Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kWSoJvmevQ_tiPCwFfpiGFLL-jw.roa
File:                     kWSoJvmevQ_tiPCwFfpiGFLL-jw.roa (raw, json)
Hash identifier:          e72fSHrmJ3k1aSN6A30vXd4gZ4S0b8ODd/AcuC4y5U0=
Subject key identifier:   91:64:A8:26:F9:9E:BD:0F:ED:88:F0:B0:15:FA:62:18:52:CB:FA:3C
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       018562F689A7D655734377F18CE3F2FDB27F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kWSoJvmevQ_tiPCwFfpiGFLL-jw.roa
Signing time:             Fri 30 Dec 2022 12:16:42 +0000
ROA not before:           Fri 30 Dec 2022 12:16:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202470
IP address blocks:        193.30.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:f6:89:a7:d6:55:73:43:77:f1:8c:e3:f2:fd:b2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Dec 30 12:16:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9164a826f99ebd0fed88f0b015fa621852cbfa3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:59:08:7d:46:e4:c0:cb:60:3f:e9:6a:e7:
                    14:b9:ac:49:2f:88:37:d7:f4:ce:08:e2:be:67:7a:
                    06:2a:87:62:62:1e:29:43:f9:5d:bd:0c:35:45:09:
                    40:ab:ed:7e:04:e1:08:c1:17:da:f8:83:32:7a:95:
                    82:a5:e1:be:aa:36:cd:6d:53:91:53:b8:29:df:3e:
                    22:12:bc:5a:5d:72:ef:d8:f7:15:80:9e:41:09:58:
                    5e:af:d8:2e:8e:17:20:0e:9b:2b:1d:12:20:64:b5:
                    f6:ce:65:e7:22:3b:46:75:2e:41:b5:60:9d:3a:6b:
                    d8:f3:14:61:6b:60:a9:91:2e:3d:39:c5:e0:92:b9:
                    56:45:64:80:ee:39:4a:9a:82:cf:bf:79:3e:60:bc:
                    09:e3:67:18:c4:56:79:4e:f8:29:2c:0c:9a:a4:8e:
                    1f:3d:00:09:a7:c0:2e:d5:26:8a:5c:fd:97:ed:43:
                    99:bc:5c:2c:79:4c:e6:ca:c3:31:0d:17:33:4b:8b:
                    82:70:9d:43:a3:99:4f:c0:ac:ae:c6:ad:32:24:7e:
                    be:c6:bd:03:95:f4:e6:cf:c6:6a:3a:a0:bb:e4:ad:
                    48:39:3e:08:73:e2:72:2f:8e:46:20:05:21:e0:89:
                    03:25:b5:10:3a:10:b8:fc:e0:1c:8f:48:5e:3c:d0:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:64:A8:26:F9:9E:BD:0F:ED:88:F0:B0:15:FA:62:18:52:CB:FA:3C
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kWSoJvmevQ_tiPCwFfpiGFLL-jw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:20:bb:e0:6e:ae:1c:ca:52:ad:5a:c4:fc:ca:be:bd:37:1f:
         ca:7c:c4:94:d6:35:ee:1e:23:cf:4f:55:05:57:b9:30:fe:92:
         ab:f0:a9:c2:57:ca:74:85:9c:5f:1b:32:14:bb:09:f6:17:f6:
         25:8a:5a:20:c8:3b:17:e5:18:29:00:84:c7:7e:3e:6f:ff:42:
         fa:d5:47:49:07:aa:6f:d3:a2:88:b3:73:72:67:f0:15:46:31:
         09:fe:ad:69:11:26:01:44:3b:6b:5e:ed:07:38:0b:44:8b:99:
         4a:85:27:8f:f7:a7:2c:ef:79:2a:c6:28:96:36:45:a4:fb:b6:
         6b:fa:a9:b2:d6:32:2d:78:1d:63:65:94:b8:db:1f:35:40:a2:
         b7:45:93:02:0d:88:1d:9b:b5:84:fd:57:b0:bc:cf:b2:d0:d2:
         5e:5d:90:bd:64:ce:5e:19:c7:cf:b1:a5:04:44:df:7c:6f:14:
         dd:d6:97:18:8f:9b:fd:c7:c2:3c:02:60:8b:9b:75:66:71:6c:
         97:e3:db:5c:ab:fc:e9:aa:7b:4d:1d:79:63:69:8c:99:4d:f8:
         92:6c:d3:4b:23:b5:b9:4c:ca:01:a6:ca:eb:9e:73:56:cd:14:
         b9:83:2f:c9:49:70:44:1a:c5:e7:97:28:bc:c4:be:30:81:21:
         ea:0e:16:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVi9omn1lVzQ3fxjOPy/bJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjIxMjMwMTIxNjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTY0YTgyNmY5OWViZDBmZWQ4OGYwYjAxNWZhNjIxODUyY2JmYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1tZCH1G5MDLYD/paucUuaxJL4g3
1/TOCOK+Z3oGKodiYh4pQ/ldvQw1RQlAq+1+BOEIwRfa+IMyepWCpeG+qjbNbVOR
U7gp3z4iErxaXXLv2PcVgJ5BCVher9gujhcgDpsrHRIgZLX2zmXnIjtGdS5BtWCd
OmvY8xRha2CpkS49OcXgkrlWRWSA7jlKmoLPv3k+YLwJ42cYxFZ5TvgpLAyapI4f
PQAJp8Au1SaKXP2X7UOZvFwseUzmysMxDRczS4uCcJ1Do5lPwKyuxq0yJH6+xr0D
lfTmz8ZqOqC75K1IOT4Ic+JyL45GIAUh4IkDJbUQOhC4/OAcj0hePNCKawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFkqCb5nr0P7YjwsBX6YhhSy/o8MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEva1dTb0p2bWV2UV90aVBDd0ZmcGlHRkxMLWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR4eMA0G
CSqGSIb3DQEBCwUAA4IBAQA3ILvgbq4cylKtWsT8yr69Nx/KfMSU1jXuHiPPT1UF
V7kw/pKr8KnCV8p0hZxfGzIUuwn2F/YlilogyDsX5RgpAITHfj5v/0L61UdJB6pv
06KIs3NyZ/AVRjEJ/q1pESYBRDtrXu0HOAtEi5lKhSeP96cs73kqxiiWNkWk+7Zr
+qmy1jIteB1jZZS42x81QKK3RZMCDYgdm7WE/VewvM+y0NJeXZC9ZM5eGcfPsaUE
RN98bxTd1pcYj5v9x8I8AmCLm3VmcWyX49tcq/zpqntNHXljaYyZTfiSbNNLI7W5
TMoBpsrrnnNWzRS5gy/JSXBEGsXnlyi8xL4wgSHqDhb8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org