Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/GUIHiSMLlF8hw5xO6m2-YWDmYfM.roa
File:                     GUIHiSMLlF8hw5xO6m2-YWDmYfM.roa (raw, json)
Hash identifier:          HXJsqYPAY9As8wVjfsNY2AOuwkQfZ2RoqBL92mBzrys=
Subject key identifier:   19:42:07:89:23:0B:94:5F:21:C3:9C:4E:EA:6D:BE:61:60:E6:61:F3
Certificate issuer:       /CN=1314ce416c5ca85313c90eb4eb629663394fe866
Certificate serial:       866FF0
Authority key identifier: 13:14:CE:41:6C:5C:A8:53:13:C9:0E:B4:EB:62:96:63:39:4F:E8:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExTOQWxcqFMTyQ6062KWYzlP6GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/GUIHiSMLlF8hw5xO6m2-YWDmYfM.roa
Signing time:             Sat 01 Jan 2022 02:55:33 +0000
ROA not before:           Sat 01 Jan 2022 02:55:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     262287
IP address blocks:        46.254.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8810480 (0x866ff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1314ce416c5ca85313c90eb4eb629663394fe866
        Validity
            Not Before: Jan  1 02:55:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19420789230b945f21c39c4eea6dbe6160e661f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:5d:53:c0:71:88:de:51:c5:f3:34:6b:4c:
                    45:c3:61:5f:9d:91:6e:b2:8c:c9:ed:7a:b7:d6:41:
                    1f:52:3e:0a:ed:3b:e9:a7:1a:ee:9d:14:b1:e3:d7:
                    80:c8:29:4f:9b:0f:7c:c6:32:34:59:de:ce:5b:0d:
                    11:8d:f7:3d:82:1b:f7:57:13:d1:b8:e9:f3:d3:25:
                    15:ed:7f:37:fa:7b:3f:6b:fb:ea:1c:c3:39:d9:78:
                    70:e7:21:86:3e:39:8a:85:c8:8e:f6:82:cd:86:03:
                    9a:60:31:b1:cc:d3:4f:df:c5:cd:fa:d8:02:cc:a4:
                    2d:12:40:d0:ed:b2:0e:d1:0a:9e:30:b2:e7:4c:d7:
                    cc:a1:9c:9c:81:c4:10:32:e4:63:e6:c9:c2:35:8c:
                    ee:54:34:de:74:ae:8b:8d:4b:8b:03:40:de:55:42:
                    42:95:16:cd:d4:1d:f7:a5:a8:0f:03:b5:1d:59:f6:
                    c6:c9:d1:bd:45:1d:1d:39:42:c5:f6:cc:90:fc:d6:
                    66:df:67:e9:e9:7a:bc:ea:71:e1:64:54:78:f4:7f:
                    9c:7f:92:e9:07:ef:0c:c1:66:96:42:3d:c6:d5:1c:
                    bf:74:f2:ba:28:06:99:fc:fb:d0:e0:36:9d:17:4e:
                    fa:6b:10:e8:a1:a2:ac:85:6f:3b:2e:3c:49:4a:23:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:42:07:89:23:0B:94:5F:21:C3:9C:4E:EA:6D:BE:61:60:E6:61:F3
            X509v3 Authority Key Identifier:
                keyid:13:14:CE:41:6C:5C:A8:53:13:C9:0E:B4:EB:62:96:63:39:4F:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExTOQWxcqFMTyQ6062KWYzlP6GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/GUIHiSMLlF8hw5xO6m2-YWDmYfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/ExTOQWxcqFMTyQ6062KWYzlP6GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:34:06:e4:3d:21:f8:49:3c:ac:5d:52:f7:22:e0:ad:fa:
         1e:8a:12:96:70:8e:53:49:22:40:84:87:89:e1:9f:6a:38:8f:
         ab:41:13:ee:da:16:2d:17:2e:77:d6:b0:3e:91:5d:49:85:e1:
         88:ab:2f:06:c8:bf:99:14:a9:53:d7:23:d9:4a:51:41:f7:c4:
         4d:56:92:83:5c:a9:46:56:5e:bc:39:11:a1:d0:5d:3b:4c:2c:
         98:fe:de:7e:75:dc:cf:28:4a:2c:b6:54:08:ef:88:2f:fd:7e:
         d9:d1:50:6f:20:4c:8f:9a:24:3b:32:28:9e:b6:5f:12:55:0d:
         0f:a2:23:20:95:ac:11:94:bf:ea:11:b2:15:54:2f:76:a2:2e:
         82:78:d6:be:fa:18:da:32:4f:94:9b:63:ad:1d:39:2d:fb:03:
         56:72:25:54:fa:43:ac:57:08:79:92:d2:55:9a:7c:63:b0:76:
         24:b2:1d:5d:29:d1:fb:d6:ea:66:db:9c:a8:cb:db:27:79:9a:
         d7:e9:26:af:dc:69:e0:11:cb:e7:e0:b5:62:58:e5:4e:36:25:
         38:df:8e:e4:15:46:9f:d0:44:db:41:f6:3f:16:0c:8e:9e:f3:
         44:37:84:7f:22:b0:52:14:d9:3c:32:d5:cc:3a:36:3d:33:0b:
         47:2c:1c:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIZv8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzE0Y2U0MTZjNWNhODUzMTNjOTBlYjRlYjYyOTY2MzM5NGZlODY2MB4XDTIyMDEw
MTAyNTUzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTk0MjA3ODkyMzBi
OTQ1ZjIxYzM5YzRlZWE2ZGJlNjE2MGU2NjFmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM4nXVPAcYjeUcXzNGtMRcNhX52RbrKMye16t9ZBH1I+Cu07
6aca7p0UsePXgMgpT5sPfMYyNFnezlsNEY33PYIb91cT0bjp89MlFe1/N/p7P2v7
6hzDOdl4cOchhj45ioXIjvaCzYYDmmAxsczTT9/FzfrYAsykLRJA0O2yDtEKnjCy
50zXzKGcnIHEEDLkY+bJwjWM7lQ03nSui41LiwNA3lVCQpUWzdQd96WoDwO1HVn2
xsnRvUUdHTlCxfbMkPzWZt9n6el6vOpx4WRUePR/nH+S6QfvDMFmlkI9xtUcv3Ty
uigGmfz70OA2nRdO+msQ6KGirIVvOy48SUoj6/8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQZQgeJIwuUXyHDnE7qbb5hYOZh8zAfBgNVHSMEGDAWgBQTFM5BbFyoUxPJ
DrTrYpZjOU/oZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V4VE9RV3hjcUZNVHlRNjA2MktXWXpsUDZHWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvNDVkN2Q5LTM5MjctNGIyNy04ZmFjLTE4MGZlNjFkMThlNC8x
L0dVSUhpU01MbEY4aHc1eE82bTItWVdEbVlmTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
NDVkN2Q5LTM5MjctNGIyNy04ZmFjLTE4MGZlNjFkMThlNC8xL0V4VE9RV3hjcUZN
VHlRNjA2MktXWXpsUDZHWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC7+aTANBgkqhkiG9w0BAQsFAAOC
AQEAj0A0BuQ9IfhJPKxdUvci4K36HooSlnCOU0kiQISHieGfajiPq0ET7toWLRcu
d9awPpFdSYXhiKsvBsi/mRSpU9cj2UpRQffETVaSg1ypRlZevDkRodBdO0wsmP7e
fnXczyhKLLZUCO+IL/1+2dFQbyBMj5okOzIonrZfElUND6IjIJWsEZS/6hGyFVQv
dqIugnjWvvoY2jJPlJtjrR05LfsDVnIlVPpDrFcIeZLSVZp8Y7B2JLIdXSnR+9bq
ZtucqMvbJ3ma1+kmr9xp4BHL5+C1YljlTjYlON+O5BVGn9BE20H2PxYMjp7zRDeE
fyKwUhTZPDLVzDo2PTMLRywcKw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org