Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5sexWD0iIsOxHyW3qReoo8VQQ10.roa
File:                     5sexWD0iIsOxHyW3qReoo8VQQ10.roa (raw, json)
Hash identifier:          Dv6W2VlyY0AQ1WqIo7azhmteuqF5zSbYCTE6MyohQN8=
Subject key identifier:   E6:C7:B1:58:3D:22:22:C3:B1:1F:25:B7:A9:17:A8:A3:C5:50:43:5D
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       0B551958
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5sexWD0iIsOxHyW3qReoo8VQQ10.roa
Signing time:             Sat 01 Jan 2022 08:58:32 +0000
ROA not before:           Sat 01 Jan 2022 08:58:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30734
IP address blocks:        62.244.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190126424 (0xb551958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  1 08:58:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6c7b1583d2222c3b11f25b7a917a8a3c550435d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:59:45:9b:07:39:62:fb:ed:7d:90:c4:25:
                    ae:2f:42:93:db:46:cb:86:3e:ad:03:22:fa:3c:0c:
                    93:e7:d3:e5:62:a2:56:dc:77:d6:83:83:00:58:c4:
                    96:db:fd:86:40:7f:93:62:73:a9:95:35:c2:6d:26:
                    fb:d5:fb:48:73:8b:2f:a8:73:a8:fb:48:97:ae:1b:
                    eb:e2:d0:d4:70:81:8d:43:ab:44:11:de:01:a5:83:
                    28:db:f2:09:be:53:38:28:6e:fd:19:07:66:d1:ee:
                    1d:d6:4c:c6:ee:df:88:ac:c2:be:39:ba:b0:95:83:
                    fc:24:0b:c2:f5:37:49:34:c3:0f:56:6b:72:75:24:
                    fd:0d:ee:cb:8e:7a:28:87:30:41:c7:d9:29:26:34:
                    49:de:99:5b:41:f3:f7:d3:25:cb:f2:36:8f:ed:ff:
                    65:0c:27:02:5a:41:11:22:de:d0:c9:c5:b1:d7:8c:
                    a6:8c:da:dd:9e:27:b9:26:72:26:c8:81:97:d6:0a:
                    ce:62:03:16:6f:ac:f9:b0:c1:62:c5:5c:ea:d1:52:
                    1f:d5:98:09:2d:4e:ba:2b:e4:2c:37:3c:40:69:e7:
                    91:aa:91:8b:c6:f0:d8:29:29:57:76:be:d5:9f:37:
                    d8:21:02:c1:f3:d8:18:89:ed:a3:e3:72:cc:1f:1d:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C7:B1:58:3D:22:22:C3:B1:1F:25:B7:A9:17:A8:A3:C5:50:43:5D
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5sexWD0iIsOxHyW3qReoo8VQQ10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.244.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:f6:bf:4c:ad:11:0a:fc:ea:c5:3b:74:21:45:5c:b3:3a:
         69:3a:3c:52:55:3c:88:18:ce:72:43:1e:3f:7c:f1:be:97:df:
         41:98:08:ee:01:64:6c:15:bc:c4:cb:b4:eb:ac:87:2e:93:73:
         0b:de:5e:01:e7:3f:3c:19:6f:8a:7c:d7:7f:4d:25:d4:72:31:
         fb:91:f4:38:10:65:7f:8e:24:40:41:0c:69:2c:28:33:57:78:
         e9:b8:58:58:cf:8b:1a:c0:e3:bf:78:59:d5:81:3e:da:31:03:
         08:96:a7:24:95:8c:a3:ec:4c:f9:6e:fe:00:c5:53:14:23:60:
         d4:9a:be:8e:aa:c5:90:fe:c5:80:9c:bf:64:c3:07:2c:76:28:
         40:5d:84:73:a0:2d:13:e6:cc:85:16:af:9c:63:6b:28:39:4e:
         b3:21:b8:d0:ea:d8:54:d9:e4:bd:f3:e1:dc:ae:b3:34:88:77:
         a5:b4:6f:b8:8e:52:13:b3:f1:c5:d4:9e:84:6d:f8:32:6b:81:
         ff:87:1d:be:96:9a:64:31:f1:62:7a:b9:ee:59:bb:98:79:71:
         cc:09:49:0f:6a:5f:24:f6:7b:90:ca:15:13:df:82:db:fc:b4:
         d1:eb:8c:8a:88:75:a5:9b:2d:32:90:05:2e:ae:9a:60:ea:0f:
         c5:13:70:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC1UZWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjhmZTM1Y2M5NjI2MzNhMjc1N2FmMTBhMGU2ZThhYjZkMDFmNGM5MB4XDTIyMDEw
MTA4NTgzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTZjN2IxNTgzZDIy
MjJjM2IxMWYyNWI3YTkxN2E4YTNjNTUwNDM1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALEzWUWbBzli++19kMQlri9Ck9tGy4Y+rQMi+jwMk+fT5WKi
Vtx31oODAFjEltv9hkB/k2JzqZU1wm0m+9X7SHOLL6hzqPtIl64b6+LQ1HCBjUOr
RBHeAaWDKNvyCb5TOChu/RkHZtHuHdZMxu7fiKzCvjm6sJWD/CQLwvU3STTDD1Zr
cnUk/Q3uy456KIcwQcfZKSY0Sd6ZW0Hz99Mly/I2j+3/ZQwnAlpBESLe0MnFsdeM
poza3Z4nuSZyJsiBl9YKzmIDFm+s+bDBYsVc6tFSH9WYCS1OuivkLDc8QGnnkaqR
i8bw2CkpV3a+1Z832CECwfPYGInto+NyzB8d1ZECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTmx7FYPSIiw7EfJbepF6ijxVBDXTAfBgNVHSMEGDAWgBRWj+NcyWJjOidX
rxCg5uirbQH0yTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZvX2pYTWxpWXpvblY2OFFvT2JvcTIwQjlNay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvMzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8x
LzVzZXhXRDBpSXNPeEh5VzNxUmVvbzhWUVExMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
MzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8xL1ZvX2pYTWxpWXpv
blY2OFFvT2JvcTIwQjlNay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD703TANBgkqhkiG9w0BAQsFAAOC
AQEAQqX2v0ytEQr86sU7dCFFXLM6aTo8UlU8iBjOckMeP3zxvpffQZgI7gFkbBW8
xMu066yHLpNzC95eAec/PBlvinzXf00l1HIx+5H0OBBlf44kQEEMaSwoM1d46bhY
WM+LGsDjv3hZ1YE+2jEDCJanJJWMo+xM+W7+AMVTFCNg1Jq+jqrFkP7FgJy/ZMMH
LHYoQF2Ec6AtE+bMhRavnGNrKDlOsyG40OrYVNnkvfPh3K6zNIh3pbRvuI5SE7Px
xdSehG34MmuB/4cdvpaaZDHxYnq57lm7mHlxzAlJD2pfJPZ7kMoVE9+C2/y00euM
ioh1pZstMpAFLq6aYOoPxRNw3A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:03 2023 by rpki-client on console-ams.rpki-client.org