Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/fVz_AQx3fitPrgB80nCOAUkw2Xo.roa
File:                     fVz_AQx3fitPrgB80nCOAUkw2Xo.roa (raw, json)
Hash identifier:          HswVlSOa9tyEw3kL1TZzyh2xFPvJN+AbmF0pHVnh5Nw=
Subject key identifier:   7D:5C:FF:01:0C:77:7E:2B:4F:AE:00:7C:D2:70:8E:01:49:30:D9:7A
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       01818CB4
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/fVz_AQx3fitPrgB80nCOAUkw2Xo.roa
Signing time:             Sun 09 Jan 2022 13:18:32 +0000
ROA not before:           Sun 09 Jan 2022 13:18:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41114
IP address blocks:        109.106.24.0/22 maxlen: 24
                          77.83.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25267380 (0x1818cb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Jan  9 13:18:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d5cff010c777e2b4fae007cd2708e014930d97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:3b:ba:97:3a:4a:9a:12:f4:79:3e:71:9d:
                    b0:df:91:e9:d6:9b:27:1c:98:35:c7:6b:df:9f:9d:
                    6c:08:ae:b4:b3:8f:3f:b9:cc:87:bb:80:35:c6:98:
                    de:68:c7:05:b8:14:50:cf:74:fc:ba:64:54:6b:66:
                    ab:d8:2f:e4:fe:45:c0:8c:fd:5b:e8:c1:8b:0c:0d:
                    cb:2b:52:b9:a9:34:60:60:22:84:2e:29:92:4b:2b:
                    a3:14:cf:bc:c9:15:3d:b1:59:b9:c5:35:05:55:2d:
                    56:17:ce:91:3b:bd:55:ca:36:ba:2f:1f:1c:6a:cf:
                    8e:99:0b:76:e5:b8:b9:6d:19:6c:9f:cb:76:8c:05:
                    a5:c3:2d:f6:d1:b4:35:8a:c0:31:46:21:d3:7a:51:
                    d2:53:9e:23:5f:85:2f:9c:be:a6:35:86:cc:11:6a:
                    2e:9f:bd:d4:b0:3f:c0:12:73:16:85:cc:91:50:bb:
                    37:c2:6f:95:49:3b:47:e2:c3:8f:16:08:0a:b9:05:
                    8e:73:e6:c1:84:15:5d:25:25:79:b3:39:ff:c0:2a:
                    4c:95:24:fc:a5:7c:c3:bc:aa:b0:3f:34:02:29:1e:
                    c1:7a:3b:f4:c2:85:da:97:47:5c:f5:15:d0:be:fc:
                    b6:9c:72:68:02:e8:c3:92:03:08:f6:13:15:f7:37:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5C:FF:01:0C:77:7E:2B:4F:AE:00:7C:D2:70:8E:01:49:30:D9:7A
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/fVz_AQx3fitPrgB80nCOAUkw2Xo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.228.0/22
                  109.106.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:ea:da:a6:f4:00:71:33:70:5b:c2:8c:26:fc:cc:7d:ff:
         74:ab:40:43:b7:04:af:19:2c:61:cb:45:37:c1:a3:49:a4:17:
         74:fe:74:10:ac:cb:b2:35:8d:e1:16:08:89:dc:8d:2e:56:89:
         0a:5a:28:f7:67:17:c3:b8:fd:5d:b5:9b:8b:ec:49:6d:e3:a9:
         98:b5:e3:69:a2:51:55:a9:97:b3:dd:a0:f8:4e:d3:7c:ee:6d:
         ad:29:9c:76:6b:75:e0:fc:a8:db:8a:45:5c:98:ef:3a:02:87:
         56:de:df:20:83:33:3c:0f:9c:4d:b6:ef:3a:a3:b7:e1:49:2e:
         4e:99:5a:dd:68:63:54:86:66:33:2f:cf:bf:55:b0:cc:36:d9:
         1e:92:7f:c6:fc:00:46:cb:84:04:6d:45:47:3b:f9:b2:fb:6f:
         98:f6:a9:33:b6:e4:bc:95:53:e2:46:35:7b:c2:04:75:e2:f1:
         e6:e8:69:dd:6e:b4:5a:d2:c8:a4:0a:27:06:fa:c2:b0:cf:f7:
         ce:ef:9e:47:50:d0:0d:19:e2:89:8f:9c:a9:5e:00:75:17:05:
         e8:fa:89:40:33:be:f4:15:8d:18:17:35:ec:5b:ba:d3:d1:35:
         a1:35:ba:df:4a:c8:9e:6e:61:58:68:0d:48:38:0e:aa:5c:9b:
         12:18:53:58
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAYGMtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NjhjMjY3YTY0NzRmY2I3Y2M0OWNmMzI1ZDBlOWRjYzVmZThkMjBkMB4XDTIyMDEw
OTEzMTgzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q1Y2ZmMDEwYzc3
N2UyYjRmYWUwMDdjZDI3MDhlMDE0OTMwZDk3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOCQO7qXOkqaEvR5PnGdsN+R6dabJxyYNcdr35+dbAiutLOP
P7nMh7uANcaY3mjHBbgUUM90/LpkVGtmq9gv5P5FwIz9W+jBiwwNyytSuak0YGAi
hC4pkksroxTPvMkVPbFZucU1BVUtVhfOkTu9Vco2ui8fHGrPjpkLduW4uW0ZbJ/L
dowFpcMt9tG0NYrAMUYh03pR0lOeI1+FL5y+pjWGzBFqLp+91LA/wBJzFoXMkVC7
N8JvlUk7R+LDjxYICrkFjnPmwYQVXSUlebM5/8AqTJUk/KV8w7yqsD80AikewXo7
9MKF2pdHXPUV0L78tpxyaALow5IDCPYTFfc3qrECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR9XP8BDHd+K0+uAHzScI4BSTDZejAfBgNVHSMEGDAWgBRGjCZ6ZHT8t8xJ
zzJdDp3MX+jSDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Jvd21lbVIwX0xmTVNjOHlYUTZkekZfbzBnMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNmU2MTVmLTVmZDctNDViNi04YWNiLTc2OTk5YmY5OTk5Zi8x
L2ZWel9BUXgzZml0UHJnQjgwbkNPQVVrdzJYby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
NmU2MTVmLTVmZDctNDViNi04YWNiLTc2OTk5YmY5OTk5Zi8xL1Jvd21lbVIwX0xm
TVNjOHlYUTZkekZfbzBnMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAk1T5AMEAm1qGDANBgkqhkiG9w0B
AQsFAAOCAQEAX2Dq2qb0AHEzcFvCjCb8zH3/dKtAQ7cErxksYctFN8GjSaQXdP50
EKzLsjWN4RYIidyNLlaJCloo92cXw7j9XbWbi+xJbeOpmLXjaaJRVamXs92g+E7T
fO5trSmcdmt14Pyo24pFXJjvOgKHVt7fIIMzPA+cTbbvOqO34UkuTpla3WhjVIZm
My/Pv1WwzDbZHpJ/xvwARsuEBG1FRzv5svtvmPapM7bkvJVT4kY1e8IEdeLx5uhp
3W60WtLIpAonBvrCsM/3zu+eR1DQDRniiY+cqV4AdRcF6PqJQDO+9BWNGBc17Fu6
09E1oTW630rInm5hWGgNSDgOqlybEhhTWA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-fra.rpki-client.org