Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/ywrPGDFRX6nQPxOpOYp15Qa3he8.roa
File:                     ywrPGDFRX6nQPxOpOYp15Qa3he8.roa (raw, json)
Hash identifier:          34yYPHgjufoU+3D2YfPFq7oBxVeR8HykXDSK+Z/auiY=
Subject key identifier:   CB:0A:CF:18:31:51:5F:A9:D0:3F:13:A9:39:8A:75:E5:06:B7:85:EF
Certificate issuer:       /CN=d69dc911516e3e2622ee97a7bb84425dd9eb8655
Certificate serial:       5C2D9C
Authority key identifier: D6:9D:C9:11:51:6E:3E:26:22:EE:97:A7:BB:84:42:5D:D9:EB:86:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1p3JEVFuPiYi7penu4RCXdnrhlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/ywrPGDFRX6nQPxOpOYp15Qa3he8.roa
Signing time:             Sat 01 Jan 2022 00:51:43 +0000
ROA not before:           Sat 01 Jan 2022 00:51:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        146.19.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6040988 (0x5c2d9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d69dc911516e3e2622ee97a7bb84425dd9eb8655
        Validity
            Not Before: Jan  1 00:51:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb0acf1831515fa9d03f13a9398a75e506b785ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:72:31:de:63:06:2d:da:5f:7f:c9:c7:44:
                    02:74:11:05:ac:f3:9c:55:60:f6:36:af:51:f7:0d:
                    83:90:bc:bb:d4:a7:33:a0:37:51:6b:58:a1:51:d6:
                    da:b9:cd:4e:88:e7:48:92:3e:44:28:a1:64:12:c5:
                    f9:aa:d7:76:ef:91:a5:e4:0e:54:b6:30:42:4f:47:
                    3d:e3:bf:9e:51:fa:48:79:ff:d5:ba:59:0c:41:ac:
                    5c:71:be:94:10:e9:c4:7f:fb:b3:04:3c:8b:44:84:
                    cc:ad:cf:ee:1e:55:d6:02:43:84:f4:e9:66:ac:53:
                    66:a0:6b:7c:2f:bd:d9:ee:d8:60:8b:4d:37:de:dc:
                    50:68:8b:6a:e8:81:e3:71:8e:96:0c:34:79:ad:3c:
                    f8:d0:8f:02:02:5c:74:ed:b2:02:8b:f9:06:5c:ea:
                    7f:9e:e6:22:8e:30:c9:e2:1b:fa:52:1b:a5:63:1b:
                    7e:ab:c9:7f:24:4b:52:c4:99:e6:7b:a4:46:92:3b:
                    ac:da:30:95:4e:bc:48:43:ab:63:57:97:48:97:cf:
                    84:b2:36:0a:47:f6:b6:4a:5b:33:25:72:6b:05:1f:
                    a1:f5:c4:85:d7:c5:fe:25:29:f1:5e:6a:f1:4f:03:
                    0b:e8:ff:19:f8:76:3e:a3:5e:6c:e9:d7:b6:35:10:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0A:CF:18:31:51:5F:A9:D0:3F:13:A9:39:8A:75:E5:06:B7:85:EF
            X509v3 Authority Key Identifier:
                keyid:D6:9D:C9:11:51:6E:3E:26:22:EE:97:A7:BB:84:42:5D:D9:EB:86:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1p3JEVFuPiYi7penu4RCXdnrhlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/ywrPGDFRX6nQPxOpOYp15Qa3he8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/1p3JEVFuPiYi7penu4RCXdnrhlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:3c:3c:65:d0:74:c1:5d:2e:9c:d2:e9:96:a5:8e:e5:39:
         ab:a4:21:9e:3f:86:51:ad:b6:85:56:81:17:63:5c:4b:a8:7d:
         86:4c:30:2c:fa:c7:85:fd:3d:7a:01:92:96:4d:4b:1b:ac:0d:
         a6:9b:7d:26:34:2c:0a:ec:b1:07:e3:3d:c2:86:fc:51:ab:10:
         c6:2a:ed:7a:84:93:89:b7:f2:7b:da:ad:bb:3b:a6:50:3e:01:
         b5:a0:fd:b9:09:3f:07:8a:4f:b6:5a:03:62:cb:22:ca:3f:c7:
         cf:9a:2a:f9:04:0f:c6:e2:d1:05:66:ba:fc:85:96:6b:0f:66:
         75:9c:c8:ba:fd:00:9c:93:f5:44:85:d4:f2:1a:e1:e2:ab:61:
         11:ff:55:73:10:1d:71:fb:4b:59:4c:b7:61:d0:c3:a1:38:d5:
         16:3b:04:0d:56:27:33:90:e6:1e:1c:0b:0d:d2:9e:e5:84:9a:
         8e:4c:06:6f:b4:1f:5c:0c:35:b9:f2:5f:fe:8b:70:84:25:d1:
         88:9f:9c:25:8a:38:d2:0b:1f:94:60:b9:06:a6:c8:16:27:38:
         48:a0:44:ac:70:52:89:81:1f:c7:13:a9:a8:c1:b7:de:9f:67:
         94:4e:e6:97:34:78:ef:94:40:74:46:8b:2f:17:b0:ae:98:09:
         fa:4a:81:60
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDXC2cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
OWRjOTExNTE2ZTNlMjYyMmVlOTdhN2JiODQ0MjVkZDllYjg2NTUwHhcNMjIwMTAx
MDA1MTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjYjBhY2YxODMxNTE1
ZmE5ZDAzZjEzYTkzOThhNzVlNTA2Yjc4NWVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxDVyMd5jBi3aX3/Jx0QCdBEFrPOcVWD2Nq9R9w2DkLy71Kcz
oDdRa1ihUdbauc1OiOdIkj5EKKFkEsX5qtd275Gl5A5UtjBCT0c947+eUfpIef/V
ulkMQaxccb6UEOnEf/uzBDyLRITMrc/uHlXWAkOE9OlmrFNmoGt8L73Z7thgi003
3txQaItq6IHjcY6WDDR5rTz40I8CAlx07bICi/kGXOp/nuYijjDJ4hv6UhulYxt+
q8l/JEtSxJnme6RGkjus2jCVTrxIQ6tjV5dIl8+EsjYKR/a2SlszJXJrBR+h9cSF
18X+JSnxXmrxTwML6P8Z+HY+o15s6de2NRBHbQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMsKzxgxUV+p0D8TqTmKdeUGt4XvMB8GA1UdIwQYMBaAFNadyRFRbj4mIu6X
p7uEQl3Z64ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MXAzSkVWRnVQaVlpN3BlbnU0UkNYZG5yaGxVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zMC8xMTU1NjctZTYxNi00NDgzLWE2ZGItZTg2MjlmMjZhODJlLzEv
eXdyUEdERlJYNm5RUHhPcE9ZcDE1UWEzaGU4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8x
MTU1NjctZTYxNi00NDgzLWE2ZGItZTg2MjlmMjZhODJlLzEvMXAzSkVWRnVQaVlp
N3BlbnU0UkNYZG5yaGxVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhO3MA0GCSqGSIb3DQEBCwUAA4IB
AQCttjw8ZdB0wV0unNLplqWO5TmrpCGeP4ZRrbaFVoEXY1xLqH2GTDAs+seF/T16
AZKWTUsbrA2mm30mNCwK7LEH4z3ChvxRqxDGKu16hJOJt/J72q27O6ZQPgG1oP25
CT8Hik+2WgNiyyLKP8fPmir5BA/G4tEFZrr8hZZrD2Z1nMi6/QCck/VEhdTyGuHi
q2ER/1VzEB1x+0tZTLdh0MOhONUWOwQNViczkOYeHAsN0p7lhJqOTAZvtB9cDDW5
8l/+i3CEJdGIn5wlijjSCx+UYLkGpsgWJzhIoESscFKJgR/HE6mowbfen2eUTuaX
NHjvlEB0RosvF7CumAn6SoFg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org