Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/m1gI2Go727Fc4MUbssgABI53GH0.roa
File:                     m1gI2Go727Fc4MUbssgABI53GH0.roa (raw, json)
Hash identifier:          kU+Q8D5KOGnIcRcMlCTXiMhtgS2HQ6/JhAA3IfjhhSY=
Subject key identifier:   9B:58:08:D8:6A:3B:DB:B1:5C:E0:C5:1B:B2:C8:00:04:8E:77:18:7D
Certificate issuer:       /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial:       C70565
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/m1gI2Go727Fc4MUbssgABI53GH0.roa
Signing time:             Sat 01 Jan 2022 09:59:34 +0000
ROA not before:           Sat 01 Jan 2022 09:59:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50673
IP address blocks:        194.104.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13043045 (0xc70565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
        Validity
            Not Before: Jan  1 09:59:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b5808d86a3bdbb15ce0c51bb2c800048e77187d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:93:34:f5:d6:3d:09:1d:3c:0f:49:c0:14:
                    d8:d9:7c:b5:ec:1e:fd:52:02:98:b9:25:fb:9d:51:
                    8e:96:95:1b:64:4b:01:09:79:f1:af:0d:8c:ff:89:
                    6b:8d:59:7f:78:6f:aa:d7:f4:ff:19:4d:e7:9c:10:
                    e7:ea:d0:d6:2d:7d:c8:ed:4d:34:d1:2a:02:7b:4a:
                    75:f6:bf:a7:0a:01:c9:14:e1:f7:61:e2:7f:db:03:
                    13:4c:f5:3f:99:e7:e7:f6:ad:9e:50:ec:16:0d:76:
                    1f:40:03:cd:45:ee:df:f3:12:26:c5:60:41:27:69:
                    99:7d:21:c4:b0:02:b0:2f:ae:ce:75:aa:3c:49:67:
                    40:8b:b7:ba:f2:bd:2a:5a:84:c2:78:81:7d:88:1c:
                    ed:b7:ca:fa:17:03:8b:1a:1c:72:61:49:f7:4a:ce:
                    a4:0d:dd:47:7a:d8:a6:cc:2c:82:a3:b2:b0:44:19:
                    e8:47:d3:a7:ff:e9:b1:7f:fc:a7:de:ec:31:f5:d6:
                    38:38:55:af:75:fc:07:1d:af:ad:e6:cb:d9:7a:3f:
                    d0:25:97:a5:07:eb:f8:9b:a3:37:7c:c8:51:72:ee:
                    be:61:0e:f5:4b:b3:41:bb:54:4d:d5:65:ce:b3:73:
                    6e:50:b5:7b:92:b5:4e:5d:a7:f3:59:7e:b5:dc:95:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:08:D8:6A:3B:DB:B1:5C:E0:C5:1B:B2:C8:00:04:8E:77:18:7D
            X509v3 Authority Key Identifier:
                keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/m1gI2Go727Fc4MUbssgABI53GH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:28:a8:ef:03:b0:d5:79:36:7f:93:54:0d:c4:da:6c:1e:c8:
         ae:87:07:aa:88:cc:cd:b2:39:9a:35:a4:ae:19:b2:98:8b:f3:
         fb:6c:5c:55:26:57:fd:20:4d:74:c3:52:ce:dd:fe:36:79:07:
         ad:a1:96:55:7a:b3:71:06:03:39:83:2b:e4:7b:a7:9b:8e:8e:
         9a:0e:de:63:a2:4c:7d:b8:58:81:a8:b4:77:9a:f9:49:80:38:
         b7:03:a6:ba:2b:91:b7:eb:30:d8:69:ef:12:45:38:70:4b:ca:
         dd:fc:99:d6:73:eb:d5:13:6a:46:c4:ce:78:db:ac:74:99:0b:
         aa:11:d3:92:1d:e3:08:22:b2:8d:32:2a:ab:0f:a1:18:15:3b:
         dd:42:ed:ad:2b:9a:c4:50:28:23:08:a4:0a:30:ef:aa:3b:60:
         a3:35:fd:18:ed:28:4d:02:43:d1:a6:f4:c6:6d:a5:47:d5:fa:
         fc:76:1e:63:ae:02:ff:1d:77:48:71:80:d7:21:05:5f:5c:b3:
         11:f3:3d:31:b5:bc:1e:f9:aa:ee:be:23:d0:32:dd:94:c2:96:
         1c:eb:43:8b:68:61:3d:71:0e:73:7a:5e:8a:69:1e:f1:1e:34:
         6e:7b:c7:78:2a:58:27:f8:b2:e8:db:57:ee:30:9a:51:6f:bd:
         7c:28:3a:90
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMcFZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YTRlMDI4NjU4OTEyZTY5Njk3YzE4NTUzYjk1MjlmM2QxY2U0MDVkMB4XDTIyMDEw
MTA5NTkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWI1ODA4ZDg2YTNi
ZGJiMTVjZTBjNTFiYjJjODAwMDQ4ZTc3MTg3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYakzT11j0JHTwPScAU2Nl8tewe/VICmLkl+51RjpaVG2RL
AQl58a8NjP+Ja41Zf3hvqtf0/xlN55wQ5+rQ1i19yO1NNNEqAntKdfa/pwoByRTh
92Hif9sDE0z1P5nn5/atnlDsFg12H0ADzUXu3/MSJsVgQSdpmX0hxLACsC+uznWq
PElnQIu3uvK9KlqEwniBfYgc7bfK+hcDixoccmFJ90rOpA3dR3rYpswsgqOysEQZ
6EfTp//psX/8p97sMfXWODhVr3X8Bx2vrebL2Xo/0CWXpQfr+JujN3zIUXLuvmEO
9UuzQbtUTdVlzrNzblC1e5K1Tl2n81l+tdyVJB8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSbWAjYajvbsVzgxRuyyAAEjncYfTAfBgNVHSMEGDAWgBTqTgKGWJEuaWl8
GFU7lSnz0c5AXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZrNENobGlSTG1scGZCaFZPNVVwODlIT1FGMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvMTQ1NjMxLWI2M2UtNDgwOS1iNGFiLWJjZWY5ZTMyMmYyYS8x
L20xZ0kyR283MjdGYzRNVWJzc2dBQkk1M0dIMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
MTQ1NjMxLWI2M2UtNDgwOS1iNGFiLWJjZWY5ZTMyMmYyYS8xLzZrNENobGlSTG1s
cGZCaFZPNVVwODlIT1FGMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJo7DANBgkqhkiG9w0BAQsFAAOC
AQEAYSio7wOw1Xk2f5NUDcTabB7IrocHqojMzbI5mjWkrhmymIvz+2xcVSZX/SBN
dMNSzt3+NnkHraGWVXqzcQYDOYMr5Hunm46Omg7eY6JMfbhYgai0d5r5SYA4twOm
uiuRt+sw2GnvEkU4cEvK3fyZ1nPr1RNqRsTOeNusdJkLqhHTkh3jCCKyjTIqqw+h
GBU73ULtrSuaxFAoIwikCjDvqjtgozX9GO0oTQJD0ab0xm2lR9X6/HYeY64C/x13
SHGA1yEFX1yzEfM9MbW8Hvmq7r4j0DLdlMKWHOtDi2hhPXEOc3peimke8R40bnvH
eCpYJ/iy6NtX7jCaUW+9fCg6kA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:09 2023 by rpki-client on console-fra.rpki-client.org