Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/5xOzUKK0MqRKwtCLsDA8T295nFY.roa
File:                     5xOzUKK0MqRKwtCLsDA8T295nFY.roa (raw, json)
Hash identifier:          UiDYLN+CWMvFrz1Uma6SvKI6Po0rKyxffHDP8n5tK+E=
Subject key identifier:   E7:13:B3:50:A2:B4:32:A4:4A:C2:D0:8B:B0:30:3C:4F:6F:79:9C:56
Certificate issuer:       /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial:       018282D7E4D44B40FBE9C387F24B5168A257
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/5xOzUKK0MqRKwtCLsDA8T295nFY.roa
Signing time:             Tue 09 Aug 2022 13:42:42 +0000
ROA not before:           Tue 09 Aug 2022 13:42:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57246
IP address blocks:        185.26.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:82:d7:e4:d4:4b:40:fb:e9:c3:87:f2:4b:51:68:a2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
        Validity
            Not Before: Aug  9 13:42:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e713b350a2b432a44ac2d08bb0303c4f6f799c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:3c:6a:81:98:80:93:50:84:83:c5:b6:6d:
                    3e:04:31:d7:c8:c6:8b:d3:14:1b:26:57:4c:29:33:
                    39:90:90:1f:f3:e9:65:fd:fe:2b:e6:4f:52:af:dd:
                    be:d9:ce:09:97:69:f6:de:6d:18:f2:d0:f9:4b:9c:
                    ec:bd:12:39:4e:72:40:38:ca:c1:a3:64:58:13:93:
                    48:da:6a:a4:eb:76:b5:77:5f:2c:e1:87:00:38:fd:
                    c2:b0:2b:61:33:d4:fc:16:95:4d:84:d8:ba:43:81:
                    d0:00:a4:1b:f4:5d:a6:4a:bf:ad:6b:9e:e1:0f:31:
                    0f:0f:44:ec:e9:53:12:e1:c5:2c:e0:36:5e:e7:a2:
                    17:2c:41:e0:fe:27:17:c5:2e:d3:4f:cf:44:e3:85:
                    0d:d6:61:97:47:b6:2b:5f:34:07:4b:16:a7:d7:9c:
                    58:0d:9f:84:0d:f1:04:ec:1d:6f:3e:d9:65:f7:1f:
                    cf:8c:09:36:97:10:3e:4d:0c:65:11:84:f8:90:24:
                    4b:98:f8:d8:5f:3c:f5:f8:7e:bc:3b:51:99:43:c4:
                    d0:90:e6:93:c8:a7:61:07:68:df:9a:0a:a5:4e:b6:
                    77:fc:03:62:00:6d:20:e6:6b:08:bd:f8:4f:dd:10:
                    55:43:30:4e:99:a9:ce:62:a0:47:31:b4:23:02:4f:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:B3:50:A2:B4:32:A4:4A:C2:D0:8B:B0:30:3C:4F:6F:79:9C:56
            X509v3 Authority Key Identifier:
                keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/5xOzUKK0MqRKwtCLsDA8T295nFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:51:0b:40:1f:7c:22:38:57:50:0e:0e:bd:ac:9c:5b:9d:
         c8:3b:ee:a9:33:d6:89:82:5c:23:98:c8:47:e4:c9:fd:37:b5:
         f8:52:20:7a:c5:2d:12:55:24:65:59:f0:07:6e:e9:b8:7e:7d:
         b9:ff:03:33:99:7a:54:fe:53:e3:b5:65:47:80:b7:75:63:02:
         28:6d:7e:0f:d7:08:2e:c9:be:52:d1:71:70:9f:18:ef:ab:61:
         83:41:38:db:88:0b:46:38:ea:bc:91:d6:b0:dc:67:bb:58:a6:
         45:6c:9e:6c:f4:23:e9:11:c0:af:00:04:27:57:fa:87:2c:38:
         5c:91:f7:a6:b3:5a:2b:df:7c:95:f2:2a:c8:a6:65:a6:89:6c:
         01:40:0e:54:ed:41:0b:b0:8b:23:23:67:05:1d:18:c7:0d:4b:
         02:a7:f1:ff:1f:af:ea:26:61:e4:7f:db:85:6d:37:4a:f5:cd:
         30:ae:28:7c:bb:05:01:ed:cf:dd:04:ae:ce:df:0e:0f:c3:f8:
         fd:78:74:83:17:6f:e4:16:10:37:94:82:8f:2e:9b:34:f9:5b:
         b6:1e:37:87:70:9c:75:c7:87:89:a6:09:25:0c:51:f1:d7:bb:
         cd:f0:80:ea:4f:95:41:f2:6d:76:dc:a3:1d:96:04:68:dc:a3:
         04:63:a2:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKC1+TUS0D76cOH8ktRaKJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDk4M2QzYTRhMWMyNmFhMjk1MDM0ODY5YzU4NGY3NTcz
ODBiMmIwHhcNMjIwODA5MTM0MjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzEzYjM1MGEyYjQzMmE0NGFjMmQwOGJiMDMwM2M0ZjZmNzk5YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+s8aoGYgJNQhIPFtm0+BDHXyMaL
0xQbJldMKTM5kJAf8+ll/f4r5k9Sr92+2c4Jl2n23m0Y8tD5S5zsvRI5TnJAOMrB
o2RYE5NI2mqk63a1d18s4YcAOP3CsCthM9T8FpVNhNi6Q4HQAKQb9F2mSr+ta57h
DzEPD0Ts6VMS4cUs4DZe56IXLEHg/icXxS7TT89E44UN1mGXR7YrXzQHSxan15xY
DZ+EDfEE7B1vPtll9x/PjAk2lxA+TQxlEYT4kCRLmPjYXzz1+H68O1GZQ8TQkOaT
yKdhB2jfmgqlTrZ3/ANiAG0g5msIvfhP3RBVQzBOmanOYqBHMbQjAk8L0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOcTs1CitDKkSsLQi7AwPE9veZxWMB8GA1UdIwQY
MBaAFAZJg9OkocJqopUDSGnFhPdXOAsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEt
NGJhM2ZjMzQ4NGNlLzEvNXhPelVLSzBNcVJLd3RDTHNEQThUMjk1bkZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEtNGJhM2ZjMzQ4NGNl
LzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRpJMA0G
CSqGSIb3DQEBCwUAA4IBAQAwq1ELQB98IjhXUA4OvaycW53IO+6pM9aJglwjmMhH
5Mn9N7X4UiB6xS0SVSRlWfAHbum4fn25/wMzmXpU/lPjtWVHgLd1YwIobX4P1wgu
yb5S0XFwnxjvq2GDQTjbiAtGOOq8kdaw3Ge7WKZFbJ5s9CPpEcCvAAQnV/qHLDhc
kfems1or33yV8irIpmWmiWwBQA5U7UELsIsjI2cFHRjHDUsCp/H/H6/qJmHkf9uF
bTdK9c0wrih8uwUB7c/dBK7O3w4Pw/j9eHSDF2/kFhA3lIKPLps0+Vu2HjeHcJx1
x4eJpgklDFHx17vN8IDqT5VB8m123KMdlgRo3KMEY6L4
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:10 2023 by rpki-client on console-ams.rpki-client.org