65:d1:b5:16:09:
         5d:6c:58:49:01:e7:35:d6:25:ea:5b:20:58:34:ae:5c:2d:24:
         b5:00:8e:ce:d8:ca:b3:11:15:37:0e:27:ac:b0:9d:2a:fe:13:
         12:06:d5:29:73:ea:7b:b4:1a:2d:0a:e7:6a:9d:22:9f:ff:93:
         1d:5f:20:4e:5c:aa:60:6a:c7:73:fa:70:68:8b:e0:91:78:84:
         61:f2:29:46:a7:5a:41:0b:19:37:18:20:8b:c4:d6:dc:40:92:
         bc:fa:ef:97:da:3b:1d:61:a7:bb:a5:c8:80:6b:37:db:8b:cd:
         97:af:10:8f:bb:c9:f3:62:55:f7:0a:df:f2:df:da:5f:6e:12:
         2a:86:7e:3f:dd:7c:74:bd:3d:36:31:c8:81:c6:d6:69:75:80:
         2d:5d:85:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEHumfkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDYw
NzA4MDEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjZlYzEwYzMxNDNk
NTVmODc1ZmMwMTRhOGFhNmQ0NTI3NzA2NWY2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJVTRMOmFvBEGiqHkwH3stwNItjyKxauDdoK9zDKGlYMXcAE
shhtrEsd4+yay38GQs2EWDjByAG/PeBO79QJfOQ2ddAT7SDm5YgJtbQhJCHi/7np
yyGMgg+mkADNjhm5ifovLWoTADwLP4HPZSIe9uxBfWERFuvsj8m4VP5NFjsFHW8I
3flKQ2tpwsGFdv37fLbpa21QQwQ59CXLQOinz6jTVJIrFQNQLpVNRz44NdROFNKw
diFQ6gfIMFBg01TZU9LC8FnVlRRW8FD+eKUWaosAn2yBXmJ88HAejjf7JCRaxbSt
crqTrFPt6r6ZsrRHMxOodH58G6S3+dIrqRm2lFMCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBRm7BDDFD1V+HX8AUqKptRSdwZfZTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L1p1d1F3eFE5VmZoMV9BRktpcWJVVW5jR1gyVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQBV3l6AwQBV3l8AwQAuc8MMA0G
CSqGSIb3DQEBCwUAA4IBAQAGMVrUvQp4TN2GtONRlwMHrb/GAM6Zl5H/p++MYF9o
NTDCn1JP3NC/+frSRvfdRC/SHBPNR4c1b2+DUHcEiaNXus10acQ4EKtkngutptOT
c50YiuPAEYXWHYaAACtRdr8+C/rBVEt7ZdG1FgldbFhJAec11iXqWyBYNK5cLSS1
AI7O2MqzERU3DiessJ0q/hMSBtUpc+p7tBotCudqnSKf/5MdXyBOXKpgasdz+nBo
i+CReIRh8ilGp1pBCxk3GCCLxNbcQJK8+u+X2jsdYae7pciAazfbi82XrxCPu8nz
YlX3Ct/y39pfbhIqhn4/3Xx0vT02MciBxtZpdYAtXYXK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org