Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5g69DTwUyI-VLp2Ct1EnDj16OkA.roa
File:                     5g69DTwUyI-VLp2Ct1EnDj16OkA.roa (raw, json)
Hash identifier:          hkUfNkHqXBgUmQXXvFoNjw+x8VlL+X/SclRFPwsfJMo=
Subject key identifier:   E6:0E:BD:0D:3C:14:C8:8F:95:2E:9D:82:B7:51:27:0E:3D:7A:3A:40
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       0295F574
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5g69DTwUyI-VLp2Ct1EnDj16OkA.roa
Signing time:             Fri 11 Feb 2022 12:25:13 +0000
ROA not before:           Fri 11 Feb 2022 12:25:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15723
IP address blocks:        164.215.103.0/24 maxlen: 24
                          164.215.101.0/24 maxlen: 24
                          164.215.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43382132 (0x295f574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Feb 11 12:25:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e60ebd0d3c14c88f952e9d82b751270e3d7a3a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:81:45:d3:33:07:0c:dc:3b:4a:6b:33:9a:
                    c1:8e:29:9d:46:9e:fb:ce:eb:fc:c2:be:21:ca:99:
                    18:50:f9:36:68:42:d7:6f:8a:05:d5:ba:49:08:5b:
                    1b:7b:af:3c:72:67:a8:82:7c:22:e1:54:c3:03:a5:
                    b9:17:53:21:90:d9:3d:7d:d1:ec:9a:4b:c6:bf:50:
                    f4:2f:e8:b5:c8:11:8c:71:67:79:a5:fa:78:91:cc:
                    0a:8c:bb:8e:35:41:e1:b7:09:72:23:24:d1:01:55:
                    52:6b:89:0e:8c:3b:07:d1:8a:43:31:87:5a:fa:f2:
                    b7:f2:ec:da:d3:fc:c3:18:82:5a:10:68:40:ee:84:
                    86:ed:1a:ad:75:4c:26:b5:e4:96:16:aa:3f:f8:4a:
                    b3:9a:2c:d7:0a:da:7b:f2:1e:fa:d1:15:16:1a:57:
                    5a:68:65:a1:a9:28:17:24:d9:fe:a3:6d:93:ee:87:
                    1a:be:02:7f:3d:06:a7:df:50:00:33:c3:86:4c:b9:
                    67:24:aa:47:de:c3:4c:3b:85:89:06:e8:4f:91:ea:
                    a4:41:65:19:63:a0:1d:1e:0f:81:52:39:d4:16:50:
                    ac:83:36:a7:a2:cc:ed:68:0e:ef:a9:5e:6a:bc:40:
                    97:82:db:2b:54:1a:da:98:b8:6a:e2:79:ba:36:c0:
                    ce:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:BD:0D:3C:14:C8:8F:95:2E:9D:82:B7:51:27:0E:3D:7A:3A:40
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5g69DTwUyI-VLp2Ct1EnDj16OkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.215.100.0/23
                  164.215.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:a6:d9:61:c9:ab:0a:ea:9d:81:cb:2c:b7:db:04:0d:04:
         ab:91:44:b1:4e:af:0f:4a:29:dc:1c:fe:f2:0e:8f:1e:d5:4f:
         c7:15:67:84:f6:70:14:0d:42:d8:4d:8b:70:c5:fc:a3:12:56:
         0f:1b:4c:ad:f6:bb:1d:98:ba:77:6c:b4:5c:85:5e:4a:bd:7c:
         b4:03:38:fe:73:2a:2e:91:06:67:e1:90:fb:1a:8e:f4:0a:8b:
         ae:85:5d:c1:ef:43:3c:be:8a:6b:5b:5e:4e:49:a8:18:5d:fe:
         f6:fb:da:f7:49:7c:23:60:16:39:cb:48:b3:a0:f2:f8:63:4e:
         44:4a:dc:13:d8:92:aa:1e:28:67:eb:66:3d:18:c8:e9:1b:06:
         e9:87:c5:88:e6:46:ff:14:98:1f:d6:ec:de:aa:cd:12:fd:e0:
         4d:f1:cf:f3:24:00:c8:2a:1b:92:cd:23:84:55:4e:e5:87:13:
         10:f3:64:36:2c:75:3b:a6:14:08:a4:f3:1f:3f:c3:2b:98:ce:
         a8:fe:56:40:07:f4:39:f8:36:31:64:db:74:09:fa:45:db:1c:
         89:c0:99:d4:e9:73:b4:a2:ff:d7:71:e6:3e:87:d0:35:ca:25:
         3c:21:db:19:18:df:24:ea:12:81:68:7e:5c:1c:1a:74:cd:dd:
         99:60:99:0c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEApX1dDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMB4XDTIyMDIx
MTEyMjUxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTYwZWJkMGQzYzE0
Yzg4Zjk1MmU5ZDgyYjc1MTI3MGUzZDdhM2E0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsogUXTMwcM3DtKazOawY4pnUae+87r/MK+IcqZGFD5NmhC
12+KBdW6SQhbG3uvPHJnqIJ8IuFUwwOluRdTIZDZPX3R7JpLxr9Q9C/otcgRjHFn
eaX6eJHMCoy7jjVB4bcJciMk0QFVUmuJDow7B9GKQzGHWvryt/Ls2tP8wxiCWhBo
QO6Ehu0arXVMJrXklhaqP/hKs5os1wrae/Ie+tEVFhpXWmhloakoFyTZ/qNtk+6H
Gr4Cfz0Gp99QADPDhky5ZySqR97DTDuFiQboT5HqpEFlGWOgHR4PgVI51BZQrIM2
p6LM7WgO76learxAl4LbK1Qa2pi4auJ5ujbAzqECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTmDr0NPBTIj5UunYK3UScOPXo6QDAfBgNVHSMEGDAWgBR9BqQrskRuUfGS
6jdb337sWlHHfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8x
LzVnNjlEVHdVeUktVkxwMkN0MUVuRGoxNk9rQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxI
eGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAaTXZAMEAKTXZzANBgkqhkiG9w0B
AQsFAAOCAQEAXJWm2WHJqwrqnYHLLLfbBA0Eq5FEsU6vD0op3Bz+8g6PHtVPxxVn
hPZwFA1C2E2LcMX8oxJWDxtMrfa7HZi6d2y0XIVeSr18tAM4/nMqLpEGZ+GQ+xqO
9AqLroVdwe9DPL6Ka1teTkmoGF3+9vva90l8I2AWOctIs6Dy+GNORErcE9iSqh4o
Z+tmPRjI6RsG6YfFiOZG/xSYH9bs3qrNEv3gTfHP8yQAyCobks0jhFVO5YcTEPNk
Nix1O6YUCKTzHz/DK5jOqP5WQAf0Ofg2MWTbdAn6RdscicCZ1OlztKL/13HmPofQ
NcolPCHbGRjfJOoSgWh+XBwadM3dmWCZDA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org