Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/1-WJw0M1fTj_qjQ_k2DshPIT2ufA.roa
File:                     1-WJw0M1fTj_qjQ_k2DshPIT2ufA.roa (raw, json)
Hash identifier:          4CBS+XSiLXb6KH+Vet0hrUNF6u530Z2ot6E2GDGpaUU=
Subject key identifier:   F9:62:70:D0:CD:5F:4E:3F:EA:8D:0F:E4:D8:3B:21:3C:84:F6:B9:F0
Certificate issuer:       /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial:       0543867B
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/1-WJw0M1fTj_qjQ_k2DshPIT2ufA.roa
Signing time:             Sat 01 Jan 2022 07:02:59 +0000
ROA not before:           Sat 01 Jan 2022 07:02:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3292
IP address blocks:        193.163.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88311419 (0x543867b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
        Validity
            Not Before: Jan  1 07:02:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f96270d0cd5f4e3fea8d0fe4d83b213c84f6b9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:a0:6e:e0:09:a5:d9:59:f3:c8:e0:13:a8:
                    02:f2:11:d2:8c:91:3f:64:44:87:c0:48:a7:e7:b3:
                    dc:35:05:16:59:17:75:68:53:ab:89:cb:25:43:01:
                    70:78:cb:41:36:36:97:d0:db:29:8d:e8:86:92:6b:
                    ff:b1:09:e3:6c:b3:03:f3:19:ce:97:af:ea:d1:48:
                    78:26:3e:aa:3e:11:ea:04:f6:f7:ab:45:c7:61:5a:
                    87:20:9f:6b:47:2d:65:19:7c:20:5d:81:2d:88:09:
                    35:6e:83:7d:8c:82:f0:1e:b9:25:8a:69:05:c3:71:
                    71:27:53:52:cb:8e:2c:54:03:6d:00:8f:e6:07:95:
                    b5:b2:cb:e5:80:44:50:21:0f:1a:f5:1b:4b:c8:b2:
                    f9:b7:c9:46:3e:64:86:95:33:9d:6e:d0:64:04:f6:
                    0f:01:25:4e:a6:f4:0a:ce:90:c7:c8:c6:09:2e:3d:
                    1e:c4:e2:09:1e:e5:54:eb:24:b4:6e:de:7c:e8:e4:
                    c1:d7:0b:d5:15:91:e2:16:0f:92:91:40:15:ba:17:
                    bc:f0:1a:63:b3:3e:e6:d9:79:d4:e3:e8:a4:39:28:
                    ea:73:0c:55:d7:f2:9a:ba:0a:79:e0:83:46:5d:54:
                    22:c4:35:68:fd:52:91:83:d4:d7:3d:7a:3e:3c:eb:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:70:D0:CD:5F:4E:3F:EA:8D:0F:E4:D8:3B:21:3C:84:F6:B9:F0
            X509v3 Authority Key Identifier:
                keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/1-WJw0M1fTj_qjQ_k2DshPIT2ufA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:4d:ce:a1:dc:a1:3c:8a:e2:64:d1:22:e9:06:72:ac:db:
         11:77:23:ea:23:45:bf:fe:73:1e:d4:a6:88:b8:c9:a0:9c:65:
         dd:1b:da:50:3c:fa:76:e7:44:32:f7:cb:03:9a:6c:61:25:6f:
         51:0e:3f:ae:fb:66:6c:02:6a:c0:39:fc:58:b6:a9:79:39:e5:
         b9:85:f0:0e:27:22:b4:fc:c9:da:8b:c2:43:aa:12:cb:b8:63:
         9d:7a:78:9e:de:39:82:9b:bd:06:e7:1a:7f:ce:59:c0:45:e8:
         bd:43:cd:6e:1c:9d:b3:16:56:42:f5:84:a1:e9:a2:0d:a8:0b:
         bc:a3:07:41:14:04:e9:80:8d:1d:45:8a:4d:ad:67:fb:5a:a0:
         0c:b5:63:06:b7:06:dd:5c:ca:fc:00:0a:a8:ca:2c:56:d9:ee:
         0f:d9:6b:80:b8:6a:d2:dd:84:ad:be:98:0d:0f:e3:bf:8a:a9:
         57:c6:ff:31:dd:02:93:41:79:5d:44:33:90:35:e5:0e:7e:0f:
         80:b4:45:d0:0e:83:00:8a:0e:ce:04:86:bf:a6:4f:3e:c1:01:
         24:fc:13:3d:94:a2:00:02:68:03:0a:68:c8:11:76:4b:ba:99:
         29:d1:13:05:d9:f6:79:91:46:36:a8:4d:96:81:a4:d2:44:3f:
         32:f8:09:3f
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBUOGezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZmE0OGU5NjE5NzQyNmU0YzVlZWI0MjNlMGZkOWMyZTk1MmM0MTc3MB4XDTIyMDEw
MTA3MDI1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjk2MjcwZDBjZDVm
NGUzZmVhOGQwZmU0ZDgzYjIxM2M4NGY2YjlmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUCoG7gCaXZWfPI4BOoAvIR0oyRP2REh8BIp+ez3DUFFlkX
dWhTq4nLJUMBcHjLQTY2l9DbKY3ohpJr/7EJ42yzA/MZzpev6tFIeCY+qj4R6gT2
96tFx2FahyCfa0ctZRl8IF2BLYgJNW6DfYyC8B65JYppBcNxcSdTUsuOLFQDbQCP
5geVtbLL5YBEUCEPGvUbS8iy+bfJRj5khpUznW7QZAT2DwElTqb0Cs6Qx8jGCS49
HsTiCR7lVOsktG7efOjkwdcL1RWR4hYPkpFAFboXvPAaY7M+5tl51OPopDko6nMM
VdfymroKeeCDRl1UIsQ1aP1SkYPU1z16PjzraKMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5YnDQzV9OP+qND+TYOyE8hPa58DAfBgNVHSMEGDAWgBRvpI6WGXQm5MXu
tCPg/ZwulSxBdzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I2U09saGwwSnVURjdyUWo0UDJjTHBVc1FYYy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvOGM1YmM3LTU1ZmEtNDA0NC04OGRhLTY4MTg1ZmRiOTAwMy8x
LzEtV0p3ME0xZlRqX3FqUV9rMkRzaFBJVDJ1ZkEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0
LzhjNWJjNy01NWZhLTQwNDQtODhkYS02ODE4NWZkYjkwMDMvMS9iNlNPbGhsMEp1
VEY3clFqNFAyY0xwVXNRWGMuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBo9wwDQYJKoZIhvcNAQELBQAD
ggEBAIfjTc6h3KE8iuJk0SLpBnKs2xF3I+ojRb/+cx7Upoi4yaCcZd0b2lA8+nbn
RDL3ywOabGElb1EOP677ZmwCasA5/Fi2qXk55bmF8A4nIrT8ydqLwkOqEsu4Y516
eJ7eOYKbvQbnGn/OWcBF6L1DzW4cnbMWVkL1hKHpog2oC7yjB0EUBOmAjR1Fik2t
Z/taoAy1Ywa3Bt1cyvwACqjKLFbZ7g/Za4C4atLdhK2+mA0P47+KqVfG/zHdApNB
eV1EM5A15Q5+D4C0RdAOgwCKDs4Ehr+mTz7BAST8Ez2UogACaAMKaMgRdku6mSnR
EwXZ9nmRRjaoTZaBpNJEPzL4CT8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org