Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/FWQFS5ALonBHRzPBcGAXilb6Hp4.roa
File:                     FWQFS5ALonBHRzPBcGAXilb6Hp4.roa (raw, json)
Hash identifier:          tbk/VUVHSV25i5rB5fjcbujiC1+TCXUuT8rRONKoeTo=
Subject key identifier:   15:64:05:4B:90:0B:A2:70:47:47:33:C1:70:60:17:8A:56:FA:1E:9E
Certificate issuer:       /CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Certificate serial:       BEAAFD
Authority key identifier: 4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/FWQFS5ALonBHRzPBcGAXilb6Hp4.roa
Signing time:             Sat 01 Jan 2022 07:00:37 +0000
ROA not before:           Sat 01 Jan 2022 07:00:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        62.204.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12495613 (0xbeaafd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
        Validity
            Not Before: Jan  1 07:00:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1564054b900ba270474733c17060178a56fa1e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:a4:05:76:2d:d0:fe:41:e3:99:8e:11:74:
                    50:42:6c:79:cf:f4:e4:6f:e0:6a:62:3e:bc:1b:a5:
                    46:fe:f0:3f:bf:41:ea:13:de:43:e0:96:f4:f5:b0:
                    2e:84:32:68:33:bd:a4:c2:e7:f0:6f:5f:0c:1a:ef:
                    a4:ba:8c:88:11:24:5b:73:b6:b3:03:cc:8f:d1:c3:
                    18:f3:39:f9:93:c5:59:7b:00:61:91:e2:f8:f1:39:
                    e5:64:c8:5b:97:ba:f3:3d:94:81:0a:32:83:30:cd:
                    77:17:74:88:8f:4e:8c:90:f1:ef:eb:70:d4:a2:49:
                    c9:a7:3f:1e:38:58:a4:d1:76:4f:1b:56:d1:d0:08:
                    d8:2e:64:76:d7:65:82:99:50:f2:fb:f0:13:3f:be:
                    80:c1:88:64:14:4c:a8:39:b2:ab:35:61:ad:12:09:
                    d7:01:a5:94:b6:b7:1e:95:76:2e:c3:f1:c2:6e:f5:
                    67:36:1c:d0:05:b7:6e:be:a4:93:dd:2d:3c:37:ec:
                    3d:1b:53:b8:cd:3f:cd:28:6d:35:c6:a7:d3:e9:29:
                    e1:94:00:10:26:c5:cf:6e:f8:27:80:2e:67:f3:0a:
                    35:58:95:cb:9c:49:92:08:c0:77:8b:19:78:a5:e6:
                    58:86:67:b3:9f:c1:fc:e4:76:e1:00:50:cf:90:92:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:64:05:4B:90:0B:A2:70:47:47:33:C1:70:60:17:8A:56:FA:1E:9E
            X509v3 Authority Key Identifier:
                keyid:4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/FWQFS5ALonBHRzPBcGAXilb6Hp4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/Tpn0wuvUl5v9RhUwo44jVAv5V40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:2a:ef:ba:9d:26:de:8e:e1:41:dd:5b:2c:9a:d5:30:a7:51:
         13:b3:1f:20:e4:d5:ad:93:18:23:63:dd:ee:89:7a:14:8a:04:
         9d:84:11:e7:1e:da:10:42:59:c2:7c:2d:37:0c:82:a5:b9:4e:
         cb:e0:03:b0:2c:49:87:59:fd:d1:84:0e:0f:1b:59:98:9a:2a:
         5b:a7:bb:7d:48:e9:90:97:3b:e5:69:6b:ce:54:5c:da:1e:a6:
         ca:75:ba:18:dc:3d:5c:0c:69:fa:df:2b:ad:9e:f6:67:76:f9:
         bc:da:b4:f2:65:ba:44:d2:34:03:aa:08:53:22:44:da:bd:4f:
         03:94:c3:08:b0:41:49:e0:b2:eb:3a:ce:0e:26:a6:2f:4f:3b:
         f1:ef:62:89:56:0e:5e:b2:51:53:a7:ad:14:6e:71:12:fa:c3:
         4b:8b:dd:9d:bb:dd:cc:f4:16:13:5f:06:20:80:01:82:f8:a4:
         8b:97:86:d1:bc:75:ce:28:d1:24:a0:15:ae:71:2f:74:b0:2e:
         fa:d9:78:71:65:62:99:27:62:33:76:e0:fe:75:71:5d:90:70:
         24:10:71:07:fd:99:a2:a1:2f:07:c3:4d:bd:fa:d8:a7:a9:ab:
         04:bc:de:7b:ad:7a:9b:d7:44:99:a6:d0:d5:7f:6a:23:52:dd:
         21:4c:05:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAL6q/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTk5ZjRjMmViZDQ5NzliZmQ0NjE1MzBhMzhlMjM1NDBiZjk1NzhkMB4XDTIyMDEw
MTA3MDAzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTU2NDA1NGI5MDBi
YTI3MDQ3NDczM2MxNzA2MDE3OGE1NmZhMWU5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ/ZpAV2LdD+QeOZjhF0UEJsec/05G/gamI+vBulRv7wP79B
6hPeQ+CW9PWwLoQyaDO9pMLn8G9fDBrvpLqMiBEkW3O2swPMj9HDGPM5+ZPFWXsA
YZHi+PE55WTIW5e68z2UgQoygzDNdxd0iI9OjJDx7+tw1KJJyac/HjhYpNF2TxtW
0dAI2C5kdtdlgplQ8vvwEz++gMGIZBRMqDmyqzVhrRIJ1wGllLa3HpV2LsPxwm71
ZzYc0AW3br6kk90tPDfsPRtTuM0/zShtNcan0+kp4ZQAECbFz274J4AuZ/MKNViV
y5xJkgjAd4sZeKXmWIZns5/B/OR24QBQz5CSE/cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQVZAVLkAuicEdHM8FwYBeKVvoenjAfBgNVHSMEGDAWgBROmfTC69SXm/1G
FTCjjiNUC/lXjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RwbjB3dXZVbDV2OVJoVXdvNDRqVkF2NVY0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvODRiNTA3LTk0MmUtNDNkNi1iNDMwLTg3M2Q1OTA3Yjk0YS8x
L0ZXUUZTNUFMb25CSFJ6UEJjR0FYaWxiNkhwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
ODRiNTA3LTk0MmUtNDNkNi1iNDMwLTg3M2Q1OTA3Yjk0YS8xL1RwbjB3dXZVbDV2
OVJoVXdvNDRqVkF2NVY0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7MMzANBgkqhkiG9w0BAQsFAAOC
AQEAxyrvup0m3o7hQd1bLJrVMKdRE7MfIOTVrZMYI2Pd7ol6FIoEnYQR5x7aEEJZ
wnwtNwyCpblOy+ADsCxJh1n90YQODxtZmJoqW6e7fUjpkJc75WlrzlRc2h6mynW6
GNw9XAxp+t8rrZ72Z3b5vNq08mW6RNI0A6oIUyJE2r1PA5TDCLBBSeCy6zrODiam
L0878e9iiVYOXrJRU6etFG5xEvrDS4vdnbvdzPQWE18GIIABgviki5eG0bx1zijR
JKAVrnEvdLAu+tl4cWVimSdiM3bg/nVxXZBwJBBxB/2ZoqEvB8NNvfrYp6mrBLze
e616m9dEmabQ1X9qI1LdIUwFLA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:51 2023 by rpki-client on console-ams.rpki-client.org