Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/5Oz0C2hPmA4dDE10ZmcQkS17ySQ.roa
File:                     5Oz0C2hPmA4dDE10ZmcQkS17ySQ.roa (raw, json)
Hash identifier:          S99Hm6gNBzhTrzjm+raz+cwagwY++oxs5XEcEArhegw=
Subject key identifier:   E4:EC:F4:0B:68:4F:98:0E:1D:0C:4D:74:66:67:10:91:2D:7B:C9:24
Certificate issuer:       /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial:       0F7F40CB
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/5Oz0C2hPmA4dDE10ZmcQkS17ySQ.roa
Signing time:             Sat 01 Jan 2022 06:04:40 +0000
ROA not before:           Sat 01 Jan 2022 06:04:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        185.143.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259997899 (0xf7f40cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
        Validity
            Not Before: Jan  1 06:04:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e4ecf40b684f980e1d0c4d74666710912d7bc924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:ba:d8:ec:b4:08:f0:4b:49:16:91:fd:ec:
                    2f:ee:c2:a9:4e:43:4b:de:06:22:d8:a1:cc:ee:a7:
                    eb:0e:7a:17:db:89:23:e2:dd:de:78:bf:a4:4b:a5:
                    04:70:45:99:30:ed:f3:16:22:a7:da:07:3b:36:73:
                    8e:f1:b6:2e:dc:57:7e:c3:1e:13:3f:0d:04:5e:ba:
                    b8:dd:cc:7a:55:e2:96:d2:2e:84:61:bb:29:5b:6d:
                    96:fd:5d:b6:20:6a:89:04:d4:ad:71:c8:2c:31:b1:
                    35:d2:c4:c6:f7:73:fc:3b:c0:97:c6:83:1d:a2:3d:
                    f9:3e:65:7f:48:cc:d9:d1:38:8e:c7:7d:f1:71:33:
                    6f:b4:46:96:e5:12:3a:fd:52:d4:fa:03:4e:00:bf:
                    fa:e7:6d:92:cb:47:c8:27:35:ec:ab:77:ec:15:43:
                    c7:60:50:54:2a:ca:ef:25:1f:77:f3:21:03:22:98:
                    96:97:70:53:0d:54:9b:42:bf:a8:c3:c6:2a:83:ae:
                    e7:91:ff:9f:66:d5:56:88:79:18:74:e1:24:89:5b:
                    34:79:d6:0a:3d:5a:83:25:ee:52:87:b0:8f:2f:c9:
                    73:88:d1:0d:c3:2a:94:ac:44:81:d6:b9:de:a2:c7:
                    9e:9e:36:52:5f:f2:e1:81:b4:57:c8:0f:5e:8b:99:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:F4:0B:68:4F:98:0E:1D:0C:4D:74:66:67:10:91:2D:7B:C9:24
            X509v3 Authority Key Identifier:
                keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/5Oz0C2hPmA4dDE10ZmcQkS17ySQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:c8:f2:a6:08:2f:90:1f:fe:78:6b:2e:1a:92:1a:44:35:
         a5:d1:18:25:fc:11:84:18:10:2d:d8:c9:9a:38:a1:fd:82:7a:
         89:44:19:35:99:85:1d:e1:e8:2c:de:76:8b:2b:5b:b1:ae:2e:
         12:a3:10:73:31:f0:3a:e6:5b:4f:87:cd:be:8e:7e:5f:d7:b9:
         60:d9:6b:cb:21:58:75:b7:f8:58:a7:6e:11:78:52:ba:d5:7e:
         39:58:cb:ae:a1:39:42:df:ed:27:5d:81:72:ae:ee:29:31:1e:
         ce:56:f2:e4:98:17:4a:e0:ec:d7:1d:ad:5c:e8:3d:f4:aa:89:
         c2:4c:cb:a5:6b:d3:1a:23:0b:a4:f3:b5:12:35:a4:5a:64:d9:
         f4:2b:d1:62:a8:c5:0e:70:59:4c:dd:7f:0b:bc:76:25:1e:d0:
         e2:d5:60:d6:04:cb:81:80:f2:94:c7:10:e7:06:4b:f6:0c:20:
         74:64:a8:d8:81:1d:2d:b7:3f:49:9e:be:4a:c1:9d:47:49:d4:
         78:8a:18:c3:e5:4a:c8:83:8b:84:32:93:fa:93:34:b1:d1:29:
         2c:f7:8d:fd:ca:5a:1c:a9:5e:64:4a:42:73:d5:2a:1e:d4:81:
         a6:9c:fa:33:45:a9:3e:78:fc:f7:d7:7b:82:53:19:d8:da:62:
         1f:78:9c:5b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED39AyzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGRlNGIzYjgyZjIwOWI3MDFhZTM0MGNmNTNiOTc0MDc4ZjE2YTlmMB4XDTIyMDEw
MTA2MDQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTRlY2Y0MGI2ODRm
OTgwZTFkMGM0ZDc0NjY2NzEwOTEyZDdiYzkyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANRJutjstAjwS0kWkf3sL+7CqU5DS94GItihzO6n6w56F9uJ
I+Ld3ni/pEulBHBFmTDt8xYip9oHOzZzjvG2LtxXfsMeEz8NBF66uN3MelXiltIu
hGG7KVttlv1dtiBqiQTUrXHILDGxNdLExvdz/DvAl8aDHaI9+T5lf0jM2dE4jsd9
8XEzb7RGluUSOv1S1PoDTgC/+udtkstHyCc17Kt37BVDx2BQVCrK7yUfd/MhAyKY
lpdwUw1Um0K/qMPGKoOu55H/n2bVVoh5GHThJIlbNHnWCj1agyXuUoewjy/Jc4jR
DcMqlKxEgda53qLHnp42Ul/y4YG0V8gPXouZvyUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTk7PQLaE+YDh0MTXRmZxCRLXvJJDAfBgNVHSMEGDAWgBRd3ks7gvIJtwGu
NAz1O5dAePFqnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hkNUxPNEx5Q2JjQnJqUU05VHVYUUhqeGFwOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvMDJiZGYwLWJmMjktNGRhZS1iMTliLTg2YTU1MThlMmQ1Mi8x
LzVPejBDMmhQbUE0ZERFMTBabWNRa1MxN3lTUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
MDJiZGYwLWJmMjktNGRhZS1iMTliLTg2YTU1MThlMmQ1Mi8xL1hkNUxPNEx5Q2Jj
QnJqUU05VHVYUUhqeGFwOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmP8zANBgkqhkiG9w0BAQsFAAOC
AQEAgi7I8qYIL5Af/nhrLhqSGkQ1pdEYJfwRhBgQLdjJmjih/YJ6iUQZNZmFHeHo
LN52iytbsa4uEqMQczHwOuZbT4fNvo5+X9e5YNlryyFYdbf4WKduEXhSutV+OVjL
rqE5Qt/tJ12Bcq7uKTEezlby5JgXSuDs1x2tXOg99KqJwkzLpWvTGiMLpPO1EjWk
WmTZ9CvRYqjFDnBZTN1/C7x2JR7Q4tVg1gTLgYDylMcQ5wZL9gwgdGSo2IEdLbc/
SZ6+SsGdR0nUeIoYw+VKyIOLhDKT+pM0sdEpLPeN/cpaHKleZEpCc9UqHtSBppz6
M0WpPnj899d7glMZ2NpiH3icWw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:06 2023 by rpki-client on console-fra.rpki-client.org