Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YpRoTGIRxWXwtP7GyfPWbiar4xY.roa
File:                     YpRoTGIRxWXwtP7GyfPWbiar4xY.roa (raw, json)
Hash identifier:          Ftla6I0WjcNVC4W/BACX0V/DYuNq07+3OUOubMPbcxI=
Subject key identifier:   62:94:68:4C:62:11:C5:65:F0:B4:FE:C6:C9:F3:D6:6E:26:AB:E3:16
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       389C4566
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YpRoTGIRxWXwtP7GyfPWbiar4xY.roa
Signing time:             Tue 17 May 2022 05:21:32 +0000
ROA not before:           Tue 17 May 2022 05:21:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41610
IP address blocks:        212.91.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949765478 (0x389c4566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:21:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6294684c6211c565f0b4fec6c9f3d66e26abe316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:a5:18:63:3f:a3:29:3e:38:ed:47:5f:e3:
                    56:8f:66:47:d6:00:b4:10:ee:54:58:71:06:a3:85:
                    67:24:56:a4:c6:fc:2a:0e:3a:bb:45:f7:94:fe:ac:
                    09:2e:e7:1d:ee:ab:43:f6:78:ee:07:b4:c9:80:9e:
                    7f:3a:2b:f6:74:e7:ff:70:75:92:ba:35:38:28:aa:
                    d1:c3:a2:74:b2:12:a4:a6:f8:67:7a:2b:da:4e:a6:
                    1f:ac:2e:72:53:7e:f6:e4:5c:a7:b4:72:dc:4c:90:
                    0a:2e:11:9f:0e:44:3b:20:35:3a:b5:9c:06:4a:d6:
                    7d:01:66:0b:e1:8c:cc:cc:ed:d1:49:b9:b8:30:61:
                    54:b8:31:4d:9c:f8:cc:ef:43:c0:22:60:28:ed:c2:
                    44:fa:d0:7f:60:88:de:5f:3e:ec:f5:3b:0f:2b:b7:
                    49:ed:2e:43:c3:76:d3:4e:a9:e1:84:36:c9:3e:ae:
                    d5:17:d3:b2:93:4a:08:fd:8c:b4:17:39:f9:9e:ea:
                    47:1b:41:43:7a:04:32:12:43:7a:d3:4d:be:80:04:
                    39:ad:19:83:bf:43:13:9d:05:b3:9b:6f:4b:1a:95:
                    16:21:19:15:7c:3f:fd:70:e7:c1:87:e0:5c:1a:e9:
                    48:ca:50:94:81:07:54:b8:1b:96:48:84:01:47:22:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:94:68:4C:62:11:C5:65:F0:B4:FE:C6:C9:F3:D6:6E:26:AB:E3:16
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YpRoTGIRxWXwtP7GyfPWbiar4xY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.91.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:af:ee:f9:ff:8d:7b:7b:84:fb:41:4d:b7:ec:cb:33:d1:
         a5:22:3e:1e:79:35:5f:c6:fa:c9:c0:85:a5:97:36:31:8a:ed:
         68:98:3e:ac:63:55:f3:94:a7:93:f6:71:12:61:a6:7c:6e:6a:
         5e:52:6e:c1:ed:91:08:12:1c:ac:7e:ea:56:7d:58:55:ae:55:
         c2:cd:52:ca:e6:46:40:97:24:c0:ac:cb:ec:e9:90:97:94:fd:
         25:5c:a0:f3:69:42:55:0c:54:e4:20:8f:6d:1f:66:5d:be:a0:
         b0:6a:0f:ae:20:d7:e9:57:62:98:d4:db:70:05:ae:66:b9:31:
         84:69:b2:a4:be:76:76:db:a9:7c:f2:80:bd:27:23:3f:43:18:
         0e:56:46:05:12:23:22:cb:be:1f:72:03:ec:a4:dc:f1:cc:4f:
         da:fd:69:51:9a:be:94:d8:13:2c:44:ee:af:23:28:95:c0:df:
         57:ec:42:5d:37:7e:a1:e9:2f:26:eb:c0:6b:0a:78:4a:16:5b:
         71:9e:06:41:02:67:fe:91:50:08:b4:9b:5f:46:24:ca:d6:f1:
         78:0b:03:40:4b:5b:b4:64:75:66:95:74:24:54:92:0e:6f:aa:
         09:a2:4f:37:be:39:f7:26:8b:09:d4:3f:a4:99:14:c2:6e:25:
         18:63:d7:0c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOJxFZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDUx
NzA1MjEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjI5NDY4NGM2MjEx
YzU2NWYwYjRmZWM2YzlmM2Q2NmUyNmFiZTMxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXgpRhjP6MpPjjtR1/jVo9mR9YAtBDuVFhxBqOFZyRWpMb8
Kg46u0X3lP6sCS7nHe6rQ/Z47ge0yYCefzor9nTn/3B1kro1OCiq0cOidLISpKb4
Z3or2k6mH6wuclN+9uRcp7Ry3EyQCi4Rnw5EOyA1OrWcBkrWfQFmC+GMzMzt0Um5
uDBhVLgxTZz4zO9DwCJgKO3CRPrQf2CI3l8+7PU7Dyu3Se0uQ8N2006p4YQ2yT6u
1RfTspNKCP2MtBc5+Z7qRxtBQ3oEMhJDetNNvoAEOa0Zg79DE50Fs5tvSxqVFiEZ
FXw//XDnwYfgXBrpSMpQlIEHVLgblkiEAUcivtMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRilGhMYhHFZfC0/sbJ89ZuJqvjFjAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L1lwUm9UR0lSeFdYd3RQN0d5ZlBXYmlhcjR4WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRbojANBgkqhkiG9w0BAQsFAAOC
AQEATx6v7vn/jXt7hPtBTbfsyzPRpSI+Hnk1X8b6ycCFpZc2MYrtaJg+rGNV85Sn
k/ZxEmGmfG5qXlJuwe2RCBIcrH7qVn1YVa5Vws1SyuZGQJckwKzL7OmQl5T9JVyg
82lCVQxU5CCPbR9mXb6gsGoPriDX6VdimNTbcAWuZrkxhGmypL52dtupfPKAvScj
P0MYDlZGBRIjIsu+H3ID7KTc8cxP2v1pUZq+lNgTLETuryMolcDfV+xCXTd+oekv
JuvAawp4ShZbcZ4GQQJn/pFQCLSbX0YkytbxeAsDQEtbtGR1ZpV0JFSSDm+qCaJP
N7459yaLCdQ/pJkUwm4lGGPXDA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:12 2023 by rpki-client on console-ams.rpki-client.org