Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ElRTTlMVaiMOgiTKxVmkdufXGFo.roa
File:                     ElRTTlMVaiMOgiTKxVmkdufXGFo.roa (raw, json)
Hash identifier:          s7UjJj8LmmIX2frxttf7RUu4dKzJf8in2k3vnHg1Pws=
Subject key identifier:   12:54:53:4E:53:15:6A:23:0E:82:24:CA:C5:59:A4:76:E7:D7:18:5A
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       018319FDC0714F37BD3ADCBEA239D94B69A2
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ElRTTlMVaiMOgiTKxVmkdufXGFo.roa
Signing time:             Wed 07 Sep 2022 22:06:43 +0000
ROA not before:           Wed 07 Sep 2022 22:06:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        45.150.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:19:fd:c0:71:4f:37:bd:3a:dc:be:a2:39:d9:4b:69:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Sep  7 22:06:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1254534e53156a230e8224cac559a476e7d7185a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:ed:d3:fb:15:38:52:44:7b:9f:e9:f2:f7:
                    ad:4e:23:cf:6e:bf:77:cc:0e:26:16:a2:d7:ab:14:
                    a5:73:a2:3b:f7:0c:2d:f6:4f:46:21:b3:fc:7e:e4:
                    f5:f5:2c:57:72:48:54:05:9b:34:9d:d0:bb:59:38:
                    fa:da:cb:54:f1:59:71:26:e0:b8:59:97:fc:43:be:
                    ef:f6:6d:b9:48:c5:8f:55:2b:c8:33:46:7d:c8:91:
                    05:10:d8:55:9c:48:67:37:47:8c:a0:f4:08:07:dc:
                    95:3c:22:1f:dd:bd:22:bd:9d:7a:21:cc:08:9a:5e:
                    bd:a0:84:58:02:0b:f8:6c:73:8d:a2:c9:30:ff:51:
                    ea:d9:5d:44:d6:2b:75:58:39:a8:0a:e0:c1:d6:76:
                    1f:aa:b0:24:33:70:48:87:1f:fb:52:f0:a7:c3:39:
                    76:9b:c4:c4:93:fb:14:85:63:82:1d:8a:63:7e:2a:
                    4c:27:f8:28:b2:5d:e5:6d:99:9a:75:01:12:00:2a:
                    a5:69:66:61:60:7f:1b:45:fd:e8:96:df:47:a9:32:
                    e2:1f:5f:a2:04:ef:8b:df:af:d5:0f:85:aa:ba:44:
                    c9:8c:4c:87:49:17:87:26:7e:69:7c:c8:67:89:e1:
                    91:3e:f7:3b:2a:e9:99:63:2c:fe:f8:a6:31:40:70:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:53:4E:53:15:6A:23:0E:82:24:CA:C5:59:A4:76:E7:D7:18:5A
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ElRTTlMVaiMOgiTKxVmkdufXGFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:f3:04:b1:c8:d7:c5:69:36:68:77:80:a3:ec:d4:1f:bb:
         65:ea:13:de:21:f9:ba:00:dc:96:e4:6d:cd:e3:fa:93:95:6f:
         a2:27:56:c4:49:7b:56:4a:fe:f3:c6:5b:d4:69:2c:34:66:79:
         15:46:48:29:a0:51:0f:f7:85:2d:7d:7a:91:f0:4b:25:1c:4d:
         bc:96:a7:60:91:69:62:d8:0a:a4:30:cb:e2:0c:c0:28:1b:89:
         a5:7f:6d:65:25:3f:f3:09:34:d1:04:1a:9e:b8:25:ad:5e:bc:
         75:de:df:0b:1a:83:71:1a:36:86:9f:ac:cd:dc:92:be:20:fd:
         c5:d9:a4:84:64:d2:8f:fb:06:7a:62:9c:5c:15:11:0f:42:91:
         ff:00:f7:59:f6:5f:bf:be:f2:1b:b0:b1:91:e9:7e:f0:31:48:
         43:0d:16:7f:07:25:9a:55:d1:f3:3f:cf:12:26:4f:ef:32:0c:
         37:c3:88:49:49:db:87:cd:43:d5:e5:37:4c:b5:1f:2a:c6:c4:
         2c:e4:8c:25:67:f6:1a:95:c5:10:ff:f2:e7:10:c1:5b:f1:b8:
         fa:49:53:da:bc:93:f5:b4:8f:d1:73:aa:17:8a:53:00:83:34:
         9d:76:ab:16:4a:43:cc:49:ff:0c:f0:fa:c7:f0:63:e8:e3:8a:
         7b:b9:cf:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMZ/cBxTze9Oty+ojnZS2miMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjIwOTA3MjIwNjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU0NTM0ZTUzMTU2YTIzMGU4MjI0Y2FjNTU5YTQ3NmU3ZDcxODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndDt0/sVOFJEe5/p8vetTiPPbr93
zA4mFqLXqxSlc6I79wwt9k9GIbP8fuT19SxXckhUBZs0ndC7WTj62stU8VlxJuC4
WZf8Q77v9m25SMWPVSvIM0Z9yJEFENhVnEhnN0eMoPQIB9yVPCIf3b0ivZ16IcwI
ml69oIRYAgv4bHONoskw/1Hq2V1E1it1WDmoCuDB1nYfqrAkM3BIhx/7UvCnwzl2
m8TEk/sUhWOCHYpjfipMJ/gosl3lbZmadQESACqlaWZhYH8bRf3olt9HqTLiH1+i
BO+L36/VD4WqukTJjEyHSReHJn5pfMhnieGRPvc7KumZYyz++KYxQHAdhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJUU05TFWojDoIkysVZpHbn1xhaMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvRWxSVFRsTVZhaU1PZ2lUS3hWbWtkdWZYR0ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZbFMA0G
CSqGSIb3DQEBCwUAA4IBAQBnm/MEscjXxWk2aHeAo+zUH7tl6hPeIfm6ANyW5G3N
4/qTlW+iJ1bESXtWSv7zxlvUaSw0ZnkVRkgpoFEP94UtfXqR8EslHE28lqdgkWli
2AqkMMviDMAoG4mlf21lJT/zCTTRBBqeuCWtXrx13t8LGoNxGjaGn6zN3JK+IP3F
2aSEZNKP+wZ6YpxcFREPQpH/APdZ9l+/vvIbsLGR6X7wMUhDDRZ/ByWaVdHzP88S
Jk/vMgw3w4hJSduHzUPV5TdMtR8qxsQs5IwlZ/YalcUQ//LnEMFb8bj6SVPavJP1
tI/Rc6oXilMAgzSddqsWSkPMSf8M8PrH8GPo44p7uc9Z
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org