Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/1-VWpMjIyJlc72hFepIdhLMul2mc.roa
File:                     1-VWpMjIyJlc72hFepIdhLMul2mc.roa (raw, json)
Hash identifier:          r84CFvUmopxET5UqX584furN8Xbz+fmF7YYmlO1f9gU=
Subject key identifier:   F9:55:A9:32:32:32:26:57:3B:DA:11:5E:A4:87:61:2C:CB:A5:DA:67
Certificate issuer:       /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial:       0D5363F6
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/1-VWpMjIyJlc72hFepIdhLMul2mc.roa
Signing time:             Sat 01 Jan 2022 05:55:21 +0000
ROA not before:           Sat 01 Jan 2022 05:55:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42244
IP address blocks:        80.77.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223568886 (0xd5363f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
        Validity
            Not Before: Jan  1 05:55:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f955a932323226573bda115ea487612ccba5da67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:1a:bd:42:d1:09:ee:44:ac:e3:6b:07:6d:
                    e4:b6:ec:42:73:2c:1e:34:35:d4:03:d4:45:bd:77:
                    84:4e:78:1b:3c:01:e7:c9:cb:d6:0e:d9:59:bf:9b:
                    66:07:69:e3:61:d6:2a:e0:c4:42:bd:f8:55:33:a0:
                    52:44:c2:c6:12:41:31:e5:87:a1:e5:28:a5:ff:82:
                    21:70:06:4e:6a:81:26:d8:b2:dd:94:76:90:37:88:
                    17:c7:b9:b4:5b:10:cf:09:ab:6a:a6:ac:1d:0d:b4:
                    fa:84:03:2c:7b:b9:60:13:69:68:ce:6b:39:93:33:
                    49:a3:44:96:27:17:78:bb:45:ad:2f:e1:b6:94:95:
                    a7:97:ba:ae:d0:63:1b:14:c0:64:e0:c5:02:60:aa:
                    9a:a5:fe:70:05:79:03:2a:86:2c:c6:86:8c:ce:c2:
                    6b:9a:ba:b9:c1:79:29:f3:1d:31:95:98:7c:17:0d:
                    6f:53:ab:6b:ee:a9:76:77:77:92:81:e2:ed:b3:ca:
                    5c:c4:09:26:5e:16:2d:0b:22:8b:4d:cd:7d:0a:b6:
                    cc:74:8b:61:ef:e3:eb:63:fc:6d:e0:51:9a:ae:2b:
                    ef:96:c6:3e:ea:e3:2e:ca:58:53:b0:0f:2e:72:2c:
                    8e:67:c8:35:37:0c:2d:10:4d:8c:95:8f:6c:80:13:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:A9:32:32:32:26:57:3B:DA:11:5E:A4:87:61:2C:CB:A5:DA:67
            X509v3 Authority Key Identifier:
                keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/1-VWpMjIyJlc72hFepIdhLMul2mc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.77.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:55:7f:19:6f:fa:79:fe:ff:9d:26:37:af:41:02:58:95:
         21:7a:c4:9d:ef:ef:b0:f5:ec:95:c0:8b:2f:18:18:73:21:19:
         82:db:6b:7f:2b:de:0d:e0:5d:38:04:22:82:ad:a4:92:d7:e0:
         7f:ff:52:bd:33:66:5b:f5:c3:23:8a:4d:5c:94:7c:e4:aa:84:
         23:5e:21:88:98:19:db:e8:b0:79:65:94:32:e6:a8:a3:d4:c3:
         b0:dd:af:a2:f1:11:ff:37:b4:fc:c8:58:05:7b:6d:ee:cf:d7:
         d6:9b:59:75:32:1f:02:e8:32:56:05:6f:ad:d9:43:13:ed:2b:
         9c:d4:77:2f:a1:e5:e8:1f:10:b8:c5:a5:5b:d3:bc:41:47:e4:
         76:70:b0:60:cd:a1:85:36:f5:e8:c3:67:8f:eb:26:28:06:66:
         0e:94:3f:20:59:d2:8b:7d:b6:2e:92:89:10:f2:54:74:63:22:
         ee:e1:0f:f0:20:4d:b1:de:bb:c8:8d:a3:70:7d:5f:3f:57:e4:
         fa:bd:c7:2b:95:b7:51:4a:62:b8:d2:88:a7:16:d0:78:f4:4d:
         dd:7f:e5:d8:35:5d:31:97:ad:8d:ca:20:2d:aa:12:fb:b7:4a:
         99:ec:5a:7f:43:e6:db:ca:cf:25:91:f1:cc:e7:c0:6b:f2:bc:
         84:2f:b5:cd
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEDVNj9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MjkwMGU0NjU1YWIzNDlhNDYzMmIxNDA3MTlkYzk3MjMwNDMxNzI1MB4XDTIyMDEw
MTA1NTUyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjk1NWE5MzIzMjMy
MjY1NzNiZGExMTVlYTQ4NzYxMmNjYmE1ZGE2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOInGr1C0QnuRKzjawdt5LbsQnMsHjQ11APURb13hE54GzwB
58nL1g7ZWb+bZgdp42HWKuDEQr34VTOgUkTCxhJBMeWHoeUopf+CIXAGTmqBJtiy
3ZR2kDeIF8e5tFsQzwmraqasHQ20+oQDLHu5YBNpaM5rOZMzSaNElicXeLtFrS/h
tpSVp5e6rtBjGxTAZODFAmCqmqX+cAV5AyqGLMaGjM7Ca5q6ucF5KfMdMZWYfBcN
b1Ora+6pdnd3koHi7bPKXMQJJl4WLQsii03NfQq2zHSLYe/j62P8beBRmq4r75bG
PurjLspYU7APLnIsjmfINTcMLRBNjJWPbIATEhECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5VakyMjImVzvaEV6kh2Esy6XaZzAfBgNVHSMEGDAWgBSikA5GVas0mkYy
sUBxnclyMEMXJTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29wQU9SbFdyTkpwR01yRkFjWjNKY2pCREZ5VS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvNGY3MDFhLWVkNmYtNDdjOC1iZjczLWY0YzVmYzNjYTJjNC8x
LzEtVldwTWpJeUpsYzcyaEZlcElkaExNdWwybWMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0
LzRmNzAxYS1lZDZmLTQ3YzgtYmY3My1mNGM1ZmMzY2EyYzQvMS9vcEFPUmxXck5K
cEdNckZBY1ozSmNqQkRGeVUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABQTagwDQYJKoZIhvcNAQELBQAD
ggEBAGoNVX8Zb/p5/v+dJjevQQJYlSF6xJ3v77D17JXAiy8YGHMhGYLba38r3g3g
XTgEIoKtpJLX4H//Ur0zZlv1wyOKTVyUfOSqhCNeIYiYGdvosHlllDLmqKPUw7Dd
r6LxEf83tPzIWAV7be7P19abWXUyHwLoMlYFb63ZQxPtK5zUdy+h5egfELjFpVvT
vEFH5HZwsGDNoYU29ejDZ4/rJigGZg6UPyBZ0ot9ti6SiRDyVHRjIu7hD/AgTbHe
u8iNo3B9Xz9X5Pq9xyuVt1FKYrjSiKcW0Hj0Td1/5dg1XTGXrY3KIC2qEvu3Spns
Wn9D5tvKzyWR8cznwGvyvIQvtc0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-fra.rpki-client.org