Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/o0VsI_wbtJGuP4ZHhm-t6KbrKuk.roa
File:                     o0VsI_wbtJGuP4ZHhm-t6KbrKuk.roa (raw, json)
Hash identifier:          yDG5PDG80u0T9jfnE78fO6jSiwA7cZYe/sRgtWqdoMw=
Subject key identifier:   A3:45:6C:23:FC:1B:B4:91:AE:3F:86:47:86:6F:AD:E8:A6:EB:2A:E9
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       FCED17
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/o0VsI_wbtJGuP4ZHhm-t6KbrKuk.roa
Signing time:             Sat 01 Jan 2022 13:00:59 +0000
ROA not before:           Sat 01 Jan 2022 13:00:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48806
IP address blocks:        45.132.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16575767 (0xfced17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jan  1 13:00:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a3456c23fc1bb491ae3f8647866fade8a6eb2ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:7c:61:a9:0e:1b:d7:b0:2f:42:7d:e9:17:
                    c7:19:cd:b2:b8:56:a5:08:e4:45:55:fe:6b:84:13:
                    11:b0:76:e2:b1:3d:9c:9d:29:a2:bc:87:94:c2:b8:
                    85:1e:3b:8c:2e:33:50:bf:db:6e:9e:bf:99:9b:18:
                    f7:1c:0d:76:2d:6a:95:44:ef:1e:2a:b6:21:da:1f:
                    77:06:2f:cb:0e:c0:d8:6e:69:af:08:b0:07:8c:dd:
                    36:02:7c:51:85:a5:1d:0e:10:39:c5:ec:bf:9b:aa:
                    cf:f8:e7:d2:d0:db:60:a7:a8:eb:1c:a6:29:dd:41:
                    b4:f2:b8:02:75:7d:19:2b:7d:ac:7e:ea:61:e0:f0:
                    4a:a5:21:98:2d:7d:d5:36:b2:4b:4a:2e:ad:48:cd:
                    1c:8d:06:62:24:fe:65:e4:2e:f7:d2:29:e9:71:f6:
                    4d:6b:a9:ec:2e:39:ab:9f:b5:b9:4d:e7:81:ed:6b:
                    1f:c2:0b:a3:c2:90:3e:9d:5f:2d:04:b7:7a:83:fb:
                    4d:0c:d9:a7:d6:ae:84:8d:a8:3b:0a:d2:20:7e:8e:
                    8b:0b:76:3f:20:9a:5a:1b:59:b1:b6:13:3b:66:32:
                    16:4e:66:0f:79:2b:d5:a6:7e:56:c1:b9:8b:16:bc:
                    8d:a3:a2:05:af:17:a3:e1:93:49:32:06:8d:f5:2e:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:45:6C:23:FC:1B:B4:91:AE:3F:86:47:86:6F:AD:E8:A6:EB:2A:E9
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/o0VsI_wbtJGuP4ZHhm-t6KbrKuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:85:44:11:8d:d4:3b:76:c2:10:d7:97:8b:82:dc:d6:98:
         60:4e:2b:0c:1b:23:b5:24:da:e6:29:7d:9a:86:0e:b6:0a:cf:
         aa:4b:e3:23:d4:f8:2c:32:21:ec:2c:49:60:06:2c:53:fc:86:
         5e:d2:d9:9c:2c:8a:a1:8e:da:29:97:cf:6d:a2:08:0c:6d:14:
         e7:62:d8:d5:1b:b1:67:8e:45:b4:3a:3d:bd:c9:09:c2:73:2f:
         c2:65:79:b4:06:38:8e:5c:7d:c3:3a:b7:e4:60:cd:26:8a:6a:
         9b:0f:ce:3e:ff:d7:7b:d5:33:de:92:a4:70:5d:5f:37:03:f5:
         1a:5f:95:f9:dc:4d:93:f3:22:e5:36:45:c7:95:2e:3d:65:44:
         d7:3a:f0:47:08:a9:eb:48:1d:fb:d3:80:c7:b9:18:c7:15:b6:
         bc:4e:b7:82:00:69:31:92:9e:77:fb:19:12:67:6f:56:63:bd:
         03:42:7b:d4:46:aa:20:5a:2e:ea:b0:12:52:70:9f:f5:fd:0b:
         e0:8b:8e:32:2a:92:2c:a6:38:cc:ff:0e:dd:7b:62:9a:ac:3c:
         58:30:73:19:36:eb:38:4b:71:b4:53:cc:ca:e3:7c:b2:3b:a5:
         78:80:1e:da:9b:14:21:40:0b:db:44:de:b3:c8:7b:a9:1b:8d:
         5a:0f:67:c0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPztFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MmQyMWU4MDRhYjc3MTNhZDc4NzdkZGU2MDNhYTc4MjRiMzE5ODNjMB4XDTIyMDEw
MTEzMDA1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTM0NTZjMjNmYzFi
YjQ5MWFlM2Y4NjQ3ODY2ZmFkZThhNmViMmFlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMMfGGpDhvXsC9CfekXxxnNsrhWpQjkRVX+a4QTEbB24rE9
nJ0poryHlMK4hR47jC4zUL/bbp6/mZsY9xwNdi1qlUTvHiq2IdofdwYvyw7A2G5p
rwiwB4zdNgJ8UYWlHQ4QOcXsv5uqz/jn0tDbYKeo6xymKd1BtPK4AnV9GSt9rH7q
YeDwSqUhmC191TayS0ourUjNHI0GYiT+ZeQu99Ip6XH2TWup7C45q5+1uU3nge1r
H8ILo8KQPp1fLQS3eoP7TQzZp9auhI2oOwrSIH6Oiwt2PyCaWhtZsbYTO2YyFk5m
D3kr1aZ+VsG5ixa8jaOiBa8Xo+GTSTIGjfUuJzsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSjRWwj/Bu0ka4/hkeGb63opusq6TAfBgNVHSMEGDAWgBTC0h6ASrdxOteH
fd5gOqeCSzGYPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3d0SWVnRXEzY1RyWGgzM2VZRHFuZ2tzeG1Edy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvMDRiNDQ2LTRhZTEtNGZlNS1iNjQ2LTU5YWUwOWVkYmViOS8x
L28wVnNJX3didEpHdVA0WkhobS10Nktickt1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
MDRiNDQ2LTRhZTEtNGZlNS1iNjQ2LTU5YWUwOWVkYmViOS8xL3d0SWVnRXEzY1Ry
WGgzM2VZRHFuZ2tzeG1Edy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2EcTANBgkqhkiG9w0BAQsFAAOC
AQEAbr+FRBGN1Dt2whDXl4uC3NaYYE4rDBsjtSTa5il9moYOtgrPqkvjI9T4LDIh
7CxJYAYsU/yGXtLZnCyKoY7aKZfPbaIIDG0U52LY1RuxZ45FtDo9vckJwnMvwmV5
tAY4jlx9wzq35GDNJopqmw/OPv/Xe9Uz3pKkcF1fNwP1Gl+V+dxNk/Mi5TZFx5Uu
PWVE1zrwRwip60gd+9OAx7kYxxW2vE63ggBpMZKed/sZEmdvVmO9A0J71EaqIFou
6rASUnCf9f0L4IuOMiqSLKY4zP8O3Xtimqw8WDBzGTbrOEtxtFPMyuN8sjuleIAe
2psUIUAL20Tes8h7qRuNWg9nwA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org