Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4urNCN0DMBvvI6IdJMFkA1J9LOM.roa
File:                     4urNCN0DMBvvI6IdJMFkA1J9LOM.roa (raw, json)
Hash identifier:          e4JmUmps++torBlmswIupqNdgaZnCyuUGhJysx4Qxwg=
Subject key identifier:   E2:EA:CD:08:DD:03:30:1B:EF:23:A2:1D:24:C1:64:03:52:7D:2C:E3
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       054EA547
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4urNCN0DMBvvI6IdJMFkA1J9LOM.roa
Signing time:             Fri 27 May 2022 11:46:13 +0000
ROA not before:           Fri 27 May 2022 11:46:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44428
IP address blocks:        201.49.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89040199 (0x54ea547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: May 27 11:46:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2eacd08dd03301bef23a21d24c16403527d2ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:d8:9b:ca:23:a4:18:6f:ad:a4:cd:6d:b9:
                    13:46:de:bb:16:29:aa:97:83:0f:5f:07:93:ad:ba:
                    c6:97:4f:18:e5:91:2b:1a:b5:a5:84:ae:5e:29:3a:
                    b3:7a:31:b4:58:d1:f1:b4:9d:4a:7c:32:65:61:2f:
                    ad:0d:32:8a:03:54:fe:34:b6:f9:bd:6c:19:5f:91:
                    75:c1:c2:92:20:66:28:ee:6e:f9:6d:7c:56:0e:ce:
                    da:99:45:cf:c0:f1:29:a5:1a:bc:09:67:5f:02:19:
                    7e:87:58:f7:bc:70:3e:00:f0:69:ca:0e:64:d6:f2:
                    67:d0:06:b4:92:c2:99:bf:77:6c:35:22:0a:44:54:
                    90:4d:1b:e8:0e:a9:38:d5:76:54:5d:3e:ac:22:b1:
                    52:aa:74:93:59:81:b0:78:44:5c:92:ad:95:f4:e2:
                    1e:f5:59:4d:6a:94:ab:67:b5:ed:c9:6e:77:18:73:
                    86:2c:b9:88:12:ee:11:be:96:32:77:c6:70:1f:26:
                    72:fb:cd:03:a4:66:4d:91:c0:a9:ba:5c:42:29:78:
                    b0:0e:db:65:1a:38:34:bb:8d:84:c2:ed:b0:a5:4b:
                    a3:7c:bf:09:d2:29:7a:04:28:39:a3:2e:15:82:f0:
                    57:f1:13:6d:ba:d5:24:64:74:3d:20:f1:9a:55:c7:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EA:CD:08:DD:03:30:1B:EF:23:A2:1D:24:C1:64:03:52:7D:2C:E3
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4urNCN0DMBvvI6IdJMFkA1J9LOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:77:54:f0:e7:2a:4e:f9:fc:81:25:f9:af:93:20:44:14:58:
         06:7d:51:60:ab:43:74:cd:2a:dd:a5:3d:89:17:03:45:ee:18:
         04:98:96:d3:7a:a7:ee:80:bd:3c:86:2d:1d:6a:08:28:4a:f9:
         3a:d2:33:07:df:23:53:66:94:8e:6d:19:6a:dc:dd:db:27:b3:
         a9:7b:73:7b:80:85:9d:97:81:74:97:8d:95:87:c0:fe:15:09:
         20:f7:00:a6:c3:23:4b:c5:70:02:e9:25:74:74:a7:36:8d:26:
         30:0b:de:84:cf:99:8c:b8:e1:69:1f:9c:94:c0:01:52:4d:7d:
         28:ba:e1:56:ae:b2:b0:0b:a1:4c:51:15:d1:dd:53:1d:d9:09:
         0a:40:7d:dc:59:81:49:7d:56:53:a1:74:4e:cf:4b:a4:11:5e:
         9f:8e:df:4c:e6:ea:91:06:1c:a1:a9:6f:a4:b4:b7:bf:f3:64:
         05:b1:c1:6b:20:46:25:98:7f:6b:28:00:e9:43:5f:2f:04:d6:
         9e:1c:fe:1d:a6:8b:54:90:c8:2a:6a:4a:c9:e8:d7:8b:32:9a:
         d5:b3:ac:16:fd:b3:34:cb:3b:d1:2e:82:b1:d0:8c:42:b4:77:
         a0:39:42:44:e4:91:a1:68:96:d0:95:aa:f3:c4:70:c9:06:ec:
         56:ca:7b:f0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBU6lRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDUy
NzExNDYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTJlYWNkMDhkZDAz
MzAxYmVmMjNhMjFkMjRjMTY0MDM1MjdkMmNlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVa2JvKI6QYb62kzW25E0beuxYpqpeDD18Hk626xpdPGOWR
Kxq1pYSuXik6s3oxtFjR8bSdSnwyZWEvrQ0yigNU/jS2+b1sGV+RdcHCkiBmKO5u
+W18Vg7O2plFz8DxKaUavAlnXwIZfodY97xwPgDwacoOZNbyZ9AGtJLCmb93bDUi
CkRUkE0b6A6pONV2VF0+rCKxUqp0k1mBsHhEXJKtlfTiHvVZTWqUq2e17cludxhz
hiy5iBLuEb6WMnfGcB8mcvvNA6RmTZHAqbpcQil4sA7bZRo4NLuNhMLtsKVLo3y/
CdIpegQoOaMuFYLwV/ETbbrVJGR0PSDxmlXHbqMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTi6s0I3QMwG+8joh0kwWQDUn0s4zAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
LzR1ck5DTjBETUJ2dkk2SWRKTUZrQTFKOUxPTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMkxvDANBgkqhkiG9w0BAQsFAAOC
AQEAvndU8OcqTvn8gSX5r5MgRBRYBn1RYKtDdM0q3aU9iRcDRe4YBJiW03qn7oC9
PIYtHWoIKEr5OtIzB98jU2aUjm0Zatzd2yezqXtze4CFnZeBdJeNlYfA/hUJIPcA
psMjS8VwAukldHSnNo0mMAvehM+ZjLjhaR+clMABUk19KLrhVq6ysAuhTFEV0d1T
HdkJCkB93FmBSX1WU6F0Ts9LpBFen47fTObqkQYcoalvpLS3v/NkBbHBayBGJZh/
aygA6UNfLwTWnhz+HaaLVJDIKmpKyejXizKa1bOsFv2zNMs70S6CsdCMQrR3oDlC
ROSRoWiW0JWq88RwyQbsVsp78A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org