Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W1KYiXHMEWnxDq82LlAd7Rls1No.roa
File:                     W1KYiXHMEWnxDq82LlAd7Rls1No.roa (raw, json)
Hash identifier:          JvwpuvKJdXpphqpeG77LxSOb8rydI8L5qZeOqKbyp2U=
Subject key identifier:   5B:52:98:89:71:CC:11:69:F1:0E:AF:36:2E:50:1D:ED:19:6C:D4:DA
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       03E16F8C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W1KYiXHMEWnxDq82LlAd7Rls1No.roa
Signing time:             Sat 01 Jan 2022 13:04:09 +0000
ROA not before:           Sat 01 Jan 2022 13:04:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206077
IP address blocks:        185.226.192.0/23 maxlen: 24
                          217.26.188.0/24 maxlen: 24
                          217.26.188.0/22 maxlen: 22
                          217.26.188.0/23 maxlen: 23
                          217.26.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65105804 (0x3e16f8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 13:04:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b52988971cc1169f10eaf362e501ded196cd4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:f9:d4:97:a8:35:90:2a:d1:7c:36:87:a2:
                    60:bb:cf:07:80:96:9c:f6:42:1e:84:06:63:3d:9c:
                    9b:40:a3:16:50:70:9b:5c:dc:a5:ec:d3:1a:33:c4:
                    6c:ce:6b:74:ec:e2:30:fd:df:b6:71:18:c2:e7:9d:
                    d7:0e:bc:49:5b:65:10:0b:7f:ad:b9:c6:c2:bd:7a:
                    2a:46:54:da:cb:09:ef:a4:f4:13:c3:3b:69:3e:f9:
                    60:73:f4:5c:84:f9:83:d1:68:b0:dc:8c:9e:0e:2d:
                    b1:f8:6a:4b:18:5e:b8:6f:d6:25:79:22:74:b4:83:
                    4f:e5:bf:03:5a:08:92:e1:a5:f9:b7:3e:ae:e0:c3:
                    40:7c:9b:17:e6:10:52:0e:71:0e:95:d2:6d:19:48:
                    2b:e4:4e:bf:bf:ff:a7:b2:28:11:d3:1a:70:20:fc:
                    07:48:65:1a:b5:9f:59:26:3d:fd:e7:16:91:47:5d:
                    fe:b4:b0:10:f1:24:9a:c0:8c:47:6f:2b:c8:a3:14:
                    c8:ce:41:a3:83:54:d9:db:9e:00:6b:f2:eb:fa:26:
                    a6:a8:a8:f0:17:a2:d3:77:e4:3f:04:81:13:47:d7:
                    fd:93:c5:1f:36:98:7b:b8:6e:e3:ce:3d:ec:18:b7:
                    b0:89:52:6d:b7:6b:77:4e:c1:4d:0a:68:77:fc:dd:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:52:98:89:71:CC:11:69:F1:0E:AF:36:2E:50:1D:ED:19:6C:D4:DA
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W1KYiXHMEWnxDq82LlAd7Rls1No.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.192.0/23
                  217.26.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:3d:05:81:2d:08:ee:a9:5e:b3:a2:1f:4a:71:09:92:e2:fe:
         4f:61:a9:b8:42:9a:15:65:77:ea:54:6c:94:64:6b:3d:ca:a2:
         98:70:e9:e3:12:00:3c:2f:d5:02:70:ef:e7:7a:c2:e0:0e:e9:
         be:fe:15:d7:b8:71:89:52:05:bc:77:80:2d:7f:91:59:b5:9d:
         9c:12:7a:8f:c5:55:c5:50:2f:0e:6b:ca:ac:fa:44:fa:93:63:
         e4:6f:c7:30:ea:89:e3:dd:f2:f3:a1:3a:d1:10:34:ef:e5:6d:
         68:18:b0:58:10:7d:16:16:0b:bd:9f:53:02:6d:49:bb:52:02:
         95:57:57:95:60:1e:e8:c6:94:93:a8:28:65:74:01:f5:73:a1:
         fa:df:f2:81:06:a6:50:d7:8d:31:ce:30:8f:14:eb:30:36:57:
         70:0f:eb:5b:14:2e:e0:6c:6c:09:50:30:74:91:1b:6d:80:93:
         27:e5:f8:6e:59:d2:da:36:6d:d2:2c:de:85:7a:4c:aa:d6:ce:
         42:17:d7:7c:fd:5e:44:8c:b4:05:81:30:da:e4:01:40:da:5e:
         6c:97:27:e0:fc:6c:c3:45:4b:e9:20:66:7c:64:86:57:9e:de:
         0a:52:9a:20:0d:65:db:68:a3:a3:f2:83:3a:bf:91:5b:fe:7a:
         49:81:10:46
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA+FvjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDEw
MTEzMDQwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWI1Mjk4ODk3MWNj
MTE2OWYxMGVhZjM2MmU1MDFkZWQxOTZjZDRkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJoj+dSXqDWQKtF8NoeiYLvPB4CWnPZCHoQGYz2cm0CjFlBw
m1zcpezTGjPEbM5rdOziMP3ftnEYwued1w68SVtlEAt/rbnGwr16KkZU2ssJ76T0
E8M7aT75YHP0XIT5g9FosNyMng4tsfhqSxheuG/WJXkidLSDT+W/A1oIkuGl+bc+
ruDDQHybF+YQUg5xDpXSbRlIK+ROv7//p7IoEdMacCD8B0hlGrWfWSY9/ecWkUdd
/rSwEPEkmsCMR28ryKMUyM5Bo4NU2dueAGvy6/ompqio8Bei03fkPwSBE0fX/ZPF
HzaYe7hu48497Bi3sIlSbbdrd07BTQpod/zdWsMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRbUpiJccwRafEOrzYuUB3tGWzU2jAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L1cxS1lpWEhNRVdueERxODJMbEFkN1JsczFOby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbniwAMEAtkavDANBgkqhkiG9w0B
AQsFAAOCAQEAyj0FgS0I7qles6IfSnEJkuL+T2GpuEKaFWV36lRslGRrPcqimHDp
4xIAPC/VAnDv53rC4A7pvv4V17hxiVIFvHeALX+RWbWdnBJ6j8VVxVAvDmvKrPpE
+pNj5G/HMOqJ493y86E60RA07+VtaBiwWBB9FhYLvZ9TAm1Ju1IClVdXlWAe6MaU
k6goZXQB9XOh+t/ygQamUNeNMc4wjxTrMDZXcA/rWxQu4GxsCVAwdJEbbYCTJ+X4
blnS2jZt0izehXpMqtbOQhfXfP1eRIy0BYEw2uQBQNpebJcn4Pxsw0VL6SBmfGSG
V57eClKaIA1l22ijo/KDOr+RW/56SYEQRg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org