Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SSduahBOmCUqgBcMl_xfr-44qWw.roa
File:                     SSduahBOmCUqgBcMl_xfr-44qWw.roa (raw, json)
Hash identifier:          BZzrxZcEhogwkWyKYjtl4HPlEJb0ozQWr87YOMlNZYc=
Subject key identifier:   49:27:6E:6A:10:4E:98:25:2A:80:17:0C:97:FC:5F:AF:EE:38:A9:6C
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       37E6EA36
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SSduahBOmCUqgBcMl_xfr-44qWw.roa
Signing time:             Thu 28 Apr 2022 11:38:33 +0000
ROA not before:           Thu 28 Apr 2022 11:38:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200458
IP address blocks:        78.83.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937880118 (0x37e6ea36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Apr 28 11:38:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49276e6a104e98252a80170c97fc5fafee38a96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:b5:1f:87:1b:e8:9d:e5:d8:56:1a:99:dc:
                    ba:85:55:39:bc:55:21:b7:b6:bf:b9:92:0e:6a:3e:
                    6a:9d:1e:67:a3:10:ba:63:ad:13:ae:e8:9e:91:ce:
                    d1:16:dd:0c:ff:c7:31:ea:59:19:15:09:22:3b:e3:
                    08:2e:f1:67:b8:b4:0c:3b:94:b6:22:90:9d:5b:36:
                    a1:3b:e5:64:be:70:ca:2e:15:8d:b4:d8:51:2e:57:
                    58:c2:2b:28:65:df:98:59:08:78:b0:9a:57:67:f2:
                    f6:c5:51:99:18:01:6f:07:21:be:34:cb:5c:88:61:
                    9d:30:f6:2c:af:36:bd:5f:23:62:80:a9:e9:9a:46:
                    1b:c1:8e:5d:e2:6c:a1:d9:76:6c:09:fe:45:ce:e5:
                    b8:98:85:07:87:b1:f6:9f:89:9a:d5:b8:b4:36:33:
                    42:d2:65:16:14:8d:a5:7f:a8:86:2f:8e:fd:d9:17:
                    39:84:f0:85:43:c9:86:ce:5d:ae:c0:4c:0c:ea:d7:
                    36:84:65:da:9b:4c:fa:a2:3d:ce:03:9c:50:a9:87:
                    7a:82:27:ae:95:57:1b:d6:e5:60:ad:50:de:46:9b:
                    e5:98:b3:5f:1f:18:be:51:93:df:53:32:98:f5:99:
                    1b:da:84:36:40:58:4b:23:c4:d8:88:d3:5d:67:69:
                    3d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:27:6E:6A:10:4E:98:25:2A:80:17:0C:97:FC:5F:AF:EE:38:A9:6C
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SSduahBOmCUqgBcMl_xfr-44qWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:bd:fa:9f:49:0b:a6:0c:a7:08:09:70:4f:78:3e:3b:74:
         2e:30:5d:ab:2d:95:bf:6f:48:95:ea:0f:00:ad:82:8a:62:1e:
         ca:8c:fa:f9:0b:22:8f:c7:34:0a:e9:3c:52:ce:9c:9a:dc:b0:
         c9:64:8d:a7:0c:a9:0e:d4:ba:d6:e9:fb:b8:c1:8f:2a:11:8f:
         76:1c:6a:be:ed:37:7e:a7:99:a2:b4:64:63:2f:0e:ad:70:43:
         b1:4b:e8:3a:69:b1:4f:ff:c9:c0:5c:2f:49:28:23:cc:8b:b7:
         16:16:4d:e9:46:99:24:89:3f:9e:76:27:b0:55:3b:86:29:92:
         dc:b4:be:29:55:e3:38:ae:29:46:ab:ae:98:39:0d:78:8b:ed:
         6d:1d:16:09:ee:eb:94:79:07:04:4b:59:9e:83:b5:55:1a:dc:
         c9:ac:02:4a:f1:11:54:02:71:9d:40:b9:db:2b:f3:2e:6e:ce:
         65:58:61:eb:95:d7:94:0f:20:13:af:80:8f:1c:47:7f:d8:e2:
         c0:60:a1:bb:ea:69:d8:e3:9b:cb:b7:08:6d:74:95:70:1e:f2:
         42:f1:1d:65:2a:ed:b0:07:3e:63:1f:6f:e1:d4:9c:2d:68:34:
         ee:e5:47:97:88:7d:43:c7:c1:bd:f9:ff:55:9b:cc:86:06:29:
         8e:61:51:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN+bqNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDQy
ODExMzgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDkyNzZlNmExMDRl
OTgyNTJhODAxNzBjOTdmYzVmYWZlZTM4YTk2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdttR+HG+id5dhWGpncuoVVObxVIbe2v7mSDmo+ap0eZ6MQ
umOtE67onpHO0RbdDP/HMepZGRUJIjvjCC7xZ7i0DDuUtiKQnVs2oTvlZL5wyi4V
jbTYUS5XWMIrKGXfmFkIeLCaV2fy9sVRmRgBbwchvjTLXIhhnTD2LK82vV8jYoCp
6ZpGG8GOXeJsodl2bAn+Rc7luJiFB4ex9p+JmtW4tDYzQtJlFhSNpX+ohi+O/dkX
OYTwhUPJhs5drsBMDOrXNoRl2ptM+qI9zgOcUKmHeoInrpVXG9blYK1Q3kab5Ziz
Xx8YvlGT31MymPWZG9qENkBYSyPE2IjTXWdpPekCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJJ25qEE6YJSqAFwyX/F+v7jipbDAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L1NTZHVhaEJPbUNVcWdCY01sX3hmci00NHFXdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE5T6zANBgkqhkiG9w0BAQsFAAOC
AQEAP5S9+p9JC6YMpwgJcE94Pjt0LjBdqy2Vv29IleoPAK2CimIeyoz6+Qsij8c0
Cuk8Us6cmtywyWSNpwypDtS61un7uMGPKhGPdhxqvu03fqeZorRkYy8OrXBDsUvo
OmmxT//JwFwvSSgjzIu3FhZN6UaZJIk/nnYnsFU7himS3LS+KVXjOK4pRquumDkN
eIvtbR0WCe7rlHkHBEtZnoO1VRrcyawCSvERVAJxnUC52yvzLm7OZVhh65XXlA8g
E6+AjxxHf9jiwGChu+pp2OOby7cIbXSVcB7yQvEdZSrtsAc+Yx9v4dScLWg07uVH
l4h9Q8fBvfn/VZvMhgYpjmFR4w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org