Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/MW_qat-EdT3yXutuuQmzjXyyRRE.roa
File:                     MW_qat-EdT3yXutuuQmzjXyyRRE.roa (raw, json)
Hash identifier:          yC2eiNcIXBEXJOXc/Y9eeH2GcWYGD/5Fy3hkzET+L6U=
Subject key identifier:   31:6F:EA:6A:DF:84:75:3D:F2:5E:EB:6E:B9:09:B3:8D:7C:B2:45:11
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       064335DB
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/MW_qat-EdT3yXutuuQmzjXyyRRE.roa
Signing time:             Sat 01 Jan 2022 11:01:06 +0000
ROA not before:           Sat 01 Jan 2022 11:01:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     4805
IP address blocks:        57.70.0.0/16 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105067995 (0x64335db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Jan  1 11:01:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=316fea6adf84753df25eeb6eb909b38d7cb24511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:26:30:cc:3d:7d:48:da:cc:ad:e5:bb:87:
                    82:7e:86:63:fc:bf:9e:c2:02:89:e1:d0:6c:f4:e6:
                    08:66:d0:e6:84:83:bc:c8:4c:d7:52:39:83:0f:e2:
                    55:18:5c:8f:2f:6f:93:ce:b5:1b:fb:7c:f1:07:59:
                    97:cb:33:a9:04:3f:9c:15:c2:24:61:75:87:62:1f:
                    a1:0d:d9:e2:cf:02:6d:26:b3:bb:e3:fb:6e:5e:df:
                    60:13:b9:fe:03:4f:2e:6e:ef:45:32:ac:b6:e8:a6:
                    65:87:1d:e6:e4:2f:6d:90:cd:59:c2:fc:97:a8:c3:
                    a9:88:d6:ef:56:c2:c5:cc:36:88:15:fb:75:0d:ab:
                    12:b2:d0:74:f9:73:d8:29:b8:5e:3f:19:c5:67:4a:
                    9c:13:6c:f0:a8:80:ca:a9:53:55:65:5d:ae:20:d3:
                    32:e1:dd:b3:f6:dd:8d:98:43:30:59:37:dd:86:f2:
                    fa:80:1f:f1:ce:fc:f9:ac:d0:39:2d:f4:39:bb:d0:
                    db:1c:a1:1d:18:b8:0c:62:3b:24:b2:3d:0a:c8:15:
                    43:d3:e4:9a:bd:21:45:03:e5:e0:be:0f:0a:e2:00:
                    8c:21:ab:91:c6:6a:da:69:b5:c2:9a:86:98:59:b6:
                    c5:ce:75:bc:bc:fe:ac:f2:42:61:f0:1f:19:bd:b8:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6F:EA:6A:DF:84:75:3D:F2:5E:EB:6E:B9:09:B3:8D:7C:B2:45:11
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/MW_qat-EdT3yXutuuQmzjXyyRRE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:55:17:ea:86:4c:14:87:de:5b:2a:a1:01:0b:0e:fa:5f:c3:
         0e:d3:4e:a0:3f:34:3e:91:eb:cb:69:0d:db:ac:d1:be:38:47:
         a3:d0:f3:5f:46:e0:99:63:4f:c6:f0:54:6e:f4:34:37:c9:d8:
         1b:66:ff:d9:ce:44:03:73:fe:18:fa:1c:71:7e:25:15:c2:01:
         25:a7:58:0f:72:7d:76:e3:e8:98:9e:b3:36:66:b4:2a:ff:8a:
         5e:f4:67:e8:36:71:27:96:ba:f6:fd:a2:c0:78:66:74:9f:d4:
         ca:45:ed:b5:d9:3a:fd:85:69:ea:86:8e:43:d2:e1:0d:f3:36:
         7d:06:8c:b7:86:eb:a8:4d:3d:98:35:6a:00:8e:fa:c8:45:47:
         7e:1b:56:e4:5a:5d:2e:0f:7a:46:d2:b7:81:f5:7e:88:c6:fb:
         a3:bc:2f:26:95:e2:25:cd:c3:af:b8:34:71:2c:b7:02:4e:5d:
         0c:f7:e4:06:49:6d:0c:d5:0c:34:6e:d8:e2:f8:04:f5:c3:b6:
         c6:ca:d0:54:7f:5b:fe:1e:89:b8:44:15:e3:cc:f1:c4:b5:06:
         05:ef:0f:34:79:a1:0b:ce:a3:40:4b:6d:44:9b:0a:d4:fe:39:
         a8:3d:40:04:4f:88:ca:2b:0f:7d:ec:b8:63:d1:e1:1b:d0:3b:
         2d:18:d9:3a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIEBkM12zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZGI4M2NmZTU0ODk4MzVmMjk0ZDBhZjRkZDRkYjZlM2RjMjVmMWYzMB4XDTIyMDEw
MTExMDEwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzE2ZmVhNmFkZjg0
NzUzZGYyNWVlYjZlYjkwOWIzOGQ3Y2IyNDUxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCrJjDMPX1I2syt5buHgn6GY/y/nsICieHQbPTmCGbQ5oSD
vMhM11I5gw/iVRhcjy9vk861G/t88QdZl8szqQQ/nBXCJGF1h2IfoQ3Z4s8CbSaz
u+P7bl7fYBO5/gNPLm7vRTKstuimZYcd5uQvbZDNWcL8l6jDqYjW71bCxcw2iBX7
dQ2rErLQdPlz2Cm4Xj8ZxWdKnBNs8KiAyqlTVWVdriDTMuHds/bdjZhDMFk33Yby
+oAf8c78+azQOS30ObvQ2xyhHRi4DGI7JLI9CsgVQ9Pkmr0hRQPl4L4PCuIAjCGr
kcZq2mm1wpqGmFm2xc51vLz+rPJCYfAfGb24Go0CAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBQxb+pq34R1PfJe6265CbONfLJFETAfBgNVHSMEGDAWgBTNuDz+VImDXylN
CvTdTbbj3CXx8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3piZzhfbFNKZzE4cFRRcjAzVTIyNDl3bDhmTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvNzM5NzE2LTlhZjItNDdmNS1hNmYxLWEzYjc0Zjk2NDFhYy8x
L01XX3FhdC1FZFQzeVh1dHV1UW16alh5eVJSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
NzM5NzE2LTlhZjItNDdmNS1hNmYxLWEzYjc0Zjk2NDFhYy8xL3piZzhfbFNKZzE4
cFRRcjAzVTIyNDl3bDhmTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlGMA0GCSqGSIb3DQEBCwUAA4IB
AQBZVRfqhkwUh95bKqEBCw76X8MO006gPzQ+kevLaQ3brNG+OEej0PNfRuCZY0/G
8FRu9DQ3ydgbZv/ZzkQDc/4Y+hxxfiUVwgElp1gPcn124+iYnrM2ZrQq/4pe9Gfo
NnEnlrr2/aLAeGZ0n9TKRe212Tr9hWnqho5D0uEN8zZ9Boy3huuoTT2YNWoAjvrI
RUd+G1bkWl0uD3pG0reB9X6IxvujvC8mleIlzcOvuDRxLLcCTl0M9+QGSW0M1Qw0
btji+AT1w7bGytBUf1v+Hom4RBXjzPHEtQYF7w80eaELzqNAS21EmwrU/jmoPUAE
T4jKKw997Lhj0eEb0DstGNk6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org