Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/sPjFjK0gGRQ8L7j2VOTGC5oF3w8.roa
File:                     sPjFjK0gGRQ8L7j2VOTGC5oF3w8.roa (raw, json)
Hash identifier:          IIdAaTWSj3qnLwZfr/l1S1OuKtK55fOzl3FjwF7E4Kg=
Subject key identifier:   B0:F8:C5:8C:AD:20:19:14:3C:2F:B8:F6:54:E4:C6:0B:9A:05:DF:0F
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       0181D4A5409B00E4C89B2184BF795B3F857E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/sPjFjK0gGRQ8L7j2VOTGC5oF3w8.roa
Signing time:             Wed 06 Jul 2022 17:53:28 +0000
ROA not before:           Wed 06 Jul 2022 17:53:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199560
IP address blocks:        93.179.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d4:a5:40:9b:00:e4:c8:9b:21:84:bf:79:5b:3f:85:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jul  6 17:53:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0f8c58cad2019143c2fb8f654e4c60b9a05df0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:84:b7:c1:d4:b9:69:3f:68:d7:bd:2f:e4:
                    d3:09:3c:5d:b8:a6:d1:58:ff:f4:0b:f9:62:56:3b:
                    73:b9:5d:80:af:96:15:7e:73:21:df:1e:77:64:d1:
                    1c:80:8f:15:57:3e:ab:d6:9e:65:a2:ce:79:3d:88:
                    af:76:e6:95:69:5c:c5:21:d0:76:b1:e6:5c:63:e8:
                    87:52:69:bf:5b:3a:19:ec:3c:f7:5e:ea:09:38:7c:
                    d2:2a:03:18:db:ed:b3:09:d5:73:74:ad:f3:ab:89:
                    73:ca:95:02:a1:15:75:44:e0:23:b7:b3:d0:f4:21:
                    82:fe:37:b8:8b:7d:31:d3:53:4c:88:90:37:fd:0d:
                    b7:bf:5b:d7:b6:e6:2d:ae:e3:f6:36:0c:31:28:eb:
                    d9:b4:d8:ae:0b:b1:1d:50:4a:8b:c2:32:db:ca:56:
                    20:43:5c:05:77:15:0a:88:2c:3b:bd:23:9e:6a:8c:
                    3f:ce:e7:6f:4e:91:50:14:70:e9:4c:ea:92:83:c0:
                    f0:f1:8f:6b:68:58:1e:94:28:bf:3d:f5:3c:a7:06:
                    5d:80:ef:a4:d6:17:0e:de:fb:96:8c:a8:bb:34:fa:
                    ba:a4:5c:fe:64:8f:cc:41:93:9c:b5:62:c5:d1:94:
                    97:f0:6f:6a:52:ea:02:98:ae:8f:32:0b:ff:da:e3:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F8:C5:8C:AD:20:19:14:3C:2F:B8:F6:54:E4:C6:0B:9A:05:DF:0F
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/sPjFjK0gGRQ8L7j2VOTGC5oF3w8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:fb:c1:f6:ac:d7:c7:73:8a:d0:a6:87:4a:80:46:53:87:30:
         fb:dc:d7:6d:9a:ba:e8:4e:e4:7f:47:ed:c9:5d:d0:76:cc:34:
         7c:a3:56:c2:e8:aa:4d:b5:8e:6b:87:91:81:0d:cf:ec:d0:54:
         e2:8d:62:7d:0a:64:75:62:8b:f3:dc:f2:54:48:04:02:60:09:
         c8:33:f9:d5:c7:a7:c5:9e:3d:ce:60:04:f0:31:2a:96:f8:75:
         b6:55:01:4d:b9:35:aa:0c:da:fb:87:27:e5:3d:77:d0:c8:bf:
         0d:69:65:ac:09:f5:aa:51:a1:00:5f:9f:60:17:59:d2:57:49:
         8c:53:5a:f3:c0:7c:c0:fd:79:be:5a:e0:12:f4:d6:c2:0d:5f:
         aa:ed:d3:4b:fa:46:c7:25:ba:f5:5e:88:dd:aa:2c:e1:7e:a4:
         b8:8d:cc:f9:14:7a:92:5d:ab:c1:3b:e9:2d:eb:08:59:5a:74:
         02:97:3c:d6:00:33:d7:b3:02:0e:7e:d5:5f:8d:cf:f4:dd:58:
         16:e8:81:eb:f5:aa:7d:d2:cb:75:3b:4d:14:65:f7:3d:55:1e:
         06:da:32:4b:29:66:61:a5:f9:bf:09:b5:29:5e:b0:ee:7a:7f:
         3e:24:21:c4:65:5f:3b:b0:88:0c:1b:ad:c8:df:1c:23:e6:45:
         a8:0b:ca:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHUpUCbAOTImyGEv3lbP4V+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjIwNzA2MTc1MzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGY4YzU4Y2FkMjAxOTE0M2MyZmI4ZjY1NGU0YzYwYjlhMDVkZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3CEt8HUuWk/aNe9L+TTCTxduKbR
WP/0C/liVjtzuV2Ar5YVfnMh3x53ZNEcgI8VVz6r1p5los55PYivduaVaVzFIdB2
seZcY+iHUmm/WzoZ7Dz3XuoJOHzSKgMY2+2zCdVzdK3zq4lzypUCoRV1ROAjt7PQ
9CGC/je4i30x01NMiJA3/Q23v1vXtuYtruP2NgwxKOvZtNiuC7EdUEqLwjLbylYg
Q1wFdxUKiCw7vSOeaow/zudvTpFQFHDpTOqSg8Dw8Y9raFgelCi/PfU8pwZdgO+k
1hcO3vuWjKi7NPq6pFz+ZI/MQZOctWLF0ZSX8G9qUuoCmK6PMgv/2uNB0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD4xYytIBkUPC+49lTkxguaBd8PMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvc1BqRmpLMGdHUlE4TDdqMlZPVEdDNW9GM3c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbNCMA0G
CSqGSIb3DQEBCwUAA4IBAQCt+8H2rNfHc4rQpodKgEZThzD73NdtmrroTuR/R+3J
XdB2zDR8o1bC6KpNtY5rh5GBDc/s0FTijWJ9CmR1Yovz3PJUSAQCYAnIM/nVx6fF
nj3OYATwMSqW+HW2VQFNuTWqDNr7hyflPXfQyL8NaWWsCfWqUaEAX59gF1nSV0mM
U1rzwHzA/Xm+WuAS9NbCDV+q7dNL+kbHJbr1XojdqizhfqS4jcz5FHqSXavBO+kt
6whZWnQClzzWADPXswIOftVfjc/03VgW6IHr9ap90st1O00UZfc9VR4G2jJLKWZh
pfm/CbUpXrDuen8+JCHEZV87sIgMG63I3xwj5kWoC8ot
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-fra.rpki-client.org