Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/7ViIkQrbK1yywn7zzfP208pG6sU.roa
File:                     7ViIkQrbK1yywn7zzfP208pG6sU.roa (raw, json)
Hash identifier:          sd9oUSqR7eukwbM0bopbXknNFaV7SO96jjA7FZCRTyQ=
Subject key identifier:   ED:58:88:91:0A:DB:2B:5C:B2:C2:7E:F3:CD:F3:F6:D3:CA:46:EA:C5
Certificate issuer:       /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial:       01856270DC05B7686318FF5018CE0F202C83
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/7ViIkQrbK1yywn7zzfP208pG6sU.roa
Signing time:             Fri 30 Dec 2022 09:50:41 +0000
ROA not before:           Fri 30 Dec 2022 09:50:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24920
IP address blocks:        193.111.122.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:70:dc:05:b7:68:63:18:ff:50:18:ce:0f:20:2c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
        Validity
            Not Before: Dec 30 09:50:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed5888910adb2b5cb2c27ef3cdf3f6d3ca46eac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:2a:6c:85:b4:f2:4c:46:8b:f7:61:f9:e2:
                    7e:9b:f4:02:22:90:93:7a:0d:af:e8:38:79:b0:9f:
                    30:d9:70:bf:75:9c:15:6e:37:f9:b5:ff:49:77:56:
                    cb:c5:f9:81:76:d9:2f:3d:15:98:47:6c:ab:4d:27:
                    89:e6:3b:69:8a:93:df:a1:71:d0:67:63:cc:3f:b5:
                    9d:5a:27:81:65:9c:55:ff:78:d7:7f:fe:79:1e:27:
                    6b:89:4d:df:5c:08:09:76:00:f1:56:75:26:94:ac:
                    90:aa:0a:35:ff:d4:2b:df:b2:99:16:1b:a0:e0:71:
                    26:8a:f6:51:5f:04:aa:4e:b2:09:83:43:c5:af:5c:
                    ff:f1:48:87:de:c9:20:cd:f0:f0:bf:a7:a9:49:60:
                    87:a7:12:fa:d0:44:35:29:4c:ab:ba:20:82:31:21:
                    6d:8e:05:88:72:6f:89:16:95:ad:46:27:db:68:fa:
                    ea:0e:40:0e:43:e2:99:d9:22:5a:9d:d9:9b:6f:f4:
                    39:34:82:d0:df:16:64:13:db:5e:1b:88:fc:94:be:
                    59:44:67:82:b7:5b:21:1d:25:37:e9:2e:d0:9e:5f:
                    95:0c:65:3a:85:79:72:f8:a3:9e:5b:30:d9:eb:44:
                    7c:2b:01:70:39:89:62:70:ed:09:64:82:de:9d:90:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:58:88:91:0A:DB:2B:5C:B2:C2:7E:F3:CD:F3:F6:D3:CA:46:EA:C5
            X509v3 Authority Key Identifier:
                keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/7ViIkQrbK1yywn7zzfP208pG6sU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:46:ce:0a:81:1c:71:2f:ed:ac:c5:02:97:df:0b:b5:86:46:
         08:5e:34:26:f3:8a:3e:38:df:80:2e:9a:47:c1:4b:6a:0c:3f:
         aa:81:43:31:67:b0:08:de:fc:30:8b:f5:8a:e0:51:0d:81:53:
         a4:1b:c1:3a:89:07:c8:87:c7:91:42:16:a9:6f:bb:f0:33:c8:
         40:02:22:ba:1c:ac:21:07:a8:3a:c0:6e:24:14:bd:99:de:a9:
         49:c1:e4:36:4c:b1:d9:ac:74:b2:90:d6:4e:4e:10:c2:b2:15:
         fb:c8:47:c7:b9:0b:22:f8:01:c3:26:fa:9a:d4:26:1e:d2:a2:
         8d:30:dd:76:df:34:62:6b:c2:19:ea:c4:97:b3:ea:41:b7:1e:
         15:d2:83:f1:5d:b1:66:98:0c:9e:6f:ef:f0:02:03:3d:9b:56:
         ae:ab:f5:63:55:b2:06:b9:e7:6c:aa:1d:5b:50:45:b9:33:d5:
         ee:2d:a8:d5:45:74:03:7d:0c:0d:d2:24:77:18:f8:ac:07:d5:
         50:af:dc:11:34:da:51:bb:2c:f3:4f:1e:10:cf:47:43:00:28:
         4b:3b:ef:7f:c4:82:08:ae:0a:55:95:ca:f2:d3:83:42:88:35:
         ce:50:c2:61:b0:32:4a:73:0f:f7:7c:58:39:0f:78:28:46:1d:
         a9:d0:b2:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVicNwFt2hjGP9QGM4PICyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZWEyODM2MzVjYjNiZDE1MjNhODVkZGM5Y2FmNTMwNTY4
ZDJmODEwHhcNMjIxMjMwMDk1MDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDU4ODg5MTBhZGIyYjVjYjJjMjdlZjNjZGYzZjZkM2NhNDZlYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDoqbIW08kxGi/dh+eJ+m/QCIpCT
eg2v6Dh5sJ8w2XC/dZwVbjf5tf9Jd1bLxfmBdtkvPRWYR2yrTSeJ5jtpipPfoXHQ
Z2PMP7WdWieBZZxV/3jXf/55HidriU3fXAgJdgDxVnUmlKyQqgo1/9Qr37KZFhug
4HEmivZRXwSqTrIJg0PFr1z/8UiH3skgzfDwv6epSWCHpxL60EQ1KUyruiCCMSFt
jgWIcm+JFpWtRifbaPrqDkAOQ+KZ2SJandmbb/Q5NILQ3xZkE9teG4j8lL5ZRGeC
t1shHSU36S7Qnl+VDGU6hXly+KOeWzDZ60R8KwFwOYlicO0JZILenZDu1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1YiJEK2ytcssJ+883z9tPKRurFMB8GA1UdIwQY
MBaAFJXqKDY1yzvRUjqF3cnK9TBWjS+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVvb05qWExPOUZTT29YZHljcjFNRmFOTDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81YjQ2YmItMGFmNC00N2Q2LWE0Yjgt
N2JhMjY4NmVhNTE4LzEvN1ZpSWtRcmJLMXl5d243enpmUDIwOHBHNnNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi81YjQ2YmItMGFmNC00N2Q2LWE0YjgtN2JhMjY4NmVhNTE4
LzEvbGVvb05qWExPOUZTT29YZHljcjFNRmFOTDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW96MA0G
CSqGSIb3DQEBCwUAA4IBAQBhRs4KgRxxL+2sxQKX3wu1hkYIXjQm84o+ON+ALppH
wUtqDD+qgUMxZ7AI3vwwi/WK4FENgVOkG8E6iQfIh8eRQhapb7vwM8hAAiK6HKwh
B6g6wG4kFL2Z3qlJweQ2TLHZrHSykNZOThDCshX7yEfHuQsi+AHDJvqa1CYe0qKN
MN123zRia8IZ6sSXs+pBtx4V0oPxXbFmmAyeb+/wAgM9m1auq/VjVbIGuedsqh1b
UEW5M9XuLajVRXQDfQwN0iR3GPisB9VQr9wRNNpRuyzzTx4Qz0dDAChLO+9/xIII
rgpVlcry04NCiDXOUMJhsDJKcw/3fFg5D3goRh2p0LJB
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net