Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7TBdK1Dwh5Xm255eUYP0JbMxEPU.roa
File:                     7TBdK1Dwh5Xm255eUYP0JbMxEPU.roa (raw, json)
Hash identifier:          fqfE2E2YfK7zGnXVeq38mN33GdW6KfsQ/CAJUlBRf1Q=
Subject key identifier:   ED:30:5D:2B:50:F0:87:95:E6:DB:9E:5E:51:83:F4:25:B3:31:10:F5
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       179DEF24
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7TBdK1Dwh5Xm255eUYP0JbMxEPU.roa
Signing time:             Sat 01 Jan 2022 04:53:59 +0000
ROA not before:           Sat 01 Jan 2022 04:53:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31543
IP address blocks:        62.122.24.0/22 maxlen: 24
                          193.201.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396226340 (0x179def24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:53:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed305d2b50f08795e6db9e5e5183f425b33110f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:6a:26:a0:c5:e3:fe:7a:79:9d:c4:49:9d:
                    c6:62:b3:f7:b1:c1:8c:55:ac:c7:cf:2d:3a:2a:4a:
                    d0:ea:4b:6c:b4:3c:bc:ef:4c:cc:fb:c9:56:79:f0:
                    92:da:69:fa:96:3f:96:6e:cf:49:df:de:29:14:37:
                    36:f4:74:1a:f8:d7:5c:c5:d1:6d:10:68:b2:6c:5d:
                    50:9e:aa:7c:13:f4:09:3b:97:9a:d8:0d:23:b4:1d:
                    a2:7c:5b:2d:cf:03:63:19:ac:f3:e8:ad:4e:fe:66:
                    4f:c3:27:60:3b:38:8d:df:43:43:9b:70:16:0c:7b:
                    f9:1a:c7:6c:88:1a:36:f1:7a:12:c4:9a:29:a4:a8:
                    a5:88:d2:64:08:6b:cc:1f:26:11:bf:11:b1:ab:64:
                    97:2c:92:d7:5f:30:b1:43:ac:18:02:4f:49:99:c1:
                    6b:39:43:72:44:7a:d1:c8:17:65:49:8a:8d:96:a4:
                    1f:95:9a:a5:57:11:bf:ea:38:65:0a:48:71:46:86:
                    0e:18:3a:f8:09:94:0a:3a:75:a5:72:79:7c:6e:bf:
                    79:d4:ba:15:dd:90:23:88:3b:7d:49:d8:2c:71:71:
                    a5:87:84:cc:4f:eb:7b:3a:5e:7f:23:a1:9c:35:18:
                    ea:25:89:e3:92:19:9e:63:5e:92:e8:f5:ea:76:31:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:30:5D:2B:50:F0:87:95:E6:DB:9E:5E:51:83:F4:25:B3:31:10:F5
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7TBdK1Dwh5Xm255eUYP0JbMxEPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.24.0/22
                  193.201.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:a9:18:f5:f9:0a:96:e5:e5:48:ef:fd:07:c9:17:ad:ca:
         de:b7:c7:4a:50:22:2d:5b:cd:58:c2:1b:dc:77:4e:51:c5:a2:
         d0:f0:a6:65:89:05:37:1c:af:cd:03:c9:df:32:e4:28:2f:53:
         23:5a:f0:0b:c3:7d:43:24:47:65:25:78:79:07:33:98:16:80:
         30:8a:dd:3b:ee:86:4b:52:87:34:02:6e:9e:78:1a:9f:28:70:
         64:cf:10:c4:a1:2a:30:b1:a2:82:44:f8:d6:f1:06:2c:c6:7f:
         7e:03:c4:5f:32:6b:52:d6:5c:cf:e9:fd:bd:34:61:ef:31:31:
         f5:01:98:28:94:59:cd:2a:97:0c:2a:74:ca:d5:33:87:cc:4f:
         9e:de:fe:ce:1d:87:c0:f4:43:dc:da:58:0b:87:fe:ee:40:60:
         1e:f0:67:5f:30:f5:10:a2:b2:b7:91:e1:53:a6:a2:af:e3:9c:
         75:89:b7:3b:c8:d2:4e:07:1f:63:95:f0:36:e3:cf:e4:11:72:
         d0:6d:74:67:9f:b3:89:67:b8:ac:e7:3f:71:9d:29:43:ae:c2:
         c7:f1:ff:ce:4e:8c:21:15:28:56:0c:ac:f9:0b:3f:98:1d:91:
         9a:21:ec:bd:13:19:0b:92:f3:ae:bf:dc:d9:d4:bb:ec:b5:24:
         32:c6:dc:99
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEF53vJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTM1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQzMDVkMmI1MGYw
ODc5NWU2ZGI5ZTVlNTE4M2Y0MjViMzMxMTBmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvyaiagxeP+enmdxEmdxmKz97HBjFWsx88tOipK0OpLbLQ8
vO9MzPvJVnnwktpp+pY/lm7PSd/eKRQ3NvR0GvjXXMXRbRBosmxdUJ6qfBP0CTuX
mtgNI7QdonxbLc8DYxms8+itTv5mT8MnYDs4jd9DQ5twFgx7+RrHbIgaNvF6EsSa
KaSopYjSZAhrzB8mEb8RsatklyyS118wsUOsGAJPSZnBazlDckR60cgXZUmKjZak
H5WapVcRv+o4ZQpIcUaGDhg6+AmUCjp1pXJ5fG6/edS6Fd2QI4g7fUnYLHFxpYeE
zE/rezpefyOhnDUY6iWJ45IZnmNekuj16nYx+ukCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTtMF0rUPCHlebbnl5Rg/QlszEQ9TAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzdUQmRLMUR3aDVYbTI1NWVVWVAwSmJNeEVQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAj56GAMEAsHJ0DANBgkqhkiG9w0B
AQsFAAOCAQEADNCpGPX5Cpbl5Ujv/QfJF63K3rfHSlAiLVvNWMIb3HdOUcWi0PCm
ZYkFNxyvzQPJ3zLkKC9TI1rwC8N9QyRHZSV4eQczmBaAMIrdO+6GS1KHNAJunnga
nyhwZM8QxKEqMLGigkT41vEGLMZ/fgPEXzJrUtZcz+n9vTRh7zEx9QGYKJRZzSqX
DCp0ytUzh8xPnt7+zh2HwPRD3NpYC4f+7kBgHvBnXzD1EKKyt5HhU6air+OcdYm3
O8jSTgcfY5XwNuPP5BFy0G10Z5+ziWe4rOc/cZ0pQ67Cx/H/zk6MIRUoVgys+Qs/
mB2RmiHsvRMZC5Lzrr/c2dS77LUkMsbcmQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org