Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/7anR1vQUQf2iPtBiQoJu4Cvittw.roa
File:                     7anR1vQUQf2iPtBiQoJu4Cvittw.roa (raw, json)
Hash identifier:          S1WWgBJx1BZKfZFxa1Cm4U0uVPLp9SIQWaK041Fe6Kw=
Subject key identifier:   ED:A9:D1:D6:F4:14:41:FD:A2:3E:D0:62:42:82:6E:E0:2B:E2:B6:DC
Certificate issuer:       /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial:       01CEC274
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/7anR1vQUQf2iPtBiQoJu4Cvittw.roa
Signing time:             Sat 01 Jan 2022 04:01:11 +0000
ROA not before:           Sat 01 Jan 2022 04:01:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13097
IP address blocks:        62.100.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30327412 (0x1cec274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
        Validity
            Not Before: Jan  1 04:01:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eda9d1d6f41441fda23ed06242826ee02be2b6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:03:50:be:01:81:35:ca:9a:3e:fb:0f:bd:
                    22:9d:41:e7:a0:e1:80:fb:90:04:33:bc:a8:f1:3e:
                    89:1e:74:46:ed:93:ec:49:d8:40:25:de:5e:3d:a4:
                    68:ad:b0:61:18:d7:58:bd:0d:21:69:57:f9:81:f6:
                    f6:cb:80:a7:e6:ed:17:69:35:84:21:d8:9f:c2:14:
                    de:46:a6:2d:9f:c0:65:c3:09:2c:ec:49:be:9f:fd:
                    38:77:ac:79:a6:6a:a0:2f:f2:9c:6b:1d:14:36:8b:
                    8b:0c:04:ea:90:1c:b5:4d:b3:3b:db:23:cb:c8:28:
                    4f:48:a1:4d:db:91:57:92:5a:b6:3c:5d:50:0c:92:
                    43:03:04:65:4c:2e:fc:a3:62:d5:07:e8:fb:eb:80:
                    ba:87:e1:a6:ea:a8:d2:f5:cc:5f:b0:23:0f:0b:58:
                    9d:c0:99:d0:77:d7:f8:2c:bd:1c:0f:58:96:a8:34:
                    37:1a:e0:82:c8:47:70:a1:10:92:79:45:f6:51:28:
                    de:eb:54:4a:05:99:97:24:e0:e4:b7:62:67:1e:53:
                    c9:da:98:99:9d:94:aa:ca:44:d3:42:57:83:9d:3d:
                    47:da:4f:b8:2e:88:ed:30:dc:3b:db:d9:5e:7a:65:
                    f7:80:64:72:c8:ba:81:ab:86:aa:c6:af:18:ec:47:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A9:D1:D6:F4:14:41:FD:A2:3E:D0:62:42:82:6E:E0:2B:E2:B6:DC
            X509v3 Authority Key Identifier:
                keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/7anR1vQUQf2iPtBiQoJu4Cvittw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.100.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a8:32:bb:42:27:1b:ee:f5:03:5a:2a:33:2b:69:ea:65:36:
         79:50:5c:81:56:67:cc:86:c7:a6:74:1b:22:1c:39:e8:a9:26:
         7b:a9:27:7f:6c:7e:ed:e0:11:61:fd:cd:0c:dc:41:f5:34:b6:
         96:d2:3a:6b:6b:1c:77:a9:14:ae:fb:13:da:d5:63:9e:b4:95:
         59:ee:f7:ba:ca:3c:99:e8:b3:cb:e9:a8:2c:be:9a:26:bb:e3:
         de:cf:60:64:a2:ed:5e:6b:a2:e9:aa:51:27:5c:8d:a4:d8:29:
         f5:4d:e5:48:a2:4c:5f:41:a7:5c:b2:1a:a8:b9:94:78:a6:15:
         e3:ae:82:d5:6f:77:cc:84:99:58:a9:61:6b:48:be:e1:b2:09:
         00:aa:1c:cb:2b:45:be:3b:e7:b4:c7:88:c7:e5:d8:1a:98:8f:
         de:2a:35:c6:bb:b5:4b:c1:d6:8f:1f:ec:52:41:2e:0f:69:ec:
         5f:28:d0:1e:99:9f:29:17:1a:6e:21:f6:10:98:d0:a1:66:02:
         a2:1a:cf:e1:db:56:58:ba:c3:19:29:16:0b:b3:8d:16:09:44:
         f7:78:bd:d4:67:b8:fb:16:27:9a:53:b4:6c:b0:8f:cf:b0:15:
         1b:92:e4:75:65:a7:fd:a3:a6:b2:6e:21:fb:54:99:5d:36:2e:
         58:d5:1d:3d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAc7CdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZmM0OTI3YWIxOTRhZTEyMzdmZGUyZDNiZWY2OTAzODg5M2YwZGM1MB4XDTIyMDEw
MTA0MDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRhOWQxZDZmNDE0
NDFmZGEyM2VkMDYyNDI4MjZlZTAyYmUyYjZkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOAaA1C+AYE1ypo++w+9Ip1B56DhgPuQBDO8qPE+iR50Ru2T
7EnYQCXeXj2kaK2wYRjXWL0NIWlX+YH29suAp+btF2k1hCHYn8IU3kamLZ/AZcMJ
LOxJvp/9OHeseaZqoC/ynGsdFDaLiwwE6pActU2zO9sjy8goT0ihTduRV5Jatjxd
UAySQwMEZUwu/KNi1Qfo++uAuofhpuqo0vXMX7AjDwtYncCZ0HfX+Cy9HA9Ylqg0
NxrggshHcKEQknlF9lEo3utUSgWZlyTg5LdiZx5TydqYmZ2UqspE00JXg509R9pP
uC6I7TDcO9vZXnpl94Bkcsi6gauGqsavGOxHKZECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTtqdHW9BRB/aI+0GJCgm7gK+K23DAfBgNVHSMEGDAWgBQfxJJ6sZSuEjf9
4tO+9pA4iT8NxTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0g4U1NlckdVcmhJM19lTFR2dmFRT0lrX0RjVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvOTQzZDVkLTU2MGMtNDMxNC1hZjgyLThiOGEwMWJkNzQxNC8x
LzdhblIxdlFVUWYyaVB0QmlRb0p1NEN2aXR0dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
OTQzZDVkLTU2MGMtNDMxNC1hZjgyLThiOGEwMWJkNzQxNC8xL0g4U1NlckdVcmhJ
M19lTFR2dmFRT0lrX0RjVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5kUjANBgkqhkiG9w0BAQsFAAOC
AQEAJagyu0InG+71A1oqMytp6mU2eVBcgVZnzIbHpnQbIhw56Kkme6knf2x+7eAR
Yf3NDNxB9TS2ltI6a2scd6kUrvsT2tVjnrSVWe73uso8meizy+moLL6aJrvj3s9g
ZKLtXmui6apRJ1yNpNgp9U3lSKJMX0GnXLIaqLmUeKYV466C1W93zISZWKlha0i+
4bIJAKocyytFvjvntMeIx+XYGpiP3io1xru1S8HWjx/sUkEuD2nsXyjQHpmfKRca
biH2EJjQoWYCohrP4dtWWLrDGSkWC7ONFglE93i91Ge4+xYnmlO0bLCPz7AVG5Lk
dWWn/aOmsm4h+1SZXTYuWNUdPQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:46 2023 by rpki-client on console-fra.rpki-client.org