Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pEkQI2QQ5xO1XZJSdaHRb-adC_Y.roa
File:                     pEkQI2QQ5xO1XZJSdaHRb-adC_Y.roa (raw, json)
Hash identifier:          hzU/3OqzpBL5y8S3pALBx0kMrUR7/kHn/uemb0n41PI=
Subject key identifier:   A4:49:10:23:64:10:E7:13:B5:5D:92:52:75:A1:D1:6F:E6:9D:0B:F6
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       09284816
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pEkQI2QQ5xO1XZJSdaHRb-adC_Y.roa
Signing time:             Tue 15 Mar 2022 14:47:21 +0000
ROA not before:           Tue 15 Mar 2022 14:47:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137443
IP address blocks:        46.3.112.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153634838 (0x9284816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Mar 15 14:47:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a44910236410e713b55d925275a1d16fe69d0bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:f4:58:29:23:5c:07:d4:93:fb:0d:9f:e2:
                    fd:98:20:08:de:b3:2f:8a:d8:cf:69:d7:f2:c8:68:
                    ad:6f:dd:00:d2:62:cd:83:f0:ad:f1:6d:47:1b:16:
                    df:cf:ce:be:ad:b9:d8:0e:35:b9:80:b1:b9:e2:a5:
                    3e:4a:88:53:14:57:6c:36:95:49:ae:d6:e2:a2:31:
                    81:37:4b:09:e7:91:2e:fe:39:9d:0c:c1:c9:ea:1e:
                    f4:6a:39:26:30:de:51:cb:57:13:3a:66:ea:29:fe:
                    c9:b7:d6:ca:d1:14:b9:28:14:40:a4:3a:d7:d3:07:
                    a6:2e:13:4c:a4:6f:11:0f:67:2a:ce:36:cd:c5:c6:
                    a3:78:6c:14:f7:3d:f1:87:37:aa:11:4f:c3:d1:b2:
                    c6:2b:a2:31:bc:46:96:aa:58:b4:36:72:45:47:c7:
                    b0:27:9e:0b:36:57:ca:77:56:b2:09:bd:84:d4:5d:
                    ac:ce:58:26:01:2b:96:0a:13:be:58:4e:c4:79:50:
                    18:f0:72:c0:24:67:bb:dd:70:93:c8:d9:ff:12:d8:
                    8c:e3:c8:fb:31:fd:ba:62:d8:25:d9:bb:79:de:fb:
                    fb:e6:3f:5a:93:1a:66:42:c7:e6:c0:39:93:6c:95:
                    db:be:ec:e6:48:e2:3e:50:fa:df:1b:c5:d1:30:f9:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:10:23:64:10:E7:13:B5:5D:92:52:75:A1:D1:6F:E6:9D:0B:F6
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pEkQI2QQ5xO1XZJSdaHRb-adC_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:c6:7c:54:dc:f4:05:8b:f1:97:c9:1f:c9:3e:f1:b5:a3:
         ae:10:8d:58:d1:80:49:61:4f:c2:f6:6d:a4:cf:1b:41:3b:93:
         15:ad:c3:d5:72:3c:e2:f8:6a:a0:6a:fc:d4:e7:78:f2:90:22:
         df:33:a8:c0:fe:f6:64:31:ee:ee:f3:f7:a1:d0:6f:65:15:41:
         66:e5:32:e4:05:0e:a7:f6:9f:97:27:c6:7d:e3:85:e8:0c:71:
         f6:ae:39:7a:34:87:c7:a9:ce:2d:0b:9c:8c:4f:5d:98:8a:34:
         19:f3:66:98:5e:87:ba:68:7c:62:da:5c:17:42:2e:dd:54:cf:
         0b:68:d6:5e:14:7c:c8:f5:f6:94:e4:79:e0:5c:08:57:b5:c6:
         cf:ae:69:88:e8:66:f2:ef:b5:68:a2:57:4e:5a:a9:8c:cf:c4:
         a8:7d:06:ef:96:ca:ad:2f:26:2a:23:d7:cb:00:4c:17:45:fa:
         79:31:c8:a1:a9:d3:5f:25:f5:50:46:d7:a7:7e:d7:c8:ce:5b:
         0d:6d:66:aa:22:2a:45:f6:bf:ec:02:d7:e5:d5:9f:f7:b2:87:
         d3:f1:de:8f:0c:4e:bf:31:78:d1:d6:a0:9e:44:90:04:a4:10:
         22:58:6e:69:08:62:b3:da:2e:91:9f:f2:8b:a0:f7:81:7a:ea:
         e2:69:2b:c6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECShIFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDMx
NTE0NDcyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQ0OTEwMjM2NDEw
ZTcxM2I1NWQ5MjUyNzVhMWQxNmZlNjlkMGJmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLQ9FgpI1wH1JP7DZ/i/ZggCN6zL4rYz2nX8shorW/dANJi
zYPwrfFtRxsW38/Ovq252A41uYCxueKlPkqIUxRXbDaVSa7W4qIxgTdLCeeRLv45
nQzByeoe9Go5JjDeUctXEzpm6in+ybfWytEUuSgUQKQ619MHpi4TTKRvEQ9nKs42
zcXGo3hsFPc98Yc3qhFPw9GyxiuiMbxGlqpYtDZyRUfHsCeeCzZXyndWsgm9hNRd
rM5YJgErlgoTvlhOxHlQGPBywCRnu91wk8jZ/xLYjOPI+zH9umLYJdm7ed77++Y/
WpMaZkLH5sA5k2yV277s5kjiPlD63xvF0TD5WgkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSkSRAjZBDnE7VdklJ1odFv5p0L9jAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
L3BFa1FJMlFRNXhPMVhaSlNkYUhSYi1hZENfWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS4DcDANBgkqhkiG9w0BAQsFAAOC
AQEADnnGfFTc9AWL8ZfJH8k+8bWjrhCNWNGASWFPwvZtpM8bQTuTFa3D1XI84vhq
oGr81Od48pAi3zOowP72ZDHu7vP3odBvZRVBZuUy5AUOp/aflyfGfeOF6Axx9q45
ejSHx6nOLQucjE9dmIo0GfNmmF6Humh8YtpcF0Iu3VTPC2jWXhR8yPX2lOR54FwI
V7XGz65piOhm8u+1aKJXTlqpjM/EqH0G75bKrS8mKiPXywBMF0X6eTHIoanTXyX1
UEbXp37XyM5bDW1mqiIqRfa/7ALX5dWf97KH0/HejwxOvzF40dagnkSQBKQQIlhu
aQhis9oukZ/yi6D3gXrq4mkrxg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org