Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DVUAqn-YO_Vyo2wNMUdLWTXh860.roa
File:                     DVUAqn-YO_Vyo2wNMUdLWTXh860.roa (raw, json)
Hash identifier:          vFfWQTgviPYlnf2y+Eri+tQb7AcCuVCuKDaIHhJ6buo=
Subject key identifier:   0D:55:00:AA:7F:98:3B:F5:72:A3:6C:0D:31:47:4B:59:35:E1:F3:AD
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       4258E7D8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DVUAqn-YO_Vyo2wNMUdLWTXh860.roa
Signing time:             Sat 01 Jan 2022 14:03:00 +0000
ROA not before:           Sat 01 Jan 2022 14:03:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12552
IP address blocks:        193.182.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113122776 (0x4258e7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 14:03:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d5500aa7f983bf572a36c0d31474b5935e1f3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:43:14:25:60:6e:e8:77:b3:04:a5:bd:f7:
                    ab:76:fe:7b:c4:b7:fe:37:6f:48:35:41:41:c9:00:
                    dc:76:d1:87:78:26:9e:bf:de:e6:3f:25:51:0d:be:
                    c1:60:dd:c4:5f:94:75:13:7d:8f:d3:35:c5:81:0c:
                    01:ca:b7:ad:58:04:cf:ea:04:52:f0:a6:fe:fc:a4:
                    a6:70:f4:ae:86:ff:7b:11:b6:f3:87:19:6e:34:af:
                    ed:09:96:2e:3d:66:0f:6b:58:6d:0a:35:2a:15:c4:
                    6b:47:1c:c1:d2:e8:ca:37:ed:9c:8b:85:20:58:3e:
                    e1:77:f7:49:6a:e9:d0:94:87:ce:63:fd:4d:b6:df:
                    4c:fd:c4:d3:64:fa:ec:3a:18:54:42:5a:d1:e1:01:
                    a1:74:81:6c:21:a2:e7:bb:0e:f3:59:cc:67:4d:e8:
                    14:03:87:13:9f:bc:54:7d:0f:71:15:56:53:47:8f:
                    ec:d0:3e:df:41:bb:d0:6e:34:df:34:a7:60:fe:5b:
                    e0:f9:9f:65:96:8d:b4:26:54:a8:ba:f1:53:8d:f9:
                    2e:82:a0:36:ae:c6:a2:06:2b:43:6d:a4:1d:9b:ba:
                    55:81:2d:23:c8:bb:8a:2c:bc:7c:5e:db:94:0b:dc:
                    1b:03:00:7c:b7:55:1c:a0:28:c6:33:53:de:a6:88:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:00:AA:7F:98:3B:F5:72:A3:6C:0D:31:47:4B:59:35:E1:F3:AD
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DVUAqn-YO_Vyo2wNMUdLWTXh860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.182.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:bf:db:2b:6b:af:e2:40:01:2b:fd:11:56:91:4f:ea:5a:
         72:d5:92:b3:3b:d9:e7:14:27:ec:23:eb:9f:5c:4d:22:89:5f:
         8d:05:db:41:c8:2a:5e:bb:43:8e:c4:f0:17:e1:3f:59:3e:a1:
         0b:24:1c:36:fb:e9:72:15:ca:c4:1d:6d:ac:6b:36:34:0b:2c:
         6a:2f:3a:44:ef:bc:6d:84:1b:45:29:4e:c7:0c:e4:4c:93:51:
         67:fb:22:dc:53:d5:48:d3:f5:43:2d:3d:d8:2d:cc:65:83:c6:
         f4:1f:b5:c5:42:f4:8a:5f:fa:a1:5c:a9:18:ca:66:2c:59:c7:
         7d:fc:be:6e:98:b8:b0:09:23:76:10:6c:88:cf:b4:9a:3b:9b:
         ab:72:60:f4:f9:f5:e5:43:ac:22:53:51:fe:ee:87:1d:d9:2a:
         07:5b:cb:b1:f3:be:4e:f7:36:3f:94:28:8f:4c:c6:4f:19:64:
         8c:17:44:a6:1e:ca:03:06:50:b8:e2:28:79:b0:41:84:b9:8c:
         39:ee:0a:1e:72:48:fb:db:25:50:9b:48:86:5c:b5:70:a0:7d:
         87:46:6d:86:d0:83:de:5a:62:5e:dc:01:76:4a:40:68:42:e7:
         7d:f6:c4:92:82:39:11:d6:7b:48:fb:ad:51:cb:6b:10:c7:a1:
         e0:59:bb:d0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQljn2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDEw
MTE0MDMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQ1NTAwYWE3Zjk4
M2JmNTcyYTM2YzBkMzE0NzRiNTkzNWUxZjNhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvXQxQlYG7od7MEpb33q3b+e8S3/jdvSDVBQckA3HbRh3gm
nr/e5j8lUQ2+wWDdxF+UdRN9j9M1xYEMAcq3rVgEz+oEUvCm/vykpnD0rob/exG2
84cZbjSv7QmWLj1mD2tYbQo1KhXEa0ccwdLoyjftnIuFIFg+4Xf3SWrp0JSHzmP9
TbbfTP3E02T67DoYVEJa0eEBoXSBbCGi57sO81nMZ03oFAOHE5+8VH0PcRVWU0eP
7NA+30G70G403zSnYP5b4PmfZZaNtCZUqLrxU435LoKgNq7GogYrQ22kHZu6VYEt
I8i7iiy8fF7blAvcGwMAfLdVHKAoxjNT3qaIBXsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQNVQCqf5g79XKjbA0xR0tZNeHzrTAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
L0RWVUFxbi1ZT19WeW8yd05NVWRMV1RYaDg2MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMG2BjANBgkqhkiG9w0BAQsFAAOC
AQEALai/2ytrr+JAASv9EVaRT+pactWSszvZ5xQn7CPrn1xNIolfjQXbQcgqXrtD
jsTwF+E/WT6hCyQcNvvpchXKxB1trGs2NAssai86RO+8bYQbRSlOxwzkTJNRZ/si
3FPVSNP1Qy092C3MZYPG9B+1xUL0il/6oVypGMpmLFnHffy+bpi4sAkjdhBsiM+0
mjubq3Jg9Pn15UOsIlNR/u6HHdkqB1vLsfO+Tvc2P5Qoj0zGTxlkjBdEph7KAwZQ
uOIoebBBhLmMOe4KHnJI+9slUJtIhly1cKB9h0ZthtCD3lpiXtwBdkpAaELnffbE
koI5EdZ7SPutUctrEMeh4Fm70A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org