Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/wE90s_bcz9SlX7p7wslapgOi-Cg.roa
File:                     wE90s_bcz9SlX7p7wslapgOi-Cg.roa (raw, json)
Hash identifier:          /ie+t5O8gKY+jCmfGUV7DUpmkNuJStnPXRABxIDDhcY=
Subject key identifier:   C0:4F:74:B3:F6:DC:CF:D4:A5:5F:BA:7B:C2:C9:5A:A6:03:A2:F8:28
Certificate issuer:       /CN=6585e9dd5ac9bf6e60005bc3cce55a954c3198cf
Certificate serial:       0183EB8D0CF3C1A8378F7E3FDEFEC78D0B6A
Authority key identifier: 65:85:E9:DD:5A:C9:BF:6E:60:00:5B:C3:CC:E5:5A:95:4C:31:98:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYXp3VrJv25gAFvDzOValUwxmM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/wE90s_bcz9SlX7p7wslapgOi-Cg.roa
Signing time:             Tue 18 Oct 2022 14:43:53 +0000
ROA not before:           Tue 18 Oct 2022 14:43:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60272
IP address blocks:        91.246.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:eb:8d:0c:f3:c1:a8:37:8f:7e:3f:de:fe:c7:8d:0b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6585e9dd5ac9bf6e60005bc3cce55a954c3198cf
        Validity
            Not Before: Oct 18 14:43:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c04f74b3f6dccfd4a55fba7bc2c95aa603a2f828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:43:4c:af:de:e7:b9:e5:f8:56:64:9f:04:
                    82:af:90:61:5e:ec:da:2b:a6:11:78:5f:77:a5:8e:
                    08:fb:c9:84:e9:20:77:99:1b:cb:f7:91:a9:8d:46:
                    79:1f:77:5b:33:2d:d7:45:06:4e:3a:4a:57:fe:35:
                    82:e9:f8:7b:98:e2:64:d1:d6:47:6d:44:4d:af:13:
                    6c:50:fb:eb:07:cf:ea:0e:60:21:a2:b4:6e:97:4b:
                    d2:23:46:56:11:7d:2a:cd:f3:e2:41:e1:5b:d9:07:
                    b5:75:55:b7:a0:d0:2f:a9:b7:41:e7:ed:ad:71:6a:
                    94:40:23:e6:1a:eb:4d:02:73:54:9a:8c:f9:18:cb:
                    55:54:3e:e1:66:a5:62:b4:10:6f:bd:ca:cb:fb:de:
                    d6:34:a2:ae:63:28:0f:0c:93:8b:d7:15:12:91:4d:
                    bf:98:c9:f1:5e:db:7d:4b:27:00:05:cd:3c:f9:ca:
                    58:35:26:0f:f7:3c:9a:5f:6e:b7:57:01:0a:68:f2:
                    10:dc:0a:00:90:73:9c:66:01:2b:b5:57:7b:c8:11:
                    2d:5f:fc:59:76:3e:18:84:0a:90:91:47:20:ab:28:
                    01:aa:6a:63:4d:22:a6:98:e3:72:c6:ef:b5:9b:81:
                    fd:03:c5:71:5f:9c:95:26:1d:1f:d7:d6:74:6c:9f:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:74:B3:F6:DC:CF:D4:A5:5F:BA:7B:C2:C9:5A:A6:03:A2:F8:28
            X509v3 Authority Key Identifier:
                keyid:65:85:E9:DD:5A:C9:BF:6E:60:00:5B:C3:CC:E5:5A:95:4C:31:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYXp3VrJv25gAFvDzOValUwxmM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/wE90s_bcz9SlX7p7wslapgOi-Cg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:1b:ac:05:34:3f:01:1e:19:74:d3:25:9d:35:78:8d:e6:74:
         91:75:7a:ca:02:c8:a4:da:b6:82:1d:db:ac:33:ab:35:17:72:
         9d:d8:23:78:92:06:7d:c2:76:5c:19:b7:33:b1:7e:1c:31:ca:
         19:1e:2b:91:e7:be:f6:f4:28:4a:46:98:69:57:cf:a3:57:14:
         ed:ad:7b:2a:3d:37:6b:1d:ea:09:86:59:f7:c2:32:69:bb:2f:
         3d:ae:85:9a:19:d8:c2:bd:71:b7:ea:0d:d9:09:0e:55:5c:8b:
         98:76:71:a9:b0:8e:90:bc:90:2f:43:92:d9:06:08:e1:0e:c2:
         6d:7c:1c:c8:f9:65:fc:c5:da:6d:52:fd:84:12:40:b9:0b:e6:
         5d:0c:6f:45:2d:6d:8d:6f:3e:40:85:de:7b:d9:e6:58:2e:03:
         6f:2e:45:3d:a5:ab:bc:41:c8:5d:c1:48:d2:58:b8:cc:8c:55:
         f0:8d:81:54:07:7e:7d:b6:5a:0b:f2:4c:5c:40:86:99:f8:9c:
         d7:04:9f:56:aa:2c:9b:cc:51:49:b8:83:a4:81:46:a5:32:b1:
         69:e4:b8:bb:19:e3:72:51:c5:28:be:13:f3:fe:d8:a6:ef:2f:
         ed:24:5e:8c:f9:ef:0f:13:29:91:cc:dd:39:8d:ef:2e:dc:ea:
         1e:38:aa:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPrjQzzwag3j34/3v7HjQtqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODVlOWRkNWFjOWJmNmU2MDAwNWJjM2NjZTU1YTk1NGMz
MTk4Y2YwHhcNMjIxMDE4MTQ0MzUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDRmNzRiM2Y2ZGNjZmQ0YTU1ZmJhN2JjMmM5NWFhNjAzYTJmODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7NDTK/e57nl+FZknwSCr5BhXuza
K6YReF93pY4I+8mE6SB3mRvL95GpjUZ5H3dbMy3XRQZOOkpX/jWC6fh7mOJk0dZH
bURNrxNsUPvrB8/qDmAhorRul0vSI0ZWEX0qzfPiQeFb2Qe1dVW3oNAvqbdB5+2t
cWqUQCPmGutNAnNUmoz5GMtVVD7hZqVitBBvvcrL+97WNKKuYygPDJOL1xUSkU2/
mMnxXtt9SycABc08+cpYNSYP9zyaX263VwEKaPIQ3AoAkHOcZgErtVd7yBEtX/xZ
dj4YhAqQkUcgqygBqmpjTSKmmONyxu+1m4H9A8VxX5yVJh0f19Z0bJ9pzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMBPdLP23M/UpV+6e8LJWqYDovgoMB8GA1UdIwQY
MBaAFGWF6d1ayb9uYABbw8zlWpVMMZjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllYcDNWckp2MjVnQUZ2RHpPVmFsVXd4bU04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjdlZTAtMTMwYy00ZmFiLWJmOWQt
OGJhMzZjMTZjMDhkLzEvd0U5MHNfYmN6OVNsWDdwN3dzbGFwZ09pLUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjdlZTAtMTMwYy00ZmFiLWJmOWQtOGJhMzZjMTZjMDhk
LzEvWllYcDNWckp2MjVnQUZ2RHpPVmFsVXd4bU04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/bKMA0G
CSqGSIb3DQEBCwUAA4IBAQCSG6wFND8BHhl00yWdNXiN5nSRdXrKAsik2raCHdus
M6s1F3Kd2CN4kgZ9wnZcGbczsX4cMcoZHiuR57729ChKRphpV8+jVxTtrXsqPTdr
HeoJhln3wjJpuy89roWaGdjCvXG36g3ZCQ5VXIuYdnGpsI6QvJAvQ5LZBgjhDsJt
fBzI+WX8xdptUv2EEkC5C+ZdDG9FLW2Nbz5Ahd572eZYLgNvLkU9pau8QchdwUjS
WLjMjFXwjYFUB359tloL8kxcQIaZ+JzXBJ9WqiybzFFJuIOkgUalMrFp5Li7GeNy
UcUovhPz/tim7y/tJF6M+e8PEymRzN05je8u3OoeOKoY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org