Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/W4brsxeqJJ05hfOQm6ytAMzbZHM.roa
File:                     W4brsxeqJJ05hfOQm6ytAMzbZHM.roa (raw, json)
Hash identifier:          AbDjfdm3DOcUgWpHYeYD+N9zdbH6lEFOh6ljEDj4Sqw=
Subject key identifier:   5B:86:EB:B3:17:AA:24:9D:39:85:F3:90:9B:AC:AD:00:CC:DB:64:73
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38B09DA3
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/W4brsxeqJJ05hfOQm6ytAMzbZHM.roa
Signing time:             Tue 17 May 2022 05:30:21 +0000
ROA not before:           Tue 17 May 2022 05:30:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56661
IP address blocks:        92.247.100.0/23 maxlen: 23
                          217.79.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951098787 (0x38b09da3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b86ebb317aa249d3985f3909bacad00ccdb6473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:13:59:a4:3f:c1:6b:58:f0:81:eb:74:57:
                    8a:4a:07:a7:69:a5:30:6e:e5:2e:04:95:a3:ed:98:
                    02:5a:ef:42:94:d2:8b:ce:12:29:9a:a5:a9:ce:35:
                    66:aa:15:d9:ec:4e:4b:15:91:7b:51:1e:0e:b1:96:
                    73:71:4c:87:c2:be:1c:a5:de:6f:7f:4f:9c:b9:21:
                    ea:b6:4b:dc:58:87:99:73:9c:53:29:f8:b0:9f:09:
                    8b:1d:aa:24:96:77:d8:79:81:9e:3c:92:b1:e3:15:
                    f7:ae:de:c1:07:6b:2c:a5:6a:0f:7a:53:80:dd:35:
                    6e:f8:e0:f5:0c:59:77:ff:70:98:f5:ee:da:98:da:
                    47:8c:d0:2a:c7:67:6f:59:35:b4:6c:7c:d7:f9:a7:
                    e8:ea:2c:3b:ed:db:c2:08:7a:99:d3:ba:58:05:d0:
                    ed:46:7a:b6:38:a9:8f:50:b4:f5:3f:09:3e:d6:0d:
                    98:d3:b6:b7:b8:40:df:b0:ee:9a:a5:3e:59:ad:1a:
                    16:d1:94:4c:e9:ec:a3:34:22:51:1c:b3:4a:79:bc:
                    cd:fb:9b:98:1f:ac:e5:d2:02:fb:9e:cd:cf:9c:53:
                    4e:f9:bd:ef:e5:f2:ce:35:da:3e:45:a3:a8:71:38:
                    2e:dd:6b:45:b8:b3:90:1c:2a:d4:b1:76:a4:be:b9:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:86:EB:B3:17:AA:24:9D:39:85:F3:90:9B:AC:AD:00:CC:DB:64:73
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/W4brsxeqJJ05hfOQm6ytAMzbZHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.100.0/23
                  217.79.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:50:cb:2a:82:9a:e5:0a:f8:65:b4:d9:f1:b4:3a:2b:5e:ae:
         64:cf:e4:3b:27:7c:7a:2b:10:cd:ea:da:fa:9c:73:92:53:39:
         f7:94:f0:3c:45:eb:05:7a:6b:7c:e7:a6:8f:ea:cc:9a:65:74:
         ec:26:6e:b8:5f:ff:48:ec:02:8c:0a:0c:b7:e7:4c:8c:c1:05:
         aa:2f:4f:f0:1c:d9:c3:2d:2f:f7:4a:5a:ba:1b:f9:88:79:2b:
         84:d7:a3:45:cb:55:15:3f:c2:87:15:49:0e:b1:25:4c:c4:12:
         ad:98:6d:2f:ee:cd:01:ae:77:d3:3c:ab:55:c1:1e:9d:92:25:
         cf:63:51:76:6b:fa:50:63:80:00:21:25:b2:4c:30:1f:1e:11:
         55:f9:c7:d9:ff:a7:a7:6e:28:f5:97:2f:59:64:d6:10:eb:2b:
         03:4c:26:38:d7:a9:2b:3e:32:e6:a4:c4:eb:d0:0b:d7:85:65:
         4e:f4:5f:35:85:c5:5b:de:58:89:9d:e8:d5:0b:7f:6f:99:9f:
         28:77:fd:c4:53:5a:08:39:e0:b1:ee:32:a5:cd:c6:b9:79:82:
         f2:31:59:7b:aa:11:dc:9f:05:6d:36:53:2d:00:08:b9:34:c6:
         0a:3e:b2:24:c5:d7:c3:d2:ff:d0:3b:9b:00:a6:f3:9a:ac:55:
         1c:23:1e:a8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOLCdozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDUx
NzA1MzAyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWI4NmViYjMxN2Fh
MjQ5ZDM5ODVmMzkwOWJhY2FkMDBjY2RiNjQ3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANVqE1mkP8FrWPCB63RXikoHp2mlMG7lLgSVo+2YAlrvQpTS
i84SKZqlqc41ZqoV2exOSxWRe1EeDrGWc3FMh8K+HKXeb39PnLkh6rZL3FiHmXOc
Uyn4sJ8Jix2qJJZ32HmBnjySseMV967ewQdrLKVqD3pTgN01bvjg9QxZd/9wmPXu
2pjaR4zQKsdnb1k1tGx81/mn6OosO+3bwgh6mdO6WAXQ7UZ6tjipj1C09T8JPtYN
mNO2t7hA37DumqU+Wa0aFtGUTOnsozQiURyzSnm8zfubmB+s5dIC+57Nz5xTTvm9
7+XyzjXaPkWjqHE4Lt1rRbizkBwq1LF2pL65Zi0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRbhuuzF6oknTmF85CbrK0AzNtkczAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L1c0YnJzeGVxSkowNWhmT1FtNnl0QU16YlpITS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVz3ZAMEANlPKDANBgkqhkiG9w0B
AQsFAAOCAQEAgVDLKoKa5Qr4ZbTZ8bQ6K16uZM/kOyd8eisQzera+pxzklM595Tw
PEXrBXprfOemj+rMmmV07CZuuF//SOwCjAoMt+dMjMEFqi9P8BzZwy0v90pauhv5
iHkrhNejRctVFT/ChxVJDrElTMQSrZhtL+7NAa530zyrVcEenZIlz2NRdmv6UGOA
ACElskwwHx4RVfnH2f+np24o9ZcvWWTWEOsrA0wmONepKz4y5qTE69AL14VlTvRf
NYXFW95YiZ3o1Qt/b5mfKHf9xFNaCDngse4ypc3GuXmC8jFZe6oR3J8FbTZTLQAI
uTTGCj6yJMXXw9L/0DubAKbzmqxVHCMeqA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org