Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/uzYkuQlVb2mIzXWGrRbv5xDueNQ.roa
File:                     uzYkuQlVb2mIzXWGrRbv5xDueNQ.roa (raw, json)
Hash identifier:          Y0gJPxq5dqlQ7x93Wyiz+DW2TSgM1GWIlroL14xWhpg=
Subject key identifier:   BB:36:24:B9:09:55:6F:69:88:CD:75:86:AD:16:EF:E7:10:EE:78:D4
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       0184C7A09700C4DD24BB76A9A6ED240AD51D
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/uzYkuQlVb2mIzXWGrRbv5xDueNQ.roa
Signing time:             Wed 30 Nov 2022 08:21:41 +0000
ROA not before:           Wed 30 Nov 2022 08:21:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49581
IP address blocks:        83.136.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c7:a0:97:00:c4:dd:24:bb:76:a9:a6:ed:24:0a:d5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Nov 30 08:21:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb3624b909556f6988cd7586ad16efe710ee78d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:09:3a:30:d3:28:f5:2b:21:d1:78:86:3f:
                    b1:c0:e7:83:37:f3:50:1b:45:80:29:f6:da:73:23:
                    20:78:31:7f:e3:52:9b:23:b0:1d:90:58:c6:ec:b9:
                    fe:b6:e0:a9:d3:25:1c:6b:52:db:a8:0d:3e:d8:4b:
                    61:7f:e7:5b:51:b5:48:bb:3d:d0:38:91:e2:d8:b8:
                    87:3d:1c:25:cf:22:6e:94:22:9f:54:b7:94:00:d1:
                    1e:1a:dd:47:67:25:4e:ab:af:a1:be:d1:31:4a:67:
                    bc:2a:1d:bf:3b:8b:25:dd:01:e0:86:98:9f:6e:35:
                    b7:b1:68:a3:3b:da:94:11:66:0c:e5:3c:e0:42:08:
                    e0:31:ac:0d:b9:c9:fd:56:d0:eb:ce:fb:f7:26:f1:
                    cb:a2:05:e7:16:f0:11:d8:10:59:23:69:25:35:c1:
                    0c:51:ce:07:b5:fa:3f:ab:e7:8d:ae:a3:d1:41:8e:
                    21:ea:0e:a6:f0:27:66:15:8a:6d:d1:14:dd:53:e2:
                    d5:6a:8a:92:b3:59:45:da:b8:30:39:ee:d4:80:02:
                    cd:e0:75:fd:f5:2a:03:c9:cd:a3:e9:d3:5f:80:e4:
                    85:3d:23:3f:2b:dd:f0:52:2f:0f:a7:81:69:28:af:
                    e3:ee:f3:aa:c3:1c:ed:47:d9:26:2f:67:ab:3b:ed:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:36:24:B9:09:55:6F:69:88:CD:75:86:AD:16:EF:E7:10:EE:78:D4
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/uzYkuQlVb2mIzXWGrRbv5xDueNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:62:63:1b:cd:ce:0a:26:d1:15:72:da:93:0b:04:02:f6:38:
         c8:ca:fb:3a:a0:f2:d7:6b:42:37:5c:33:27:ee:4a:f9:fb:d7:
         3d:26:10:fe:c0:bb:43:2c:d7:d6:c3:5f:27:1c:a6:b6:69:02:
         fb:75:3b:db:89:69:a3:62:b9:f2:1d:d5:c2:3d:ee:cc:0c:96:
         4e:13:5d:cc:d2:0a:37:37:8c:68:97:4c:62:c4:cb:79:1c:31:
         34:e2:28:f2:95:c4:66:37:ac:23:be:65:66:4a:60:56:42:a2:
         ff:1b:14:d9:24:69:2f:59:3a:87:a6:c4:ae:4a:3a:7c:0f:4a:
         0f:2a:42:a3:cb:4b:35:b1:06:4e:ef:71:53:eb:97:48:98:8c:
         d9:3c:6c:7c:e1:a3:5f:04:74:0b:58:8d:5d:d9:f1:8b:25:36:
         ac:fd:ab:6b:3b:97:58:b7:8a:81:94:1b:ab:88:fc:ee:d8:6d:
         5c:73:3d:33:65:9b:04:8e:85:b3:75:f8:a0:a2:d1:e0:cb:7f:
         d6:c7:7a:77:67:af:81:df:84:cb:58:07:2b:86:8d:ff:a8:6c:
         e3:db:94:80:7a:19:55:4e:0c:d0:5a:43:85:b8:f4:3d:b5:8e:
         40:54:5f:57:4c:97:4b:a8:fa:3e:71:9d:d2:48:02:c0:f1:70:
         eb:8f:22:9c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYTHoJcAxN0ku3appu0kCtUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjIxMTMwMDgyMTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjM2MjRiOTA5NTU2ZjY5ODhjZDc1ODZhZDE2ZWZlNzEwZWU3OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPMJOjDTKPUrIdF4hj+xwOeDN/NQ
G0WAKfbacyMgeDF/41KbI7AdkFjG7Ln+tuCp0yUca1LbqA0+2Ethf+dbUbVIuz3Q
OJHi2LiHPRwlzyJulCKfVLeUANEeGt1HZyVOq6+hvtExSme8Kh2/O4sl3QHghpif
bjW3sWijO9qUEWYM5TzgQgjgMawNucn9VtDrzvv3JvHLogXnFvAR2BBZI2klNcEM
Uc4Htfo/q+eNrqPRQY4h6g6m8CdmFYpt0RTdU+LVaoqSs1lF2rgwOe7UgALN4HX9
9SoDyc2j6dNfgOSFPSM/K93wUi8Pp4FpKK/j7vOqwxztR9kmL2erO+3K7QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLs2JLkJVW9piM11hq0W7+cQ7njUMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL3V6WWt1UWxWYjJtSXpYV0dyUmJ2NXhEdWVOUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTiNUw
DQYJKoZIhvcNAQELBQADggEBADNiYxvNzgom0RVy2pMLBAL2OMjK+zqg8tdrQjdc
MyfuSvn71z0mEP7Au0Ms19bDXyccprZpAvt1O9uJaaNiufId1cI97swMlk4TXczS
Cjc3jGiXTGLEy3kcMTTiKPKVxGY3rCO+ZWZKYFZCov8bFNkkaS9ZOoemxK5KOnwP
Sg8qQqPLSzWxBk7vcVPrl0iYjNk8bHzho18EdAtYjV3Z8YslNqz9q2s7l1i3ioGU
G6uI/O7YbVxzPTNlmwSOhbN1+KCi0eDLf9bHendnr4HfhMtYByuGjf+obOPblIB6
GVVODNBaQ4W49D21jkBUX1dMl0uo+j5xndJIAsDxcOuPIpw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org