Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/6WRq5-cZmCyWL4p6pr_tWykqL1o.roa
File:                     6WRq5-cZmCyWL4p6pr_tWykqL1o.roa (raw, json)
Hash identifier:          dyiEjzDXxqlDodN7ZMF9tLddsLeI4kc0cm7PuW3InME=
Subject key identifier:   E9:64:6A:E7:E7:19:98:2C:96:2F:8A:7A:A6:BF:ED:5B:29:2A:2F:5A
Certificate issuer:       /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial:       055DEA94
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/6WRq5-cZmCyWL4p6pr_tWykqL1o.roa
Signing time:             Sat 01 Jan 2022 04:51:12 +0000
ROA not before:           Sat 01 Jan 2022 04:51:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207949
IP address blocks:        194.104.90.0/23 maxlen: 24
                          194.104.92.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90040980 (0x55dea94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
        Validity
            Not Before: Jan  1 04:51:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9646ae7e719982c962f8a7aa6bfed5b292a2f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:0b:35:91:2a:9f:27:98:9d:9c:5c:25:8f:
                    56:45:2d:b5:f2:fc:c3:c8:34:f7:f5:6a:e9:e1:8d:
                    f7:34:26:6b:9e:0a:8f:53:b7:60:24:a0:33:7c:fe:
                    ed:fb:01:b5:26:10:5d:9b:18:5b:1f:05:41:57:ea:
                    8d:6f:6f:f8:05:35:c6:27:67:15:ac:08:6f:b7:49:
                    1e:e9:f8:74:e4:42:7b:a1:ba:49:3f:2a:c0:ea:e5:
                    00:ab:e8:16:d2:3e:ae:9e:b0:8a:0a:5e:f8:35:70:
                    77:ea:10:b2:f1:ce:8d:b9:fc:31:58:10:c1:24:01:
                    4e:67:7e:72:6d:0a:71:fb:84:69:16:b4:29:37:57:
                    77:69:91:b0:ce:c0:13:8a:9d:6b:6d:a4:c4:e2:68:
                    23:90:00:f8:46:07:42:4e:91:ae:3b:8f:69:78:bf:
                    54:bd:c3:e3:8d:9a:69:43:cd:69:50:6c:62:07:e6:
                    96:ca:24:b8:83:fa:c9:3c:2a:4a:92:ec:47:fb:c8:
                    aa:66:ec:a4:51:86:91:0c:9e:3d:90:62:ab:54:a1:
                    6e:c4:b8:01:f5:10:27:d2:a0:cf:b9:ad:b6:80:cb:
                    8b:be:9f:94:26:80:d1:2a:4b:e0:83:a9:9c:2b:2a:
                    79:63:7a:7a:f0:a8:e1:fe:52:05:6f:43:e7:b3:08:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:6A:E7:E7:19:98:2C:96:2F:8A:7A:A6:BF:ED:5B:29:2A:2F:5A
            X509v3 Authority Key Identifier:
                keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/6WRq5-cZmCyWL4p6pr_tWykqL1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.90.0-194.104.93.255

    Signature Algorithm: sha256WithRSAEncryption
         15:d0:bd:5f:e8:46:af:cc:31:f1:8a:a5:86:ff:cd:a7:8b:e3:
         10:02:ea:d3:37:85:ce:61:a1:72:35:df:75:6e:9d:30:40:8a:
         6d:bf:3c:ad:c6:89:75:ac:55:c3:ab:db:8e:59:d8:d1:a8:d6:
         25:10:a8:ce:bc:d5:6d:66:95:17:7c:06:8a:90:79:f8:7a:57:
         6b:cb:97:8a:4d:2a:81:81:e7:1a:31:06:58:22:f8:8f:b5:81:
         b0:d0:72:b7:c4:dd:31:46:0f:95:22:f7:4b:30:fb:21:d2:af:
         6b:4e:dc:4c:60:31:ba:70:dd:90:78:de:ed:d4:88:1e:0e:19:
         6b:a8:ad:e5:5c:bf:4b:77:a3:79:cd:6d:c0:ec:7a:79:e9:cc:
         ed:3f:12:dd:a7:01:69:5e:f8:f8:1d:c0:a3:d1:31:d0:83:ac:
         52:51:8a:71:83:d0:3b:38:4c:9a:fb:cd:24:45:2e:e2:92:0e:
         58:2c:5c:3d:67:4b:f5:17:10:8c:5e:ea:b2:98:41:77:ac:f5:
         28:8b:0a:78:23:13:33:ca:ab:e8:d5:d8:2d:55:3c:f0:67:aa:
         2f:64:bf:07:75:04:de:4b:c9:13:f6:d5:65:5d:0b:3c:1f:c3:
         68:cf:89:c8:f2:08:32:9f:47:c1:a0:65:db:ed:8c:5c:1a:d5:
         18:bb:98:20
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBV3qlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
M2VmNmE2Y2ZjZTM0M2Y5MTRjOWFkOTRjMzQxMGRhMDBhN2NkMWNjMB4XDTIyMDEw
MTA0NTExMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTk2NDZhZTdlNzE5
OTgyYzk2MmY4YTdhYTZiZmVkNWIyOTJhMmY1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMg8CzWRKp8nmJ2cXCWPVkUttfL8w8g09/Vq6eGN9zQma54K
j1O3YCSgM3z+7fsBtSYQXZsYWx8FQVfqjW9v+AU1xidnFawIb7dJHun4dORCe6G6
ST8qwOrlAKvoFtI+rp6wigpe+DVwd+oQsvHOjbn8MVgQwSQBTmd+cm0KcfuEaRa0
KTdXd2mRsM7AE4qda22kxOJoI5AA+EYHQk6RrjuPaXi/VL3D442aaUPNaVBsYgfm
lsokuIP6yTwqSpLsR/vIqmbspFGGkQyePZBiq1ShbsS4AfUQJ9Kgz7mttoDLi76f
lCaA0SpL4IOpnCsqeWN6evCo4f5SBW9D57MI2OECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTpZGrn5xmYLJYvinqmv+1bKSovWjAfBgNVHSMEGDAWgBTz72ps/OND+RTJ
rZTDQQ2gCnzRzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzgtOXFiUHpqUV9rVXlhMlV3MEVOb0FwODBjdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvOTMzZWRjLTIzMGYtNGJmYy1iYzQ3LTJjNDc2M2Q2NGQ0My8x
LzZXUnE1LWNabUN5V0w0cDZwcl90V3lrcUwxby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
OTMzZWRjLTIzMGYtNGJmYy1iYzQ3LTJjNDc2M2Q2NGQ0My8xLzgtOXFiUHpqUV9r
VXlhMlV3MEVOb0FwODBjdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBwmhaAwQBwmhcMA0GCSqGSIb3
DQEBCwUAA4IBAQAV0L1f6EavzDHxiqWG/82ni+MQAurTN4XOYaFyNd91bp0wQIpt
vzytxol1rFXDq9uOWdjRqNYlEKjOvNVtZpUXfAaKkHn4eldry5eKTSqBgecaMQZY
IviPtYGw0HK3xN0xRg+VIvdLMPsh0q9rTtxMYDG6cN2QeN7t1IgeDhlrqK3lXL9L
d6N5zW3A7Hp56cztPxLdpwFpXvj4HcCj0THQg6xSUYpxg9A7OEya+80kRS7ikg5Y
LFw9Z0v1FxCMXuqymEF3rPUoiwp4IxMzyqvo1dgtVTzwZ6ovZL8HdQTeS8kT9tVl
XQs8H8Noz4nI8ggyn0fBoGXb7YxcGtUYu5gg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:53 2023 by rpki-client on console-fra.rpki-client.org