Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Et2YeQPEuM-LeBvkCIEqKHauGtk.roa
File:                     Et2YeQPEuM-LeBvkCIEqKHauGtk.roa (raw, json)
Hash identifier:          u2WfXFzKd8KHzBdvwsTN2SHbb2ljQU711P2mefqv26U=
Subject key identifier:   12:DD:98:79:03:C4:B8:CF:8B:78:1B:E4:08:81:2A:28:76:AE:1A:D9
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       01822541C61B69A6BD0EE5BF7B9317D8BA97
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Et2YeQPEuM-LeBvkCIEqKHauGtk.roa
Signing time:             Fri 22 Jul 2022 09:34:03 +0000
ROA not before:           Fri 22 Jul 2022 09:34:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397373
IP address blocks:        193.135.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:25:41:c6:1b:69:a6:bd:0e:e5:bf:7b:93:17:d8:ba:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Jul 22 09:34:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12dd987903c4b8cf8b781be408812a2876ae1ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:ff:ff:d3:5e:ce:b8:fa:68:59:fc:69:30:
                    26:14:77:6f:1c:53:fd:8e:54:76:4a:25:76:8f:8c:
                    7f:64:29:b0:f8:34:14:d4:dd:fa:04:32:69:a0:72:
                    c9:ae:27:ea:16:14:a1:ab:0c:13:8f:22:77:4c:54:
                    b6:d9:ae:56:47:9e:ba:25:46:67:f8:72:75:ae:75:
                    e7:d1:f5:7b:84:8a:40:c0:e3:4d:f5:35:5d:99:0f:
                    6b:e3:77:09:5b:01:1d:72:8d:9c:9c:e7:72:fb:91:
                    00:50:4f:57:5b:70:79:77:4e:96:f7:f9:5a:42:65:
                    80:6b:5e:d4:b4:ff:a5:a0:49:6a:99:e2:7f:43:f9:
                    35:92:d4:59:ff:b1:df:5b:85:49:ff:3d:af:68:48:
                    81:37:7a:5c:fe:17:99:ce:bd:94:dc:72:dc:45:da:
                    84:29:aa:7c:8d:b7:91:fa:11:7f:21:58:1e:bd:47:
                    0c:9f:0b:ee:f4:5f:07:69:cb:a6:aa:b1:98:8b:ba:
                    3e:b9:81:5a:a3:5d:53:1c:a6:1d:94:43:4c:e0:e4:
                    1f:ea:41:2e:8d:cc:3d:06:4c:a9:7f:9f:76:d4:41:
                    b6:d2:2d:6a:b1:82:a4:90:27:f0:4c:4b:9e:10:e8:
                    76:52:c1:74:47:ba:c8:09:e7:5d:06:36:c8:0c:35:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DD:98:79:03:C4:B8:CF:8B:78:1B:E4:08:81:2A:28:76:AE:1A:D9
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Et2YeQPEuM-LeBvkCIEqKHauGtk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:c0:5e:fa:86:94:5c:81:49:9c:55:ce:53:ef:aa:5c:47:
         c7:e4:29:9f:32:9a:d8:83:ef:c8:00:0d:bd:bd:23:62:0a:ab:
         77:d8:8a:53:f4:eb:c8:c3:f3:3c:ea:e9:cd:ff:4f:fe:24:e2:
         8e:69:3b:58:a4:e3:f3:db:a3:a1:84:6b:eb:ea:df:66:d2:d5:
         6d:11:07:f4:28:38:a0:92:85:25:f5:3d:d5:8f:45:96:d7:d4:
         70:b0:e5:2c:34:5e:79:64:a6:0d:68:1e:3f:d1:02:24:27:22:
         2b:c5:9f:08:af:52:fd:eb:0b:9a:cd:2b:67:23:26:e8:4e:98:
         e9:7d:c3:35:5e:ff:95:8a:bc:21:c6:4a:01:1f:df:45:18:a1:
         f2:5c:f2:44:3d:14:86:41:27:67:fa:83:bf:02:11:37:32:d8:
         e0:85:2e:dc:e9:9e:db:48:cd:a7:72:ae:d6:1b:2d:ec:fb:58:
         8e:cc:56:07:e1:59:2d:a8:5b:99:42:09:ea:95:0d:e9:26:46:
         ba:2a:8f:c1:56:5c:e3:9c:df:aa:57:33:6a:2e:ab:af:36:0b:
         75:5b:50:47:97:e2:7c:b3:69:48:47:fe:c4:1c:7b:fc:09:48:
         c2:b5:7f:59:0a:9c:44:d6:c1:70:7f:a1:9d:d1:f4:95:9e:80:
         a0:9f:ba:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIlQcYbaaa9DuW/e5MX2LqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjIwNzIyMDkzNDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmRkOTg3OTAzYzRiOGNmOGI3ODFiZTQwODgxMmEyODc2YWUxYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV///9Nezrj6aFn8aTAmFHdvHFP9
jlR2SiV2j4x/ZCmw+DQU1N36BDJpoHLJrifqFhShqwwTjyJ3TFS22a5WR566JUZn
+HJ1rnXn0fV7hIpAwONN9TVdmQ9r43cJWwEdco2cnOdy+5EAUE9XW3B5d06W9/la
QmWAa17UtP+loElqmeJ/Q/k1ktRZ/7HfW4VJ/z2vaEiBN3pc/heZzr2U3HLcRdqE
Kap8jbeR+hF/IVgevUcMnwvu9F8HacumqrGYi7o+uYFao11THKYdlENM4OQf6kEu
jcw9Bkypf5921EG20i1qsYKkkCfwTEueEOh2UsF0R7rICeddBjbIDDVzCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLdmHkDxLjPi3gb5AiBKih2rhrZMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvRXQyWWVRUEV1TS1MZUJ2a0NJRXFLSGF1R3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYeuMA0G
CSqGSIb3DQEBCwUAA4IBAQAWzMBe+oaUXIFJnFXOU++qXEfH5CmfMprYg+/IAA29
vSNiCqt32IpT9OvIw/M86unN/0/+JOKOaTtYpOPz26OhhGvr6t9m0tVtEQf0KDig
koUl9T3Vj0WW19RwsOUsNF55ZKYNaB4/0QIkJyIrxZ8Ir1L96wuazStnIyboTpjp
fcM1Xv+VirwhxkoBH99FGKHyXPJEPRSGQSdn+oO/AhE3MtjghS7c6Z7bSM2ncq7W
Gy3s+1iOzFYH4VktqFuZQgnqlQ3pJka6Ko/BVlzjnN+qVzNqLquvNgt1W1BHl+J8
s2lIR/7EHHv8CUjCtX9ZCpxE1sFwf6Gd0fSVnoCgn7rF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:42 2023 by rpki-client on console-ams.rpki-client.org