Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/trf3KiyqJqec8fhfTwxuzo3KBkM.roa
File:                     trf3KiyqJqec8fhfTwxuzo3KBkM.roa (raw, json)
Hash identifier:          PmPxI3Fbfm0C499dAdzpUMKIA0dCp4BYmPb07ZDJojc=
Subject key identifier:   B6:B7:F7:2A:2C:AA:26:A7:9C:F1:F8:5F:4F:0C:6E:CE:8D:CA:06:43
Certificate issuer:       /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial:       039D9EDD
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/trf3KiyqJqec8fhfTwxuzo3KBkM.roa
Signing time:             Sat 01 Jan 2022 00:51:33 +0000
ROA not before:           Sat 01 Jan 2022 00:51:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50508
IP address blocks:        193.105.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60661469 (0x39d9edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Validity
            Not Before: Jan  1 00:51:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6b7f72a2caa26a79cf1f85f4f0c6ece8dca0643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:ba:3b:f3:96:9c:f2:93:67:64:28:ad:16:
                    9c:5e:28:91:05:35:19:15:1c:a6:0a:c9:5f:7d:bd:
                    c4:0e:5e:67:52:f0:47:35:6d:a4:f5:70:e4:06:cb:
                    64:d8:61:d6:10:33:54:cf:88:f6:80:9d:3d:22:7a:
                    7b:b7:d1:97:27:f2:2e:58:65:46:01:7d:93:23:e3:
                    59:c1:00:d0:22:47:e7:e7:ca:04:0c:bc:3e:1c:c4:
                    ea:ee:d6:60:4d:66:d1:2f:76:d3:f3:08:47:85:f8:
                    9e:8e:65:c4:31:ff:41:ac:d4:05:dc:0e:03:a5:66:
                    fe:e3:54:2e:a2:ee:aa:28:16:a6:1f:22:da:5d:41:
                    b6:e4:b7:e1:1c:8c:b9:43:02:91:d4:98:a1:da:de:
                    f4:ee:9b:da:a8:84:8b:61:7a:96:6f:a1:1c:9a:85:
                    23:52:21:c6:74:e2:35:0e:85:9c:7c:f4:55:d4:88:
                    07:bd:40:be:e5:d1:37:43:93:f7:cd:e2:7a:a2:95:
                    3b:f5:70:3a:85:23:bd:b8:f4:dc:ab:26:0b:9f:89:
                    80:40:41:4a:1d:14:e9:75:95:43:0d:cd:48:88:0d:
                    e3:72:58:4d:e1:a8:96:f0:fe:1c:ee:76:50:0f:98:
                    96:2a:c7:8c:32:7a:cf:da:8d:c8:a2:a7:88:9a:5e:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:F7:2A:2C:AA:26:A7:9C:F1:F8:5F:4F:0C:6E:CE:8D:CA:06:43
            X509v3 Authority Key Identifier:
                keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/trf3KiyqJqec8fhfTwxuzo3KBkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:7c:1c:07:f5:32:e8:51:81:04:d9:6b:a4:20:27:27:66:
         05:19:65:14:81:e2:89:c3:6f:41:bc:41:7c:2d:98:33:65:27:
         51:33:54:00:f3:ec:71:8b:1e:e0:29:10:9b:03:c9:4d:32:17:
         58:58:4e:af:b0:3e:a2:96:63:97:6c:43:de:b6:31:5b:f4:0e:
         be:a7:5b:eb:eb:78:c8:1b:8f:67:cf:fb:f3:06:59:d1:3a:e7:
         3c:1c:34:ed:17:c8:bc:0a:29:c5:57:1d:43:e6:72:c4:17:00:
         ea:f0:38:cb:ed:52:55:03:06:98:59:be:63:1a:0f:a4:6e:ae:
         47:a0:70:fd:c9:f7:24:94:35:ab:2c:97:af:98:79:28:05:b6:
         a4:e1:69:fe:3f:a1:af:46:ca:8a:f9:6a:57:8d:65:f2:c8:80:
         2e:2e:51:fb:8e:80:22:95:f1:f7:2e:f4:c1:b9:5d:63:ff:77:
         d3:77:64:34:6c:96:a6:6a:ec:34:2d:af:59:8e:b8:83:14:e1:
         be:0d:84:d8:19:d8:14:7b:3c:35:a0:40:0b:28:f2:62:0e:c4:
         02:a3:cb:d8:af:21:08:de:4d:a5:7a:e1:0c:a2:98:d1:b2:0d:
         d2:34:c3:e5:83:5d:39:ab:4b:ec:16:3d:1b:22:df:a3:05:44:
         3e:07:20:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA52e3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MGMwOTRhZDBmYzdiZjE2MGFhMWMxYWQwYzUzOGU5YmY4MGU1OWY4MB4XDTIyMDEw
MTAwNTEzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZiN2Y3MmEyY2Fh
MjZhNzljZjFmODVmNGYwYzZlY2U4ZGNhMDY0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9Qujvzlpzyk2dkKK0WnF4okQU1GRUcpgrJX329xA5eZ1Lw
RzVtpPVw5AbLZNhh1hAzVM+I9oCdPSJ6e7fRlyfyLlhlRgF9kyPjWcEA0CJH5+fK
BAy8PhzE6u7WYE1m0S920/MIR4X4no5lxDH/QazUBdwOA6Vm/uNULqLuqigWph8i
2l1BtuS34RyMuUMCkdSYodre9O6b2qiEi2F6lm+hHJqFI1IhxnTiNQ6FnHz0VdSI
B71AvuXRN0OT983ieqKVO/VwOoUjvbj03KsmC5+JgEBBSh0U6XWVQw3NSIgN43JY
TeGolvD+HO52UA+YlirHjDJ6z9qNyKKniJpez80CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2t/cqLKomp5zx+F9PDG7OjcoGQzAfBgNVHSMEGDAWgBQQwJStD8e/Fgqh
wa0MU46b+A5Z+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VNQ1VyUV9IdnhZS29jR3RERk9PbV9nT1dmZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvN2ZlMGU3LThkYjEtNDA1Ny1iNWZmLTY1MDQ1ZjdkOGVhNS8x
L3RyZjNLaXlxSnFlYzhmaGZUd3h1em8zS0JrTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
N2ZlMGU3LThkYjEtNDA1Ny1iNWZmLTY1MDQ1ZjdkOGVhNS8xL0VNQ1VyUV9IdnhZ
S29jR3RERk9PbV9nT1dmZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFpVzANBgkqhkiG9w0BAQsFAAOC
AQEAdVt8HAf1MuhRgQTZa6QgJydmBRllFIHiicNvQbxBfC2YM2UnUTNUAPPscYse
4CkQmwPJTTIXWFhOr7A+opZjl2xD3rYxW/QOvqdb6+t4yBuPZ8/78wZZ0TrnPBw0
7RfIvAopxVcdQ+ZyxBcA6vA4y+1SVQMGmFm+YxoPpG6uR6Bw/cn3JJQ1qyyXr5h5
KAW2pOFp/j+hr0bKivlqV41l8siALi5R+46AIpXx9y70wbldY/9303dkNGyWpmrs
NC2vWY64gxThvg2E2BnYFHs8NaBACyjyYg7EAqPL2K8hCN5NpXrhDKKY0bIN0jTD
5YNdOatL7BY9GyLfowVEPgcg7g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:04 2023 by rpki-client on console-fra.rpki-client.org