Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/SEIBuNbdgvxZ_FpIxnD7D-GdtGI.roa
File:                     SEIBuNbdgvxZ_FpIxnD7D-GdtGI.roa (raw, json)
Hash identifier:          5qCk0x9Mz96hkMwWE1CWFyV6PqsU/ztp0/jdHpf8HU0=
Subject key identifier:   48:42:01:B8:D6:DD:82:FC:59:FC:5A:48:C6:70:FB:0F:E1:9D:B4:62
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       3A553E51
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/SEIBuNbdgvxZ_FpIxnD7D-GdtGI.roa
Signing time:             Sat 01 Jan 2022 14:56:29 +0000
ROA not before:           Sat 01 Jan 2022 14:56:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60345
IP address blocks:        5.160.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978665041 (0x3a553e51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jan  1 14:56:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=484201b8d6dd82fc59fc5a48c670fb0fe19db462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:dd:80:ca:47:99:bc:93:74:84:8e:ef:c1:
                    41:b2:93:8d:93:8e:14:48:70:e9:2a:5b:ad:1a:6f:
                    4f:77:d6:20:b9:b7:ed:01:3b:dc:27:e8:47:7b:fa:
                    db:14:03:d8:76:d7:7a:38:49:38:5e:8e:20:4c:72:
                    20:df:a6:84:0d:6f:d9:69:53:24:3e:d2:ff:cd:96:
                    20:dd:04:f4:83:96:3e:2e:e1:e2:c5:42:b9:a5:28:
                    8b:02:77:2c:06:5d:85:1d:24:dd:d5:25:53:29:fd:
                    8b:8a:08:c7:8e:74:f6:60:c4:86:2f:97:76:0d:01:
                    6b:29:a0:e4:8b:a1:0c:ca:e0:81:4e:5f:bc:5b:fa:
                    62:11:5f:6a:ad:ab:e9:98:6e:7e:51:81:e1:8f:70:
                    7c:be:a1:9e:f4:3a:1a:6b:4f:d7:f1:9f:6e:b1:26:
                    4c:d5:3a:af:00:7a:30:50:55:a8:ff:cd:fc:59:67:
                    ca:f1:af:7a:cf:29:df:e8:5f:c6:e1:4c:9a:c8:48:
                    6d:b7:5f:8c:6f:47:81:fb:4d:98:b2:28:a1:99:14:
                    06:ef:31:c7:73:ff:48:33:b6:c5:92:e2:03:79:d9:
                    6d:06:d3:cb:fb:c3:d4:ea:d4:ec:b4:f9:e2:2f:54:
                    aa:0c:cb:2e:a4:a5:fd:d8:73:dc:28:3d:77:a8:8d:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:01:B8:D6:DD:82:FC:59:FC:5A:48:C6:70:FB:0F:E1:9D:B4:62
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/SEIBuNbdgvxZ_FpIxnD7D-GdtGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.160.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:58:cc:27:ba:b6:88:eb:a2:b6:1f:87:9d:3d:14:fa:59:c3:
         45:f7:e4:81:ab:2e:c7:57:4f:6c:06:86:87:f7:a3:bb:2e:f2:
         ca:07:16:b3:22:b1:cd:e0:4a:f2:d5:c9:c6:4f:01:7e:1d:ee:
         72:89:3f:22:2c:3a:d3:23:5c:91:e7:0c:5f:65:dc:cd:17:cf:
         13:08:1e:da:6a:ea:2f:92:c2:25:7c:1e:59:8b:dc:9b:07:37:
         a0:2e:32:d2:09:39:54:3c:6a:3e:3f:88:f0:a6:2e:82:2d:90:
         3f:dc:50:5e:06:3d:82:28:68:b2:95:0e:ed:03:14:ea:18:2b:
         e2:68:ea:63:c9:b6:1d:f9:b9:e7:d6:e5:f9:2d:ea:83:bb:bf:
         fa:fe:a9:e4:15:bf:c4:0c:53:a4:e6:c0:c8:25:af:4a:27:7e:
         89:05:c2:15:4e:90:60:14:f3:a8:c0:b3:55:5d:82:1f:de:2c:
         3d:d6:62:f0:25:0a:db:e6:d9:e1:67:de:33:5b:3e:da:28:3b:
         a2:d9:43:18:36:fc:9f:16:c1:d1:96:cd:29:2e:c3:ea:05:51:
         89:49:78:da:a7:b0:79:3b:d1:89:09:9a:b1:d3:b8:2e:c0:6e:
         1b:56:14:5e:10:74:a5:9f:7f:d1:02:cd:fe:73:38:bd:2c:4f:
         bb:58:18:d5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOlU+UTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWNjYTlmMTVlMTkyMTk1M2E2MjhjOGFkMmFjNGJlOTc3YjZjMzAzMB4XDTIyMDEw
MTE0NTYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg0MjAxYjhkNmRk
ODJmYzU5ZmM1YTQ4YzY3MGZiMGZlMTlkYjQ2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNo3YDKR5m8k3SEju/BQbKTjZOOFEhw6SpbrRpvT3fWILm3
7QE73CfoR3v62xQD2HbXejhJOF6OIExyIN+mhA1v2WlTJD7S/82WIN0E9IOWPi7h
4sVCuaUoiwJ3LAZdhR0k3dUlUyn9i4oIx4509mDEhi+Xdg0Baymg5IuhDMrggU5f
vFv6YhFfaq2r6ZhuflGB4Y9wfL6hnvQ6GmtP1/GfbrEmTNU6rwB6MFBVqP/N/Fln
yvGves8p3+hfxuFMmshIbbdfjG9HgftNmLIooZkUBu8xx3P/SDO2xZLiA3nZbQbT
y/vD1OrU7LT54i9UqgzLLqSl/dhz3Cg9d6iNaVMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRIQgG41t2C/Fn8WkjGcPsP4Z20YjAfBgNVHSMEGDAWgBSBzKnxXhkhlTpi
jIrSrEvpd7bDAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djeXA4VjRaSVpVNllveUswcXhMNlhlMnd3TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvMWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8x
L1NFSUJ1TmJkZ3Z4Wl9GcEl4bkQ3RC1HZHRHSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
MWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8xL2djeXA4VjRaSVpV
NllveUswcXhMNlhlMnd3TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWgCjANBgkqhkiG9w0BAQsFAAOC
AQEAPljMJ7q2iOuith+HnT0U+lnDRffkgasux1dPbAaGh/ejuy7yygcWsyKxzeBK
8tXJxk8Bfh3ucok/Iiw60yNckecMX2XczRfPEwge2mrqL5LCJXweWYvcmwc3oC4y
0gk5VDxqPj+I8KYugi2QP9xQXgY9gihospUO7QMU6hgr4mjqY8m2Hfm559bl+S3q
g7u/+v6p5BW/xAxTpObAyCWvSid+iQXCFU6QYBTzqMCzVV2CH94sPdZi8CUK2+bZ
4WfeM1s+2ig7otlDGDb8nxbB0ZbNKS7D6gVRiUl42qeweTvRiQmasdO4LsBuG1YU
XhB0pZ9/0QLN/nM4vSxPu1gY1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org