Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/t_Fk2mXwBSx3-2Tq9mY13Z5oy6Q.roa
File:                     t_Fk2mXwBSx3-2Tq9mY13Z5oy6Q.roa (raw, json)
Hash identifier:          mONlIYq3+Yxh5+xNvLNPAW9wsWl3y+oq9Sa7nFJ41Ko=
Subject key identifier:   B7:F1:64:DA:65:F0:05:2C:77:FB:64:EA:F6:66:35:DD:9E:68:CB:A4
Certificate issuer:       /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial:       02D3AD9E
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/t_Fk2mXwBSx3-2Tq9mY13Z5oy6Q.roa
Signing time:             Sat 01 Jan 2022 11:03:41 +0000
ROA not before:           Sat 01 Jan 2022 11:03:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197441
IP address blocks:        46.23.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47426974 (0x2d3ad9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
        Validity
            Not Before: Jan  1 11:03:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7f164da65f0052c77fb64eaf66635dd9e68cba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:dd:73:64:62:99:87:e8:ca:81:2b:8c:a8:a8:
                    a6:f3:2b:ed:fe:18:16:8b:db:e0:6a:c0:12:84:25:
                    44:48:f7:0c:e9:4c:b0:90:d1:ea:03:d0:39:a7:bd:
                    ca:42:21:3a:23:90:9a:34:6f:27:27:5a:24:89:5e:
                    0f:ea:9c:69:93:bb:c6:96:08:cc:7a:3f:34:c4:22:
                    29:18:56:bb:72:b4:7a:dd:03:a0:f2:86:6e:5a:99:
                    40:db:d0:cf:f7:0c:47:b4:66:12:1c:79:f6:19:20:
                    64:1d:04:93:5a:54:7e:1d:89:bd:d1:17:ec:29:de:
                    ed:3c:73:d3:97:79:1c:eb:a8:ef:50:7f:16:2a:41:
                    7d:8f:5d:2b:bf:c5:90:3f:ba:e6:17:f6:07:57:7b:
                    b7:c4:4c:e1:c1:1f:62:ad:3a:3d:c1:5e:ed:75:d9:
                    28:0e:c1:9c:eb:02:7a:48:7c:f7:72:51:75:e7:b9:
                    8a:35:ce:1f:4d:2f:eb:27:22:38:69:ed:84:56:18:
                    05:cf:67:8b:2e:5b:8d:fa:f7:d4:60:1f:bd:9e:ba:
                    8a:4b:50:39:2a:a2:90:a1:5e:e7:95:4f:fd:44:94:
                    b3:34:8c:ca:dc:77:c8:1a:16:bc:99:dc:43:7e:e1:
                    e8:47:ec:63:db:3f:41:b8:65:fd:a5:56:a2:c3:f9:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:64:DA:65:F0:05:2C:77:FB:64:EA:F6:66:35:DD:9E:68:CB:A4
            X509v3 Authority Key Identifier:
                keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/t_Fk2mXwBSx3-2Tq9mY13Z5oy6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.23.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:26:b6:2e:ce:55:5f:87:4f:18:ba:de:e3:8c:bc:cb:8f:56:
         c8:bf:83:e2:3e:86:cf:82:41:36:14:63:74:9b:b6:00:80:fd:
         52:78:4d:7f:2c:2f:1d:22:27:5a:65:43:18:6f:90:fd:23:b5:
         47:bc:76:36:e7:4a:1e:4d:22:cd:07:3a:6a:01:e8:4e:e8:a0:
         97:65:10:57:47:4f:f3:1e:85:99:2d:8b:b0:21:6d:1b:8d:45:
         5f:4c:a4:16:10:e9:b7:ab:5b:47:6c:7f:aa:87:d6:29:63:a5:
         3d:09:48:8a:93:f7:eb:e7:5c:19:b7:81:fb:71:f9:ab:6f:88:
         9a:c6:9f:f7:2c:dd:f2:d7:85:a0:23:b3:fa:58:5b:ab:d9:35:
         b6:91:a5:62:fe:73:f5:02:2e:00:76:2a:bb:6a:55:6f:42:3b:
         a7:fc:a2:cb:a2:fd:c7:8c:c9:ee:6c:ae:ac:98:05:2d:e9:81:
         df:2e:46:10:c5:ab:47:36:1b:92:61:97:9d:8b:0d:b6:1d:57:
         1a:95:82:e0:66:6d:11:d8:3b:07:90:51:30:dc:67:e1:65:ae:
         52:71:67:1d:3a:d4:a5:d5:bd:ee:32:e6:ff:50:6f:9c:0c:cb:
         91:d0:12:81:da:b9:25:9e:d6:df:16:ac:5c:21:a3:f9:1f:ea:
         01:3d:3b:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAtOtnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
N2Y0OTAyZDI0MGIyNWQ3ZWI3N2Y0ZjAyZTI0ZjIzM2Y0NGE5YTEzMB4XDTIyMDEw
MTExMDM0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjdmMTY0ZGE2NWYw
MDUyYzc3ZmI2NGVhZjY2NjM1ZGQ5ZTY4Y2JhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPXdc2RimYfoyoErjKiopvMr7f4YFovb4GrAEoQlREj3DOlM
sJDR6gPQOae9ykIhOiOQmjRvJydaJIleD+qcaZO7xpYIzHo/NMQiKRhWu3K0et0D
oPKGblqZQNvQz/cMR7RmEhx59hkgZB0Ek1pUfh2JvdEX7Cne7Txz05d5HOuo71B/
FipBfY9dK7/FkD+65hf2B1d7t8RM4cEfYq06PcFe7XXZKA7BnOsCekh893JRdee5
ijXOH00v6yciOGnthFYYBc9niy5bjfr31GAfvZ66iktQOSqikKFe55VP/USUszSM
ytx3yBoWvJncQ37h6EfsY9s/Qbhl/aVWosP5fR0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS38WTaZfAFLHf7ZOr2ZjXdnmjLpDAfBgNVHSMEGDAWgBT39JAtJAsl1+t3
9PAuJPIz9EqaEzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlfU1FMU1FMSmRmcmRfVHdMaVR5TV9SS21oTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvYzZhNGZlLWE3NjAtNGM0Yy04MWIwLTUzYWI4OGM1ZjJjNy8x
L3RfRmsybVh3QlN4My0yVHE5bVkxM1o1b3k2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
YzZhNGZlLWE3NjAtNGM0Yy04MWIwLTUzYWI4OGM1ZjJjNy8xLzlfU1FMU1FMSmRm
cmRfVHdMaVR5TV9SS21oTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4XADANBgkqhkiG9w0BAQsFAAOC
AQEALia2Ls5VX4dPGLre44y8y49WyL+D4j6Gz4JBNhRjdJu2AID9UnhNfywvHSIn
WmVDGG+Q/SO1R7x2NudKHk0izQc6agHoTuigl2UQV0dP8x6FmS2LsCFtG41FX0yk
FhDpt6tbR2x/qofWKWOlPQlIipP36+dcGbeB+3H5q2+Imsaf9yzd8teFoCOz+lhb
q9k1tpGlYv5z9QIuAHYqu2pVb0I7p/yiy6L9x4zJ7myurJgFLemB3y5GEMWrRzYb
kmGXnYsNth1XGpWC4GZtEdg7B5BRMNxn4WWuUnFnHTrUpdW97jLm/1BvnAzLkdAS
gdq5JZ7W3xasXCGj+R/qAT07jw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net