Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/A5OzCstQWkkjhy88tO7j7pVHtFs.roa
File:                     A5OzCstQWkkjhy88tO7j7pVHtFs.roa (raw, json)
Hash identifier:          MSNwD10q/XzKVyRQdtI9trj1raNUhusZpkAp1pDuBh0=
Subject key identifier:   03:93:B3:0A:CB:50:5A:49:23:87:2F:3C:B4:EE:E3:EE:95:47:B4:5B
Certificate issuer:       /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial:       0184C09407B387BC28741DD9A8DE6A667689
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/A5OzCstQWkkjhy88tO7j7pVHtFs.roa
Signing time:             Mon 28 Nov 2022 23:30:37 +0000
ROA not before:           Mon 28 Nov 2022 23:30:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211510
IP address blocks:        185.54.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c0:94:07:b3:87:bc:28:74:1d:d9:a8:de:6a:66:76:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
        Validity
            Not Before: Nov 28 23:30:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0393b30acb505a4923872f3cb4eee3ee9547b45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:65:59:39:8e:04:ad:5d:fa:9c:38:48:82:
                    b2:ed:fb:24:7a:c2:af:07:a5:7e:31:99:c2:87:fb:
                    8c:32:e6:88:3a:5c:b4:b3:8c:32:9b:23:e1:94:d9:
                    39:ed:3a:f1:6b:34:00:32:3b:7e:97:02:2c:59:b1:
                    d2:30:a1:a8:e0:3c:b9:f6:35:f4:b0:c7:9c:1d:e3:
                    99:dd:68:f0:0f:17:d5:c2:b3:4e:3f:29:a9:7c:6b:
                    1d:0e:7f:01:f9:6a:9a:c5:19:70:b5:08:e4:1c:43:
                    f3:ad:9c:bc:01:d2:63:18:98:bf:7a:0b:04:d3:f6:
                    58:c6:0e:b8:79:1a:ef:de:51:14:58:0d:5c:52:9c:
                    79:cc:97:9b:d7:3c:6e:8e:b2:29:51:a9:90:4b:de:
                    cf:cc:89:8c:31:78:3f:e9:20:f2:5e:f2:eb:8a:41:
                    05:f4:d2:f4:35:67:1e:94:e4:1e:df:f1:52:61:0c:
                    54:d4:fa:88:37:11:d7:ad:9d:43:73:0e:d2:08:47:
                    b5:ad:94:23:54:fa:e2:a6:20:b9:6e:6b:a7:cf:87:
                    0d:99:44:f7:9a:4f:5d:48:69:bb:d5:c1:eb:da:a9:
                    8d:c8:14:4a:81:fe:2d:a9:94:d0:56:fe:49:87:a4:
                    e0:fc:86:a8:f0:28:10:5f:d2:34:ca:b9:dc:a7:60:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:93:B3:0A:CB:50:5A:49:23:87:2F:3C:B4:EE:E3:EE:95:47:B4:5B
            X509v3 Authority Key Identifier:
                keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/A5OzCstQWkkjhy88tO7j7pVHtFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:a4:d1:46:4d:06:4d:e9:24:0a:7a:36:13:06:36:68:b9:
         d1:76:c7:2a:09:6b:3b:eb:42:41:46:c9:30:0c:16:f4:cf:8a:
         c9:88:fe:ac:2e:83:b0:74:da:86:b3:be:78:e8:8f:eb:5a:dc:
         b4:06:15:38:f8:ae:e4:d6:63:4f:ff:77:d9:80:35:0d:c8:b1:
         21:22:3f:41:4b:c4:ad:e5:30:51:36:37:4d:c2:61:7f:65:87:
         a2:2d:9c:3a:73:89:f0:0a:6e:4b:1f:dc:c7:c0:cf:66:8d:8f:
         c3:d4:9b:7b:37:35:12:68:94:c8:51:3d:d5:5c:43:c8:9f:d3:
         ea:16:fc:1d:d6:b5:bd:e1:36:87:ee:eb:de:2b:6b:ae:dd:6e:
         73:5b:f9:ba:58:5d:a2:dd:75:6d:1c:e1:0c:d9:b1:41:00:75:
         fe:d5:29:b1:be:df:83:2f:5b:ba:fa:fc:43:73:f2:59:d1:ea:
         98:43:ee:b4:85:9d:64:59:5b:f4:90:04:f0:df:c3:23:ee:15:
         2f:28:34:c0:73:0b:ca:b0:39:15:6d:0e:db:d5:98:0d:fe:51:
         b4:11:11:43:ef:9f:f5:5e:f8:48:85:67:4d:af:74:09:ae:07:
         9a:7e:e9:02:48:ae:d0:f0:77:2c:35:56:a9:e9:9f:90:73:fb:
         10:4d:1a:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTAlAezh7wodB3ZqN5qZnaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Y2ViNjFlNzFhNjE5ZjIzMTRlOWQ5ODQ2ZWM2N2JjODhh
MTI0NGMwHhcNMjIxMTI4MjMzMDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzkzYjMwYWNiNTA1YTQ5MjM4NzJmM2NiNGVlZTNlZTk1NDdiNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5BlWTmOBK1d+pw4SIKy7fskesKv
B6V+MZnCh/uMMuaIOly0s4wymyPhlNk57TrxazQAMjt+lwIsWbHSMKGo4Dy59jX0
sMecHeOZ3WjwDxfVwrNOPympfGsdDn8B+WqaxRlwtQjkHEPzrZy8AdJjGJi/egsE
0/ZYxg64eRrv3lEUWA1cUpx5zJeb1zxujrIpUamQS97PzImMMXg/6SDyXvLrikEF
9NL0NWcelOQe3/FSYQxU1PqINxHXrZ1Dcw7SCEe1rZQjVPripiC5bmunz4cNmUT3
mk9dSGm71cHr2qmNyBRKgf4tqZTQVv5Jh6Tg/Iao8CgQX9I0yrncp2ClFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAOTswrLUFpJI4cvPLTu4+6VR7RbMB8GA1UdIwQY
MBaAFETOth5xphnyMU6dmEbsZ7yIoSRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk02MkhuR21HZkl4VHAyWVJ1eG52SWloSkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wN2VhYzctNGQ1Mi00NmQ5LWJhNDQt
ODk0NTg2MGQ1MjM4LzEvQTVPekNzdFFXa2tqaHk4OHRPN2o3cFZIdEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wN2VhYzctNGQ1Mi00NmQ5LWJhNDQtODk0NTg2MGQ1MjM4
LzEvUk02MkhuR21HZkl4VHAyWVJ1eG52SWloSkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTbTMA0G
CSqGSIb3DQEBCwUAA4IBAQB2xqTRRk0GTekkCno2EwY2aLnRdscqCWs760JBRskw
DBb0z4rJiP6sLoOwdNqGs7546I/rWty0BhU4+K7k1mNP/3fZgDUNyLEhIj9BS8St
5TBRNjdNwmF/ZYeiLZw6c4nwCm5LH9zHwM9mjY/D1Jt7NzUSaJTIUT3VXEPIn9Pq
Fvwd1rW94TaH7uveK2uu3W5zW/m6WF2i3XVtHOEM2bFBAHX+1Smxvt+DL1u6+vxD
c/JZ0eqYQ+60hZ1kWVv0kATw38Mj7hUvKDTAcwvKsDkVbQ7b1ZgN/lG0ERFD75/1
XvhIhWdNr3QJrgeafukCSK7Q8HcsNVap6Z+Qc/sQTRqB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:39 2023 by rpki-client on console-fra.rpki-client.org