Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/ozA_k0yDjgXff2LB0-4spKL91lY.roa
File:                     ozA_k0yDjgXff2LB0-4spKL91lY.roa (raw, json)
Hash identifier:          CcXfgAGimjSuyKVq9DIpr5+pwUHawg4ODWUOHnY+pTU=
Subject key identifier:   A3:30:3F:93:4C:83:8E:05:DF:7F:62:C1:D3:EE:2C:A4:A2:FD:D6:56
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       07D3D09E
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/ozA_k0yDjgXff2LB0-4spKL91lY.roa
Signing time:             Tue 10 May 2022 05:08:31 +0000
ROA not before:           Tue 10 May 2022 05:08:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136907
IP address blocks:        193.105.244.0/23 maxlen: 23
                          193.84.248.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131322014 (0x7d3d09e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: May 10 05:08:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a3303f934c838e05df7f62c1d3ee2ca4a2fdd656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:39:bc:55:5b:cc:5c:2e:72:95:77:fb:a8:
                    ee:4d:03:02:dd:6e:d3:cd:b8:3d:46:07:6c:c3:3a:
                    0b:88:47:cf:f9:0e:e0:a6:c0:d7:72:e6:f5:32:9a:
                    79:9e:a1:79:4f:5c:16:6d:77:e2:3e:de:83:75:61:
                    8e:31:71:67:8b:ad:5c:97:1d:71:f8:95:91:eb:7f:
                    97:9f:74:5f:86:09:af:86:d6:e8:29:4f:cb:f1:a3:
                    86:8a:3b:f0:4e:a5:01:a4:84:0d:35:ed:08:b8:e6:
                    3c:5a:b4:96:5b:37:7e:1f:8b:5d:2a:af:15:21:6b:
                    a0:a0:ac:cf:b8:af:5a:b3:c2:10:a3:0a:47:d4:b3:
                    cd:47:2b:3c:e4:2c:03:84:f7:1a:f2:3c:2d:83:87:
                    d9:4f:4a:c3:ce:b6:bf:fa:3e:a3:77:1a:cf:a5:e0:
                    42:f1:05:d3:19:87:89:0d:4b:9e:1b:73:5d:78:11:
                    2a:2b:17:84:64:3b:fb:1b:be:8c:85:60:57:26:69:
                    de:b7:be:59:b4:01:49:f1:1e:22:5b:9d:07:14:56:
                    e0:44:14:9f:6d:85:fd:7c:3a:fb:84:2e:e0:a8:52:
                    80:2d:19:c7:f2:d3:7b:d2:00:14:85:92:da:31:b3:
                    f1:46:dd:62:fb:d0:08:ef:a7:3f:df:d9:ce:b2:87:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:30:3F:93:4C:83:8E:05:DF:7F:62:C1:D3:EE:2C:A4:A2:FD:D6:56
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/ozA_k0yDjgXff2LB0-4spKL91lY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.248.0/23
                  193.105.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:de:cf:c4:16:4a:d6:7b:25:53:5a:0a:25:8a:ce:07:57:31:
         e1:48:5e:c1:7a:00:96:91:91:d6:33:cf:df:50:1e:76:09:71:
         03:85:a1:16:f0:94:5a:98:9c:d5:3a:cf:a5:7a:fe:60:b3:72:
         cf:c5:3b:45:96:8d:b0:56:0a:69:e6:c9:d4:14:c4:45:e9:2d:
         d2:58:e7:0e:0b:d3:bc:a5:c9:ca:d8:7a:21:e2:56:fa:87:79:
         41:f9:9e:12:2e:f2:83:9d:9e:67:a9:48:4a:d5:4d:61:2c:c6:
         01:f3:94:c9:ce:62:f4:4d:05:a0:42:c5:e7:2c:65:1f:c0:f7:
         52:76:73:13:ae:07:ee:59:0d:31:26:24:0f:d6:d0:62:9b:03:
         47:1c:7b:74:c4:f7:ff:8b:bc:a1:1b:23:b9:6e:7c:90:1d:1a:
         fe:ef:69:99:68:e3:5a:fd:c8:77:ea:de:aa:00:ac:a3:f6:96:
         a2:42:c6:b6:7b:af:e9:0e:77:c1:db:38:8a:0b:39:22:19:04:
         3d:39:14:42:5a:6a:4d:c4:b4:22:31:64:98:84:2c:29:f2:1b:
         f2:00:79:88:34:1c:51:7e:9e:15:28:d8:2a:9c:2d:ca:f3:23:
         6b:6b:dc:ff:00:55:c6:94:2c:3c:22:3e:00:4c:2b:e8:70:75:
         57:54:48:9e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB9PQnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjhmZGUyYmZjNjNlZmUzZDEzMmRkYWM3ODM3ZTE1YzdmNGI0OWY0MB4XDTIyMDUx
MDA1MDgzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTMzMDNmOTM0Yzgz
OGUwNWRmN2Y2MmMxZDNlZTJjYTRhMmZkZDY1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhvObxVW8xcLnKVd/uo7k0DAt1u0824PUYHbMM6C4hHz/kO
4KbA13Lm9TKaeZ6heU9cFm134j7eg3VhjjFxZ4utXJcdcfiVket/l590X4YJr4bW
6ClPy/Gjhoo78E6lAaSEDTXtCLjmPFq0lls3fh+LXSqvFSFroKCsz7ivWrPCEKMK
R9SzzUcrPOQsA4T3GvI8LYOH2U9Kw862v/o+o3caz6XgQvEF0xmHiQ1LnhtzXXgR
KisXhGQ7+xu+jIVgVyZp3re+WbQBSfEeIludBxRW4EQUn22F/Xw6+4Qu4KhSgC0Z
x/LTe9IAFIWS2jGz8UbdYvvQCO+nP9/ZzrKHymsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSjMD+TTIOOBd9/YsHT7iykov3WVjAfBgNVHSMEGDAWgBQSj94r/GPv49Ey
3ax4N+Fcf0tJ9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VvX2VLX3hqNy1QUk10MnNlRGZoWEg5TFNmUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTMvYTlmODFlLTc5YjItNGMyZS05ZjNlLTdjMjRlZjAyNTlkYi8x
L296QV9rMHlEamdYZmYyTEIwLTRzcEtMOTFsWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMv
YTlmODFlLTc5YjItNGMyZS05ZjNlLTdjMjRlZjAyNTlkYi8xL0VvX2VLX3hqNy1Q
Uk10MnNlRGZoWEg5TFNmUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcFU+AMEAcFp9DANBgkqhkiG9w0B
AQsFAAOCAQEAhd7PxBZK1nslU1oKJYrOB1cx4UhewXoAlpGR1jPP31AedglxA4Wh
FvCUWpic1TrPpXr+YLNyz8U7RZaNsFYKaebJ1BTERekt0ljnDgvTvKXJyth6IeJW
+od5QfmeEi7yg52eZ6lIStVNYSzGAfOUyc5i9E0FoELF5yxlH8D3UnZzE64H7lkN
MSYkD9bQYpsDRxx7dMT3/4u8oRsjuW58kB0a/u9pmWjjWv3Id+reqgCso/aWokLG
tnuv6Q53wds4igs5IhkEPTkUQlpqTcS0IjFkmIQsKfIb8gB5iDQcUX6eFSjYKpwt
yvMja2vc/wBVxpQsPCI+AEwr6HB1V1RIng==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:11 2023 by rpki-client on console-ams.rpki-client.org