Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ELpIHQ9U-6-rlWlQxD13HXR1k8A.roa
File:                     ELpIHQ9U-6-rlWlQxD13HXR1k8A.roa (raw, json)
Hash identifier:          RTlKqLnuzUBtL0yxUY2yqvedtbedKFtEmfcd7TQ3WWg=
Subject key identifier:   10:BA:48:1D:0F:54:FB:AF:AB:95:69:50:C4:3D:77:1D:74:75:93:C0
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38B40816
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ELpIHQ9U-6-rlWlQxD13HXR1k8A.roa
Signing time:             Tue 17 May 2022 05:30:24 +0000
ROA not before:           Tue 17 May 2022 05:30:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62418
IP address blocks:        195.34.98.0/23 maxlen: 23
                          62.204.132.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951322646 (0x38b40816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10ba481d0f54fbafab956950c43d771d747593c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9d:cb:99:a6:47:45:87:06:ed:df:86:31:9e:
                    b3:eb:95:da:dc:ad:87:6f:0b:03:82:f8:f8:e6:15:
                    b8:9e:80:e5:7d:99:7a:b3:01:7e:ee:a5:5b:f4:5b:
                    1f:1e:6d:9c:84:be:09:51:0a:5b:dd:c7:87:96:96:
                    d9:4f:b7:ab:e5:5f:4e:29:fa:a6:e1:1c:95:31:d5:
                    38:90:71:41:4b:d0:65:d2:3b:05:0a:e4:88:4c:ea:
                    d8:20:1b:40:b4:35:15:6b:64:01:ba:fe:91:59:8e:
                    02:0f:9a:ef:8d:e9:70:6f:5a:1a:a1:87:24:06:bf:
                    a4:18:c4:81:a5:8e:87:7e:0c:30:74:ed:e0:d0:81:
                    9e:1f:ab:45:c8:18:69:c7:df:33:34:89:49:f1:e1:
                    6b:c9:6d:80:29:a0:58:11:1e:67:50:10:6b:08:a2:
                    23:e9:a1:2b:2b:78:26:79:49:e8:f5:1e:c0:1d:95:
                    b2:aa:cc:ef:09:88:c2:18:53:cc:11:70:aa:7b:ee:
                    7e:3b:89:cd:88:b1:b5:fd:7d:80:0b:61:26:40:31:
                    28:a5:a4:10:a5:a2:73:7c:fd:38:47:6e:d9:82:09:
                    b7:79:f1:97:df:3a:b9:b2:8c:32:6a:55:cb:5f:88:
                    19:fa:43:0b:f2:f1:83:e7:72:a9:e9:68:d9:cf:24:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BA:48:1D:0F:54:FB:AF:AB:95:69:50:C4:3D:77:1D:74:75:93:C0
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ELpIHQ9U-6-rlWlQxD13HXR1k8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.132.0/23
                  195.34.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:31:0f:9a:1f:a9:28:75:1f:cb:d6:59:da:15:7e:43:f7:
         83:ed:ed:3f:72:51:e2:ba:cc:11:8c:c6:18:7d:9f:f2:05:56:
         34:ce:2b:52:78:ef:63:e8:74:8b:c9:ad:72:5e:2f:16:f9:31:
         e5:96:47:12:25:c2:de:ed:24:ca:ec:c7:e5:f3:a6:2a:37:25:
         b1:79:2e:57:d6:f7:17:b7:4d:ea:b4:2e:9e:bd:3a:91:d8:56:
         4c:67:0f:97:d0:cd:a3:1f:eb:5e:5f:82:e6:a5:6f:7b:6b:c1:
         de:66:be:7f:92:3a:01:80:ab:2f:88:e0:f5:a0:12:64:26:57:
         6c:1e:5e:05:23:1f:a9:77:80:24:b7:d3:6a:4c:ef:4b:26:c9:
         49:7d:af:aa:6a:3c:bf:06:0e:b5:25:d1:81:34:be:7c:40:41:
         20:94:76:4a:c6:a8:a5:06:fa:26:78:48:b2:4f:85:8c:29:06:
         e2:8b:e8:87:ec:2d:05:9d:eb:da:c1:46:ca:83:e0:b3:7c:de:
         5f:63:c3:58:c4:49:7d:4c:58:a0:ba:10:f6:77:65:67:84:37:
         c5:58:f9:9a:ae:b1:bf:8c:8f:d4:33:58:d4:9d:68:7a:03:d1:
         34:8e:3e:d1:a5:ac:65:1d:57:56:a3:1b:55:dc:cc:0f:dc:0c:
         8e:c8:c4:4d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOLQIFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDUx
NzA1MzAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBiYTQ4MWQwZjU0
ZmJhZmFiOTU2OTUwYzQzZDc3MWQ3NDc1OTNjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOmdy5mmR0WHBu3fhjGes+uV2tyth28LA4L4+OYVuJ6A5X2Z
erMBfu6lW/RbHx5tnIS+CVEKW93Hh5aW2U+3q+VfTin6puEclTHVOJBxQUvQZdI7
BQrkiEzq2CAbQLQ1FWtkAbr+kVmOAg+a743pcG9aGqGHJAa/pBjEgaWOh34MMHTt
4NCBnh+rRcgYacffMzSJSfHha8ltgCmgWBEeZ1AQawiiI+mhKyt4JnlJ6PUewB2V
sqrM7wmIwhhTzBFwqnvufjuJzYixtf19gAthJkAxKKWkEKWic3z9OEdu2YIJt3nx
l986ubKMMmpVy1+IGfpDC/Lxg+dyqelo2c8kJW0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQQukgdD1T7r6uVaVDEPXcddHWTwDAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L0VMcElIUTlVLTYtcmxXbFF4RDEzSFhSMWs4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAT7MhAMEAcMiYjANBgkqhkiG9w0B
AQsFAAOCAQEARlsxD5ofqSh1H8vWWdoVfkP3g+3tP3JR4rrMEYzGGH2f8gVWNM4r
UnjvY+h0i8mtcl4vFvkx5ZZHEiXC3u0kyuzH5fOmKjclsXkuV9b3F7dN6rQunr06
kdhWTGcPl9DNox/rXl+C5qVve2vB3ma+f5I6AYCrL4jg9aASZCZXbB5eBSMfqXeA
JLfTakzvSybJSX2vqmo8vwYOtSXRgTS+fEBBIJR2SsaopQb6JnhIsk+FjCkG4ovo
h+wtBZ3r2sFGyoPgs3zeX2PDWMRJfUxYoLoQ9ndlZ4Q3xVj5mq6xv4yP1DNY1J1o
egPRNI4+0aWsZR1XVqMbVdzMD9wMjsjETQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-ams.rpki-client.org