Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q6I3tcmucWVbfVdQaPq9CTHbou8.roa
File:                     q6I3tcmucWVbfVdQaPq9CTHbou8.roa (raw, json)
Hash identifier:          ddUpV0JIYEo/TK+4+Wx7NQebJ008CkklxVkGlz7g4sk=
Subject key identifier:   AB:A2:37:B5:C9:AE:71:65:5B:7D:57:50:68:FA:BD:09:31:DB:A2:EF
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A8AE662
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q6I3tcmucWVbfVdQaPq9CTHbou8.roa
Signing time:             Sat 01 Jan 2022 04:52:09 +0000
ROA not before:           Sat 01 Jan 2022 04:52:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201724
IP address blocks:        81.15.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982181474 (0x3a8ae662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:52:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aba237b5c9ae71655b7d575068fabd0931dba2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:8f:2d:5b:59:19:d5:0b:2d:dc:e7:27:40:
                    a1:60:4d:04:4b:af:68:9e:56:59:7f:e1:8a:63:43:
                    41:1e:b1:74:d2:4b:eb:8c:5d:74:ac:f4:9e:90:49:
                    8a:ac:11:a8:18:b9:89:82:c9:e2:57:9d:05:a0:a6:
                    e0:fe:44:56:6d:35:82:ad:05:0d:6c:e2:cf:6f:37:
                    f4:94:95:9e:77:93:9b:51:e6:c3:de:d6:aa:66:56:
                    75:1d:87:e0:b8:8b:46:b3:b2:1b:75:a4:4b:d5:2d:
                    9e:8b:aa:aa:84:5c:af:fc:d2:c0:be:91:00:57:f2:
                    30:33:a4:b8:f5:05:2f:6d:33:5f:20:69:0d:72:9e:
                    c3:33:12:50:02:8c:33:59:8d:77:80:46:b8:17:6c:
                    a1:2f:c1:6e:67:18:76:26:7c:64:09:0a:e8:90:cb:
                    f0:da:9d:c3:99:3f:df:60:ae:a3:e6:c8:0d:b6:6f:
                    82:b5:87:ae:1a:31:dd:57:3e:8b:7d:08:eb:98:b2:
                    fa:07:a5:08:55:8f:cd:c4:03:9e:9c:69:3a:10:0f:
                    39:5a:18:be:b5:af:db:78:84:af:f4:57:7e:8c:87:
                    92:f6:c9:7b:d8:37:51:5a:ac:62:4c:aa:ff:eb:d2:
                    70:08:2b:9a:ef:23:70:cc:64:cf:b3:3b:9a:18:89:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A2:37:B5:C9:AE:71:65:5B:7D:57:50:68:FA:BD:09:31:DB:A2:EF
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q6I3tcmucWVbfVdQaPq9CTHbou8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:63:c7:99:50:25:02:15:4a:3e:92:ff:d4:12:00:d9:0c:
         6f:96:6e:01:95:3e:3a:70:f0:6a:90:2e:af:a4:eb:98:4c:6c:
         0a:f7:24:ee:ff:3d:d8:1f:67:f2:f5:f1:eb:a4:68:ee:8d:d0:
         26:cb:cc:5f:43:39:6d:34:52:9c:bc:8f:b1:68:e2:a3:8c:70:
         61:ad:73:81:59:b9:77:e8:c6:ee:16:04:d4:d2:34:d7:04:31:
         9f:ea:c6:17:67:9f:21:46:c0:e8:02:9d:d2:a4:ee:7b:ba:c2:
         4c:f9:8a:71:62:8f:b1:8c:bc:2b:63:49:65:f8:0a:5d:f6:9b:
         9c:67:90:f1:bb:5c:6b:0a:be:85:58:4b:cf:5d:1a:dc:79:41:
         43:30:e1:a9:c8:bb:31:d3:fe:be:f0:f3:c5:31:bf:97:28:dc:
         99:dc:c9:20:f1:32:46:ab:e3:9e:b9:43:1c:fb:7a:b0:80:60:
         21:dc:71:87:f2:8b:f7:e5:84:15:23:df:12:30:d9:61:64:f8:
         8d:ef:b1:9a:07:59:bd:d0:35:a8:a4:c5:fd:96:08:e0:f0:66:
         c5:87:ad:f5:6c:a9:8f:d2:bf:87:9a:a6:2e:1a:3d:7a:e8:1b:
         b7:fe:40:6c:c7:ab:d2:b0:ea:34:37:f9:ce:4a:e6:73:49:5c:
         0f:49:19:2a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOormYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTIwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWJhMjM3YjVjOWFl
NzE2NTViN2Q1NzUwNjhmYWJkMDkzMWRiYTJlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN01jy1bWRnVCy3c5ydAoWBNBEuvaJ5WWX/himNDQR6xdNJL
64xddKz0npBJiqwRqBi5iYLJ4ledBaCm4P5EVm01gq0FDWziz2839JSVnneTm1Hm
w97WqmZWdR2H4LiLRrOyG3WkS9UtnouqqoRcr/zSwL6RAFfyMDOkuPUFL20zXyBp
DXKewzMSUAKMM1mNd4BGuBdsoS/BbmcYdiZ8ZAkK6JDL8Nqdw5k/32Cuo+bIDbZv
grWHrhox3Vc+i30I65iy+gelCFWPzcQDnpxpOhAPOVoYvrWv23iEr/RXfoyHkvbJ
e9g3UVqsYkyq/+vScAgrmu8jcMxkz7M7mhiJRRECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSroje1ya5xZVt9V1Bo+r0JMdui7zAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L3E2STN0Y211Y1dWYmZWZFFhUHE5Q1RIYm91OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEPxDANBgkqhkiG9w0BAQsFAAOC
AQEAMKRjx5lQJQIVSj6S/9QSANkMb5ZuAZU+OnDwapAur6TrmExsCvck7v892B9n
8vXx66Ro7o3QJsvMX0M5bTRSnLyPsWjio4xwYa1zgVm5d+jG7hYE1NI01wQxn+rG
F2efIUbA6AKd0qTue7rCTPmKcWKPsYy8K2NJZfgKXfabnGeQ8btcawq+hVhLz10a
3HlBQzDhqci7MdP+vvDzxTG/lyjcmdzJIPEyRqvjnrlDHPt6sIBgIdxxh/KL9+WE
FSPfEjDZYWT4je+xmgdZvdA1qKTF/ZYI4PBmxYet9Wypj9K/h5qmLho9eugbt/5A
bMer0rDqNDf5zkrmc0lcD0kZKg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org