Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/MSJm6uhXIt-1PYvUeLuFLecfNHk.roa
File:                     MSJm6uhXIt-1PYvUeLuFLecfNHk.roa (raw, json)
Hash identifier:          G7zhFu0vZJooA84xLnKMxXlVXNyDPCJvtep03oFMO9w=
Subject key identifier:   31:22:66:EA:E8:57:22:DF:B5:3D:8B:D4:78:BB:85:2D:E7:1F:34:79
Certificate issuer:       /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial:       120223
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/MSJm6uhXIt-1PYvUeLuFLecfNHk.roa
Signing time:             Tue 14 Jun 2022 18:08:44 +0000
ROA not before:           Tue 14 Jun 2022 18:08:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15830
IP address blocks:        5.57.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180195 (0x120223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
        Validity
            Not Before: Jun 14 18:08:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=312266eae85722dfb53d8bd478bb852de71f3479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:3f:53:9d:84:22:ff:00:90:f7:97:f4:10:
                    56:3b:77:08:49:e6:c2:37:42:a0:3a:33:ab:b2:58:
                    32:0b:78:07:fe:30:0f:f6:4c:dd:5e:0c:02:27:86:
                    b4:a7:97:be:8e:b4:bf:43:e9:17:d2:44:48:8d:16:
                    e3:70:db:3e:37:fd:7c:f9:ff:06:17:7b:42:c5:04:
                    cd:a4:54:c0:90:99:4e:b7:ad:2f:d4:d9:91:42:f9:
                    26:a2:e5:c8:60:c8:0b:92:04:bc:87:6e:a6:1c:71:
                    30:38:91:a8:9a:ca:9e:50:17:d9:44:4e:83:d9:a5:
                    09:bf:cb:73:c6:ed:16:e1:7a:60:c2:fa:a2:12:ae:
                    75:a6:9f:13:fa:e2:71:81:69:74:f9:9d:98:a1:84:
                    12:02:cb:de:6b:1e:de:2f:b2:10:2e:9e:b1:66:40:
                    ea:58:eb:cd:9f:cb:42:78:6c:ca:7b:a9:90:82:28:
                    12:f4:70:10:29:ee:7f:12:2f:1b:49:db:7a:10:ba:
                    d2:27:c9:a2:97:7b:8e:20:65:00:b9:dc:74:c4:09:
                    86:82:b2:7d:c1:44:34:85:03:05:de:ce:7a:cd:86:
                    b8:f5:51:22:e6:52:38:41:e6:1f:ec:5a:3a:49:bc:
                    e3:79:26:76:f1:6a:d1:b3:0f:e8:84:5b:2a:ec:a5:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:22:66:EA:E8:57:22:DF:B5:3D:8B:D4:78:BB:85:2D:E7:1F:34:79
            X509v3 Authority Key Identifier:
                keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/MSJm6uhXIt-1PYvUeLuFLecfNHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:47:83:92:b2:0f:96:e7:f4:1c:a4:f5:e6:9a:18:34:49:11:
         66:9e:1e:41:3b:41:24:1e:16:b1:a1:fe:96:61:ae:11:7a:bc:
         68:1f:c5:75:7c:5b:15:ee:41:55:7b:19:2a:85:69:e5:cf:c2:
         05:c7:d1:1f:f6:59:7c:ac:a5:14:2b:4f:fa:17:38:32:e9:fe:
         b1:de:df:67:7a:37:a4:24:cc:a7:ee:54:25:e3:de:ae:08:b6:
         aa:07:11:8e:45:e6:51:b4:2f:3a:61:c1:34:ff:1d:72:f1:e3:
         9a:d2:92:fa:f1:2f:ad:2e:d6:67:d4:1b:72:f5:1e:48:9a:c3:
         9a:7e:ba:8a:f9:74:0e:40:11:a5:c9:76:13:27:04:18:9f:57:
         ea:1a:00:61:b5:54:b9:d8:cf:bf:01:96:d7:d2:09:40:20:0e:
         66:73:e5:b7:61:8a:8f:77:96:12:c7:ee:86:4e:3f:6e:9d:e2:
         e3:d9:fd:e1:b1:40:59:eb:91:6e:39:70:f0:0a:d7:30:db:2e:
         b6:76:19:62:c9:67:42:ab:e6:56:ba:bf:c3:18:93:fc:4a:e0:
         1b:9b:7a:3d:3d:3a:7f:b4:be:63:7c:dc:cc:43:35:10:aa:9c:
         c4:17:44:7b:1d:f4:6d:1b:22:bd:2d:36:3a:73:37:47:c6:20:
         6c:35:33:6d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDEgIjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
ZmYwYmVjM2MzMzdiNDdkZGNmMzY2ZjQzMDE1MDNiZTc4M2Q3OTgwHhcNMjIwNjE0
MTgwODQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMTIyNjZlYWU4NTcy
MmRmYjUzZDhiZDQ3OGJiODUyZGU3MWYzNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4so/U52EIv8AkPeX9BBWO3cISebCN0KgOjOrslgyC3gH/jAP
9kzdXgwCJ4a0p5e+jrS/Q+kX0kRIjRbjcNs+N/18+f8GF3tCxQTNpFTAkJlOt60v
1NmRQvkmouXIYMgLkgS8h26mHHEwOJGomsqeUBfZRE6D2aUJv8tzxu0W4Xpgwvqi
Eq51pp8T+uJxgWl0+Z2YoYQSAsveax7eL7IQLp6xZkDqWOvNn8tCeGzKe6mQgigS
9HAQKe5/Ei8bSdt6ELrSJ8mil3uOIGUAudx0xAmGgrJ9wUQ0hQMF3s56zYa49VEi
5lI4QeYf7Fo6SbzjeSZ28WrRsw/ohFsq7KX02wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDEiZuroVyLftT2L1Hi7hS3nHzR5MB8GA1UdIwQYMBaAFAf/C+w8M3tH3c82
b0MBUDvng9eYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Ql84TDdEd3plMGZkenpadlF3RlFPLWVEMTVnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83MS83MDVlYWItNmVhYy00ZmY4LWI2YzYtNzAyMDNiZjM1NmZkLzEv
TVNKbTZ1aFhJdC0xUFl2VWVMdUZMZWNmTkhrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83
MDVlYWItNmVhYy00ZmY4LWI2YzYtNzAyMDNiZjM1NmZkLzEvQl84TDdEd3plMGZk
enpadlF3RlFPLWVEMTVnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTnXMA0GCSqGSIb3DQEBCwUAA4IB
AQBqR4OSsg+W5/QcpPXmmhg0SRFmnh5BO0EkHhaxof6WYa4RerxoH8V1fFsV7kFV
exkqhWnlz8IFx9Ef9ll8rKUUK0/6Fzgy6f6x3t9nejekJMyn7lQl496uCLaqBxGO
ReZRtC86YcE0/x1y8eOa0pL68S+tLtZn1Bty9R5ImsOafrqK+XQOQBGlyXYTJwQY
n1fqGgBhtVS52M+/AZbX0glAIA5mc+W3YYqPd5YSx+6GTj9uneLj2f3hsUBZ65Fu
OXDwCtcw2y62dhliyWdCq+ZWur/DGJP8SuAbm3o9PTp/tL5jfNzMQzUQqpzEF0R7
HfRtGyK9LTY6czdHxiBsNTNt
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:32 2023 by rpki-client on console.sobornost.net