Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa
File:                     N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa (raw, json)
Hash identifier:          Yz5cZoKOZYAQ0Mul+GbxqL63GG6JaEF6bc6BXwvEiRM=
Subject key identifier:   37:73:B1:A7:DA:EE:59:F0:3F:52:3E:D4:93:9C:C1:2A:2D:0F:CF:34
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A76C72A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa
Signing time:             Sat 01 Jan 2022 04:51:57 +0000
ROA not before:           Sat 01 Jan 2022 04:51:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50625
IP address blocks:        194.183.60.0/23 maxlen: 23
                          82.177.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980862762 (0x3a76c72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:51:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3773b1a7daee59f03f523ed4939cc12a2d0fcf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:a8:17:04:d9:5a:e9:9f:66:3e:46:07:58:
                    1d:2d:19:08:b0:47:f2:54:b5:9c:77:76:af:d1:d8:
                    54:87:e3:70:1c:1d:e3:29:ba:4f:9b:de:5a:e3:c1:
                    84:6e:af:13:4d:d1:38:e8:42:ac:c0:41:91:8f:bc:
                    7d:f6:eb:e5:ae:4e:38:6b:a6:1f:b3:82:46:fd:f3:
                    bc:fe:da:cd:3d:46:e2:3c:2f:a2:0c:cf:bf:1d:5d:
                    ff:fb:63:1d:47:cb:dd:65:47:c1:d3:b3:ea:5d:51:
                    bc:25:51:9d:50:51:10:c0:59:33:8b:41:9b:47:d9:
                    e0:46:e2:cd:48:bd:5f:1f:f5:3a:77:df:43:79:1e:
                    d2:8f:2d:a9:7b:82:36:8f:81:9d:49:e8:d4:76:32:
                    f7:78:93:be:c6:f0:3a:0a:d1:77:15:ee:85:f6:b1:
                    e3:e8:66:45:fb:fa:8b:a1:fb:10:9f:da:2c:21:c8:
                    17:14:68:29:81:b4:27:cd:29:31:17:01:02:94:9c:
                    3a:2d:00:4c:67:dd:ce:ef:99:81:37:42:1f:bc:95:
                    0e:c7:1b:40:5b:f5:f0:04:23:9b:3f:96:ec:d4:f7:
                    3c:ad:c4:4f:a1:a1:b5:83:af:f7:a9:f6:f7:16:89:
                    89:95:23:3c:ff:0e:9a:3d:41:3f:00:95:c5:d7:f6:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:73:B1:A7:DA:EE:59:F0:3F:52:3E:D4:93:9C:C1:2A:2D:0F:CF:34
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.204.0/24
                  194.183.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:6a:f7:18:84:b4:37:60:c8:e0:b8:f6:67:f6:1e:bd:63:87:
         05:a9:61:c3:3e:02:04:3b:04:98:fe:5a:82:ac:1e:e1:c6:43:
         6c:91:d3:a4:dc:e2:52:6a:72:34:3e:aa:08:77:79:c3:d5:c7:
         f7:4f:41:38:00:6c:32:1b:ff:3c:58:a5:35:07:ab:30:29:e6:
         11:b3:37:3f:bb:53:e0:d2:d4:f2:de:de:f9:5a:31:64:44:cc:
         9a:94:6a:0b:3c:dd:98:c0:5b:e2:14:8c:65:98:46:a4:6a:79:
         68:60:eb:7a:75:d6:3f:60:28:57:00:14:43:b6:4e:fc:3f:2e:
         a9:70:9a:51:ee:13:aa:00:12:a4:1e:4c:e9:8e:d3:1f:14:df:
         9b:44:e1:5e:53:78:c5:99:81:b6:0a:5f:48:d9:7f:54:a6:03:
         6f:a4:13:f5:d3:68:e1:07:2d:73:04:ee:87:4c:f0:17:86:a0:
         cf:ec:14:71:d3:dc:8c:54:7c:c3:19:53:e7:31:aa:6d:43:53:
         24:e7:e9:69:c8:77:b7:0d:32:dc:cf:e0:04:52:b5:31:3e:93:
         90:5b:13:97:22:90:8b:25:a9:d1:6f:c0:26:7f:16:69:23:c6:
         59:c4:d6:e6:38:d6:ae:9b:81:9e:5e:fa:81:08:36:24:71:ed:
         d4:92:af:01
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOnbHKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc3M2IxYTdkYWVl
NTlmMDNmNTIzZWQ0OTM5Y2MxMmEyZDBmY2YzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZwqBcE2Vrpn2Y+RgdYHS0ZCLBH8lS1nHd2r9HYVIfjcBwd
4ym6T5veWuPBhG6vE03ROOhCrMBBkY+8ffbr5a5OOGumH7OCRv3zvP7azT1G4jwv
ogzPvx1d//tjHUfL3WVHwdOz6l1RvCVRnVBREMBZM4tBm0fZ4EbizUi9Xx/1Onff
Q3ke0o8tqXuCNo+BnUno1HYy93iTvsbwOgrRdxXuhfax4+hmRfv6i6H7EJ/aLCHI
FxRoKYG0J80pMRcBApScOi0ATGfdzu+ZgTdCH7yVDscbQFv18AQjmz+W7NT3PK3E
T6GhtYOv96n29xaJiZUjPP8Omj1BPwCVxdf2kN0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ3c7Gn2u5Z8D9SPtSTnMEqLQ/PNDAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L04zT3hwOXJ1V2ZBX1VqN1VrNXpCS2kwUHp6US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFKxzAMEAcK3PDANBgkqhkiG9w0B
AQsFAAOCAQEArmr3GIS0N2DI4Lj2Z/YevWOHBalhwz4CBDsEmP5agqwe4cZDbJHT
pNziUmpyND6qCHd5w9XH909BOABsMhv/PFilNQerMCnmEbM3P7tT4NLU8t7e+Vox
ZETMmpRqCzzdmMBb4hSMZZhGpGp5aGDrenXWP2AoVwAUQ7ZO/D8uqXCaUe4TqgAS
pB5M6Y7THxTfm0ThXlN4xZmBtgpfSNl/VKYDb6QT9dNo4QctcwTuh0zwF4agz+wU
cdPcjFR8wxlT5zGqbUNTJOfpach3tw0y3M/gBFK1MT6TkFsTlyKQiyWp0W/AJn8W
aSPGWcTW5jjWrpuBnl76gQg2JHHt1JKvAQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org