Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/J1uOyv-CmuQJwh5czWPH18uq3Vw.roa
File:                     J1uOyv-CmuQJwh5czWPH18uq3Vw.roa (raw, json)
Hash identifier:          n5h5oU5H0bN4dAESFJcAzg/Z0GvT57aLDRvjUW53w2o=
Subject key identifier:   27:5B:8E:CA:FF:82:9A:E4:09:C2:1E:5C:CD:63:C7:D7:CB:AA:DD:5C
Certificate issuer:       /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial:       87C942
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/J1uOyv-CmuQJwh5czWPH18uq3Vw.roa
Signing time:             Tue 22 Mar 2022 12:04:12 +0000
ROA not before:           Tue 22 Mar 2022 12:04:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30781
IP address blocks:        185.65.141.0/24 maxlen: 24
                          91.213.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8898882 (0x87c942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
        Validity
            Not Before: Mar 22 12:04:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=275b8ecaff829ae409c21e5ccd63c7d7cbaadd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:2c:69:8c:95:e7:3c:63:26:b5:56:0d:aa:
                    c7:27:1f:b1:83:f7:19:53:d7:50:38:ff:35:c1:8c:
                    51:9e:58:a1:d0:95:f1:a0:16:88:cb:bd:ed:91:c0:
                    8c:ae:99:02:5b:f3:d9:78:27:9f:52:de:52:08:50:
                    5b:cc:55:b6:c5:41:19:2b:70:07:22:34:db:4a:1c:
                    c0:f0:12:5d:a8:fc:b6:63:ce:94:eb:6c:06:44:13:
                    47:11:c0:fd:00:9a:ba:26:4f:fd:6f:42:48:0f:6c:
                    35:e4:bc:ed:c1:23:ef:98:4c:83:e4:90:15:88:d5:
                    0e:cc:13:91:f5:0a:d8:90:dd:98:c4:74:f3:fe:a4:
                    9d:2d:05:6e:f0:a2:82:43:59:8d:78:4a:cb:0e:64:
                    d6:94:61:f2:f2:3d:f1:3a:61:8b:8c:7a:d2:ca:8b:
                    45:4e:b7:f1:5e:1b:0b:bd:f1:f0:b8:22:f9:30:a0:
                    93:86:09:56:20:6e:4c:aa:46:43:82:c7:64:c6:ac:
                    e3:b2:0c:d0:8a:0f:7b:e6:1b:26:ce:c4:cd:45:c2:
                    7c:bc:00:6c:43:40:10:fa:cd:32:61:ce:cc:b2:55:
                    91:15:2b:b7:2b:ed:30:96:d6:c6:9e:46:67:7e:dd:
                    38:8b:2e:15:d8:47:91:81:7a:7e:f9:40:80:b0:fb:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:8E:CA:FF:82:9A:E4:09:C2:1E:5C:CD:63:C7:D7:CB:AA:DD:5C
            X509v3 Authority Key Identifier:
                keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/J1uOyv-CmuQJwh5czWPH18uq3Vw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.148.0/24
                  185.65.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ca:90:08:58:61:d1:0e:43:0f:86:50:b4:20:5e:fd:71:f7:
         14:4e:61:a3:1a:c2:68:aa:2c:f2:47:5e:b1:ed:b9:22:42:c5:
         a8:f0:60:1b:aa:11:ae:19:de:f1:94:41:3b:cd:9d:d0:4c:36:
         5c:ab:2b:72:2f:01:51:40:61:30:82:52:aa:79:59:d8:53:0a:
         12:2a:e3:d0:05:9c:37:3d:fb:e0:d9:40:d6:ea:e1:9f:f9:ad:
         96:37:35:9e:2e:71:f7:0d:9b:e4:92:ab:9a:63:7b:6c:5c:ce:
         27:ef:13:e1:51:f8:1c:4d:a4:80:09:ff:30:f6:57:45:a7:bf:
         1b:e7:62:58:ac:bc:a1:01:a5:62:6d:f7:b3:f1:56:59:36:3d:
         b8:df:65:08:56:04:f4:8f:6f:24:dd:a1:91:f8:d7:be:9d:e1:
         67:57:08:37:78:44:9d:a5:fe:36:fa:3e:b9:e9:05:6b:e0:37:
         b0:85:45:59:c9:22:3e:5c:04:87:51:6f:ea:e3:57:23:c3:c5:
         88:54:2a:eb:13:93:5d:5b:b5:a1:83:04:73:31:f6:9d:6e:a2:
         42:92:3b:e9:38:d6:ea:87:7c:aa:f9:35:81:b7:9b:a5:19:4f:
         c2:b3:35:e6:8f:fb:7c:7b:1a:a0:60:8b:03:63:25:fa:12:76:
         13:fe:67:08
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAIfJQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZWNhNmUwNmM2ODI0YmQxYjgxMTE4M2UwZTE3ZmExOTQ5NmQyNjFjMB4XDTIyMDMy
MjEyMDQxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjc1YjhlY2FmZjgy
OWFlNDA5YzIxZTVjY2Q2M2M3ZDdjYmFhZGQ1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANnJLGmMlec8Yya1Vg2qxycfsYP3GVPXUDj/NcGMUZ5YodCV
8aAWiMu97ZHAjK6ZAlvz2Xgnn1LeUghQW8xVtsVBGStwByI020ocwPASXaj8tmPO
lOtsBkQTRxHA/QCauiZP/W9CSA9sNeS87cEj75hMg+SQFYjVDswTkfUK2JDdmMR0
8/6knS0FbvCigkNZjXhKyw5k1pRh8vI98Tphi4x60sqLRU638V4bC73x8Lgi+TCg
k4YJViBuTKpGQ4LHZMas47IM0IoPe+YbJs7EzUXCfLwAbENAEPrNMmHOzLJVkRUr
tyvtMJbWxp5GZ37dOIsuFdhHkYF6fvlAgLD7xJkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQnW47K/4Ka5AnCHlzNY8fXy6rdXDAfBgNVHSMEGDAWgBQOym4GxoJL0bgR
GD4OF/oZSW0mHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RzcHVCc2FDUzlHNEVSZy1EaGY2R1VsdEpody5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvOTEzN2ZmLTIwNjMtNDY3NS04ZGU3LWNmZDNmZjlmZGY3Yi8x
L0oxdU95di1DbXVRSndoNWN6V1BIMTh1cTNWdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
OTEzN2ZmLTIwNjMtNDY3NS04ZGU3LWNmZDNmZjlmZGY3Yi8xL0RzcHVCc2FDUzlH
NEVSZy1EaGY2R1VsdEpody5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvVlAMEALlBjTANBgkqhkiG9w0B
AQsFAAOCAQEAR8qQCFhh0Q5DD4ZQtCBe/XH3FE5hoxrCaKos8kdese25IkLFqPBg
G6oRrhne8ZRBO82d0Ew2XKsrci8BUUBhMIJSqnlZ2FMKEirj0AWcNz374NlA1urh
n/mtljc1ni5x9w2b5JKrmmN7bFzOJ+8T4VH4HE2kgAn/MPZXRae/G+diWKy8oQGl
Ym33s/FWWTY9uN9lCFYE9I9vJN2hkfjXvp3hZ1cIN3hEnaX+Nvo+uekFa+A3sIVF
WckiPlwEh1Fv6uNXI8PFiFQq6xOTXVu1oYMEczH2nW6iQpI76TjW6od8qvk1gbeb
pRlPwrM15o/7fHsaoGCLA2Ml+hJ2E/5nCA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:00 2023 by rpki-client on console-ams.rpki-client.org