Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VtAYsTh83Tctse2QM0RcXpP4UzI.roa
File:                     VtAYsTh83Tctse2QM0RcXpP4UzI.roa (raw, json)
Hash identifier:          gEQXQOUQudiKmY6prvCENEfyQLd7PotsI4hokuxxL7s=
Subject key identifier:   56:D0:18:B1:38:7C:DD:37:2D:B1:ED:90:33:44:5C:5E:93:F8:53:32
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0184AE3DB8CA8BB196CDFB51B3DD620C1DFF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VtAYsTh83Tctse2QM0RcXpP4UzI.roa
Signing time:             Fri 25 Nov 2022 10:03:11 +0000
ROA not before:           Fri 25 Nov 2022 10:03:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        163.5.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ae:3d:b8:ca:8b:b1:96:cd:fb:51:b3:dd:62:0c:1d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Nov 25 10:03:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56d018b1387cdd372db1ed9033445c5e93f85332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:fd:ce:7a:ce:cc:4c:22:b8:21:12:61:bb:
                    8c:ff:ae:49:0e:c7:86:98:a8:0f:bb:84:81:ae:e4:
                    04:49:d1:fb:93:2b:1c:2a:c8:82:dd:5d:2f:df:52:
                    a1:18:da:32:0e:e1:a8:df:aa:7e:77:0a:22:2f:13:
                    d3:28:72:79:17:80:c1:a2:ba:c0:83:18:11:22:2d:
                    1c:8d:fe:c4:f7:dd:fe:8c:af:f4:27:28:3a:39:3a:
                    95:84:05:a2:ab:13:03:a9:0c:5f:cf:30:ae:68:cc:
                    02:19:2e:45:9f:6a:a6:4c:97:f3:2b:79:01:37:80:
                    77:a7:fa:bf:68:a5:82:54:2f:27:91:af:7a:b9:17:
                    c9:01:40:f6:8d:e3:05:f9:5e:71:fb:6b:25:51:f5:
                    7d:1d:10:5f:2f:0b:a2:29:be:07:57:6b:b4:33:36:
                    2e:f9:76:18:14:b2:bc:b6:e0:17:f3:ca:7c:1a:75:
                    5f:a5:78:1c:0e:b2:2f:a7:4f:49:39:7d:2a:cd:95:
                    15:fa:43:d0:37:3a:2e:83:10:9b:bb:8a:d0:8f:1f:
                    5b:1f:c2:00:1f:43:44:bd:e7:4e:ec:2e:74:46:03:
                    c4:e7:de:8d:88:f1:41:57:fb:d0:3b:2f:8c:7d:d5:
                    b9:41:2c:b6:08:d5:d5:94:cd:28:c3:1e:53:1b:c6:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:18:B1:38:7C:DD:37:2D:B1:ED:90:33:44:5C:5E:93:F8:53:32
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VtAYsTh83Tctse2QM0RcXpP4UzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:4b:c4:de:d4:d0:b2:21:a8:61:55:fa:17:46:4b:1e:32:
         34:c0:41:c6:2a:55:01:02:02:c7:a8:9b:36:40:14:57:aa:91:
         3d:88:88:74:d0:08:60:0e:05:74:e1:b8:4e:b7:9a:8f:03:b4:
         dc:4a:d8:90:9a:7d:d6:46:33:ee:4b:35:9c:28:1a:30:08:28:
         3a:8c:c5:d5:03:b2:b4:b2:a0:c3:3b:c8:81:78:9a:59:95:06:
         31:a1:ed:24:08:f3:28:c6:d3:94:15:eb:e3:79:e1:af:5f:a2:
         02:fe:10:6c:ef:da:83:69:c6:be:d7:83:cc:49:0e:b5:33:09:
         97:76:5b:7c:ee:75:9a:42:5b:a3:b9:5a:75:e0:74:c6:7f:42:
         25:8b:27:d9:c9:e3:29:2b:0a:5e:06:73:32:aa:0b:59:0a:af:
         c8:a9:4a:7b:55:f9:db:f4:c5:c7:f8:6c:4b:e7:25:6b:1a:37:
         66:1d:96:a9:1b:5a:7d:d7:f3:29:32:f0:30:bf:37:ff:43:ca:
         1b:84:12:b2:cd:ab:a9:2e:0b:3c:90:e8:b1:12:e9:8f:cc:9b:
         96:31:de:31:c6:b8:65:4f:b6:86:4f:62:f0:60:28:9e:a9:86:
         f7:c7:28:a9:0f:e4:41:07:75:06:a7:9a:e4:49:8e:70:f4:70:
         f0:2f:61:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSuPbjKi7GWzftRs91iDB3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMTI1MTAwMzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmQwMThiMTM4N2NkZDM3MmRiMWVkOTAzMzQ0NWM1ZTkzZjg1MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZL9znrOzEwiuCESYbuM/65JDseG
mKgPu4SBruQESdH7kyscKsiC3V0v31KhGNoyDuGo36p+dwoiLxPTKHJ5F4DBorrA
gxgRIi0cjf7E993+jK/0Jyg6OTqVhAWiqxMDqQxfzzCuaMwCGS5Fn2qmTJfzK3kB
N4B3p/q/aKWCVC8nka96uRfJAUD2jeMF+V5x+2slUfV9HRBfLwuiKb4HV2u0MzYu
+XYYFLK8tuAX88p8GnVfpXgcDrIvp09JOX0qzZUV+kPQNzougxCbu4rQjx9bH8IA
H0NEvedO7C50RgPE596NiPFBV/vQOy+MfdW5QSy2CNXVlM0owx5TG8ZNywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFbQGLE4fN03LbHtkDNEXF6T+FMyMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvVnRBWXNUaDgzVGN0c2UyUU0wUmNYcFA0VXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWvMA0G
CSqGSIb3DQEBCwUAA4IBAQBQD0vE3tTQsiGoYVX6F0ZLHjI0wEHGKlUBAgLHqJs2
QBRXqpE9iIh00AhgDgV04bhOt5qPA7TcStiQmn3WRjPuSzWcKBowCCg6jMXVA7K0
sqDDO8iBeJpZlQYxoe0kCPMoxtOUFevjeeGvX6IC/hBs79qDaca+14PMSQ61MwmX
dlt87nWaQlujuVp14HTGf0IliyfZyeMpKwpeBnMyqgtZCq/IqUp7Vfnb9MXH+GxL
5yVrGjdmHZapG1p91/MpMvAwvzf/Q8obhBKyzaupLgs8kOixEumPzJuWMd4xxrhl
T7aGT2LwYCieqYb3xyipD+RBB3UGp5rkSY5w9HDwL2Fb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org