Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/VAbSkprpL6r8-88ys0zFw89eGPA.roa
File:                     VAbSkprpL6r8-88ys0zFw89eGPA.roa (raw, json)
Hash identifier:          ys7vZCi3wtOo6lVeVugGYwegs7vqnC5Q7YfIyqofufs=
Subject key identifier:   54:06:D2:92:9A:E9:2F:AA:FC:FB:CF:32:B3:4C:C5:C3:CF:5E:18:F0
Certificate issuer:       /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial:       36C06E
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/VAbSkprpL6r8-88ys0zFw89eGPA.roa
Signing time:             Sat 01 Jan 2022 00:55:41 +0000
ROA not before:           Sat 01 Jan 2022 00:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.11.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3588206 (0x36c06e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
        Validity
            Not Before: Jan  1 00:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5406d2929ae92faafcfbcf32b34cc5c3cf5e18f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:09:f1:33:08:73:16:5c:a5:5e:8e:6a:e1:
                    93:ac:ce:d9:4c:04:e1:ae:14:2a:4f:07:a4:59:f1:
                    7c:85:a5:27:12:6d:db:53:d2:51:02:df:07:0d:1f:
                    12:1b:f8:0a:d9:fa:8f:3b:02:f5:42:30:27:cd:94:
                    92:69:6a:a8:bb:3b:7f:e6:22:84:ba:c2:e1:5c:0f:
                    02:8d:64:3c:e5:7f:0e:1f:23:c1:8f:f2:13:32:05:
                    4f:4d:a5:1c:52:bd:b7:ce:27:70:84:e8:45:48:55:
                    5c:07:8f:94:01:9e:ec:7a:bf:68:1e:4a:8f:ab:3d:
                    12:bf:7c:8f:1d:7b:89:12:44:ef:f8:52:a8:4b:e0:
                    46:c2:72:12:bf:81:0e:1e:04:0f:7f:df:c8:6b:4b:
                    6e:40:ad:33:b8:ec:17:49:a3:26:67:e7:d9:bb:89:
                    b0:28:79:49:f7:ec:1d:f7:45:e6:27:3d:7c:07:a0:
                    9d:4c:55:71:c6:a7:e1:c5:e5:3e:70:83:85:44:10:
                    e7:5d:14:98:f1:65:1e:04:3f:09:17:fb:e0:a1:4e:
                    a1:b9:19:eb:df:b7:38:a7:f0:63:bd:db:19:a1:8c:
                    fe:9a:7a:06:99:92:63:a0:c3:40:71:20:cf:ec:ef:
                    c3:a5:a6:c3:bf:27:d9:39:ec:3b:2f:6e:2c:86:8f:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:D2:92:9A:E9:2F:AA:FC:FB:CF:32:B3:4C:C5:C3:CF:5E:18:F0
            X509v3 Authority Key Identifier:
                keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/VAbSkprpL6r8-88ys0zFw89eGPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:fd:fd:9c:cf:24:f1:08:df:c4:7e:0c:59:94:83:75:99:
         7b:79:a5:3d:6a:ba:1d:df:28:4b:ea:4c:05:9f:03:38:cc:9a:
         a9:0a:55:6a:ed:13:cb:d0:0e:11:ba:42:84:14:df:fb:92:d8:
         f5:4a:69:24:d8:07:ed:96:30:69:2c:21:05:1d:67:37:70:96:
         7a:d8:5b:09:4a:b4:42:2c:4d:08:23:a7:b0:05:ad:57:ae:71:
         87:b2:bf:72:5e:be:da:75:48:bb:15:e4:33:c0:6f:b9:3e:40:
         5f:d1:50:1a:71:10:9d:fd:6a:aa:15:f5:cb:71:e1:1d:29:67:
         e6:90:07:22:0e:b5:36:62:71:c8:45:a3:38:48:06:fe:16:3c:
         23:b9:6d:75:63:7a:5b:b0:a9:5f:e8:71:9c:dc:76:ed:91:12:
         f7:b9:a1:69:b8:ca:c3:eb:64:40:00:42:88:85:6e:22:41:d3:
         95:37:9b:a8:2b:4d:28:b8:41:35:ce:75:43:cc:13:b2:9c:72:
         01:8e:04:3f:3d:b8:30:2e:17:d4:d0:83:68:63:31:5d:30:c7:
         9c:07:18:90:a2:32:47:99:71:99:57:c6:51:1c:2d:67:7e:05:
         fb:19:78:a8:76:66:04:4b:d5:5d:08:16:21:40:96:5f:40:34:
         96:0d:c9:95
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDNsBuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM2
OTAwMTgzY2YwOGE2ZTViYzgwNzg0NjI5NGE0NjA2MmUxOTBlM2IwHhcNMjIwMTAx
MDA1NTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1NDA2ZDI5MjlhZTky
ZmFhZmNmYmNmMzJiMzRjYzVjM2NmNWUxOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvYcJ8TMIcxZcpV6OauGTrM7ZTAThrhQqTwekWfF8haUnEm3b
U9JRAt8HDR8SG/gK2fqPOwL1QjAnzZSSaWqouzt/5iKEusLhXA8CjWQ85X8OHyPB
j/ITMgVPTaUcUr23zidwhOhFSFVcB4+UAZ7ser9oHkqPqz0Sv3yPHXuJEkTv+FKo
S+BGwnISv4EOHgQPf9/Ia0tuQK0zuOwXSaMmZ+fZu4mwKHlJ9+wd90XmJz18B6Cd
TFVxxqfhxeU+cIOFRBDnXRSY8WUeBD8JF/vgoU6huRnr37c4p/BjvdsZoYz+mnoG
mZJjoMNAcSDP7O/DpabDvyfZOew7L24sho+zHQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFQG0pKa6S+q/PvPMrNMxcPPXhjwMB8GA1UdIwQYMBaAFDaQAYPPCKblvIB4
RilKRgYuGQ47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMtMmY1YjZhODNmYWYzLzEv
VkFiU2twcnBMNnI4LTg4eXMwekZ3ODllR1BBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81
YTMyYmMtMDgzNi00N2VjLWI1YjMtMmY1YjZhODNmYWYzLzEvTnBBQmc4OElwdVc4
Z0hoR0tVcEdCaTRaRGpzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQu4MA0GCSqGSIb3DQEBCwUAA4IB
AQCwe/39nM8k8QjfxH4MWZSDdZl7eaU9arod3yhL6kwFnwM4zJqpClVq7RPL0A4R
ukKEFN/7ktj1Smkk2AftljBpLCEFHWc3cJZ62FsJSrRCLE0II6ewBa1XrnGHsr9y
Xr7adUi7FeQzwG+5PkBf0VAacRCd/WqqFfXLceEdKWfmkAciDrU2YnHIRaM4SAb+
FjwjuW11Y3pbsKlf6HGc3HbtkRL3uaFpuMrD62RAAEKIhW4iQdOVN5uoK00ouEE1
znVDzBOynHIBjgQ/PbgwLhfU0INoYzFdMMecBxiQojJHmXGZV8ZRHC1nfgX7GXio
dmYES9VdCBYhQJZfQDSWDcmV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org