Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/VkpDk8ckfCvmz8J5_gaBPQI6mn4.roa
File:                     VkpDk8ckfCvmz8J5_gaBPQI6mn4.roa (raw, json)
Hash identifier:          GfhagXtkI9Xv6hfGN0cCicapNRUqNts+AzMbjQ7BqOk=
Subject key identifier:   56:4A:43:93:C7:24:7C:2B:E6:CF:C2:79:FE:06:81:3D:02:3A:9A:7E
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       35B999B6
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/VkpDk8ckfCvmz8J5_gaBPQI6mn4.roa
Signing time:             Sat 01 Jan 2022 12:06:27 +0000
ROA not before:           Sat 01 Jan 2022 12:06:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1942
IP address blocks:        193.48.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901355958 (0x35b999b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan  1 12:06:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=564a4393c7247c2be6cfc279fe06813d023a9a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:5b:17:d5:7d:c2:53:97:4d:f0:57:0d:a6:
                    9b:0e:d5:f1:aa:f0:28:82:ae:b3:69:c4:76:9a:d0:
                    90:28:45:ef:3b:c6:17:b2:5f:a8:c3:c4:ec:8c:cd:
                    05:9d:fb:a9:b9:91:21:f2:fe:79:13:74:13:f1:4c:
                    e4:45:3c:c7:0a:09:a4:af:48:06:d3:1c:9f:92:ac:
                    a3:d3:e6:05:26:ab:46:79:5a:40:ca:ce:d4:ba:62:
                    de:d8:41:b9:ab:07:f1:b1:9a:f2:22:03:d9:78:bc:
                    b5:04:60:38:c6:88:a7:ba:03:b2:37:0e:fa:6d:1b:
                    f4:6e:b3:8d:e8:7e:3d:a3:9a:54:f3:2b:ba:c1:36:
                    0d:62:50:96:f1:5c:b3:c1:a0:bb:55:6d:e9:d9:e0:
                    b4:9e:e1:e6:56:ef:ed:22:e0:99:69:65:f9:01:cc:
                    ee:4a:69:46:e2:52:48:d7:94:85:d3:19:f0:9c:88:
                    22:5e:44:39:0c:36:13:c8:52:53:7f:58:f8:67:23:
                    c7:c8:55:7e:e6:bf:cc:5c:0a:98:ad:cd:ce:96:df:
                    98:3a:e4:b4:61:03:2b:83:0e:57:98:98:fe:39:f0:
                    54:13:30:33:28:3e:55:01:35:21:90:fe:41:fa:07:
                    0a:4f:81:75:be:ec:a5:19:d6:b7:bd:4d:76:a4:47:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4A:43:93:C7:24:7C:2B:E6:CF:C2:79:FE:06:81:3D:02:3A:9A:7E
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/VkpDk8ckfCvmz8J5_gaBPQI6mn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.48.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:39:69:fb:28:29:a7:10:71:a5:a9:91:b7:a6:0c:c3:da:43:
         2e:49:ef:1f:1f:98:25:19:13:cf:26:5b:3c:25:78:6a:98:8c:
         9d:51:d3:88:39:7a:49:17:fa:f3:31:53:fd:a5:bd:ff:3e:f1:
         26:cd:8c:fa:5a:bb:b7:e8:d6:38:cd:da:61:66:86:6c:f1:84:
         eb:55:5f:87:5f:a7:f8:38:1e:1a:2d:3b:65:bd:dd:a0:c1:6b:
         f3:05:99:51:74:96:ec:5a:e7:88:98:d1:8f:33:9c:81:6f:57:
         a6:7d:3e:36:38:27:85:4a:fe:0f:61:59:3d:ef:93:1e:91:a2:
         7f:28:21:38:ae:0d:a7:0a:e3:43:21:e9:5f:c8:0e:a5:98:cf:
         45:71:42:7e:4e:7c:25:ce:8d:c5:5d:7f:00:75:73:ec:11:35:
         4d:82:50:a8:4c:ba:18:49:dd:07:85:5a:4e:a9:f1:d8:88:d5:
         4b:4e:e8:ae:e7:f0:c9:f8:d0:8e:10:3a:e3:ac:7b:2b:d0:2b:
         a9:38:51:87:db:6c:4e:1d:d4:2e:6b:b6:21:60:20:8e:38:1b:
         68:39:93:f3:42:f3:2a:30:db:23:e4:bd:26:1a:95:6a:fc:b6:
         9c:1e:a4:49:d1:74:e6:4e:44:7b:08:09:ee:0e:9e:50:3b:dc:
         af:ad:b5:09
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENbmZtjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZWY5NTdhYmEyZWYwMDM1Mjg1MGUyMDI0NjRjNzFkMzNjYTgxNDQ4MB4XDTIyMDEw
MTEyMDYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTY0YTQzOTNjNzI0
N2MyYmU2Y2ZjMjc5ZmUwNjgxM2QwMjNhOWE3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlAWxfVfcJTl03wVw2mmw7V8arwKIKus2nEdprQkChF7zvG
F7JfqMPE7IzNBZ37qbmRIfL+eRN0E/FM5EU8xwoJpK9IBtMcn5Kso9PmBSarRnla
QMrO1Lpi3thBuasH8bGa8iID2Xi8tQRgOMaIp7oDsjcO+m0b9G6zjeh+PaOaVPMr
usE2DWJQlvFcs8Ggu1Vt6dngtJ7h5lbv7SLgmWll+QHM7kppRuJSSNeUhdMZ8JyI
Il5EOQw2E8hSU39Y+Gcjx8hVfua/zFwKmK3NzpbfmDrktGEDK4MOV5iY/jnwVBMw
Myg+VQE1IZD+QfoHCk+Bdb7spRnWt71NdqRHfeUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRWSkOTxyR8K+bPwnn+BoE9AjqafjAfBgNVHSMEGDAWgBQu+Verou8ANShQ
4gJGTHHTPKgUSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x2bFhxNkx2QURVb1VPSUNSa3h4MHp5b0ZFZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvYTU4NGU0LWNjZDQtNGM0Zi05ZDE2LTA0YTI3YzRkNTQ1My8x
L1ZrcERrOGNrZkN2bXo4SjVfZ2FCUFFJNm1uNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
YTU4NGU0LWNjZDQtNGM0Zi05ZDE2LTA0YTI3YzRkNTQ1My8xL0x2bFhxNkx2QURV
b1VPSUNSa3h4MHp5b0ZFZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEwUzANBgkqhkiG9w0BAQsFAAOC
AQEACzlp+ygppxBxpamRt6YMw9pDLknvHx+YJRkTzyZbPCV4apiMnVHTiDl6SRf6
8zFT/aW9/z7xJs2M+lq7t+jWOM3aYWaGbPGE61Vfh1+n+DgeGi07Zb3doMFr8wWZ
UXSW7FrniJjRjzOcgW9Xpn0+NjgnhUr+D2FZPe+THpGifyghOK4NpwrjQyHpX8gO
pZjPRXFCfk58Jc6NxV1/AHVz7BE1TYJQqEy6GEndB4VaTqnx2IjVS07orufwyfjQ
jhA646x7K9ArqThRh9tsTh3ULmu2IWAgjjgbaDmT80LzKjDbI+S9JhqVavy2nB6k
SdF05k5EewgJ7g6eUDvcr621CQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:41 2023 by rpki-client on console-ams.rpki-client.org