Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Dvy40ji8E_Bcfow_iGoCeOcWBzw.roa
File:                     Dvy40ji8E_Bcfow_iGoCeOcWBzw.roa (raw, json)
Hash identifier:          gTXmRQHSrAM8ttFMANujFB8jInESmR0+bQDQ40Gma6E=
Subject key identifier:   0E:FC:B8:D2:38:BC:13:F0:5C:7E:8C:3F:88:6A:02:78:E7:16:07:3C
Certificate issuer:       /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial:       018283554CDBA073657F97216893237764A3
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Dvy40ji8E_Bcfow_iGoCeOcWBzw.roa
Signing time:             Tue 09 Aug 2022 15:59:41 +0000
ROA not before:           Tue 09 Aug 2022 15:59:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        193.187.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:83:55:4c:db:a0:73:65:7f:97:21:68:93:23:77:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
        Validity
            Not Before: Aug  9 15:59:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0efcb8d238bc13f05c7e8c3f886a0278e716073c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:f3:3a:90:99:fc:59:84:0b:f3:03:63:e5:
                    3f:da:d8:67:ab:3b:f9:b0:7f:28:28:a6:f4:8e:fa:
                    2c:77:46:63:a8:4a:0e:86:a6:1d:63:f2:51:05:d1:
                    36:94:20:2b:58:c0:7e:61:93:06:da:2d:aa:1e:af:
                    ed:86:9a:92:59:59:93:eb:19:1f:de:e3:2e:c9:d2:
                    65:5d:1b:44:1c:20:c2:9d:17:e5:e9:38:1b:97:b9:
                    eb:85:8a:12:f0:1a:a6:16:1e:e3:77:14:49:1a:e3:
                    f0:d5:a9:90:a6:be:2c:5a:0f:74:6a:4a:05:68:ec:
                    e8:e5:8a:b4:6a:0e:6e:be:64:ac:92:fc:f5:4e:06:
                    5f:7d:41:b3:de:41:71:a3:96:35:a3:aa:c7:35:30:
                    22:ae:90:a8:62:7d:33:1f:97:fc:4c:c4:c1:79:68:
                    e8:f6:1d:24:a7:4f:7d:23:85:77:58:50:18:85:32:
                    5a:bd:9b:ef:8f:41:b6:3f:b3:8a:f2:1a:5d:61:3d:
                    82:65:8f:5a:66:5b:ae:f9:b2:d2:73:8c:68:e1:68:
                    1a:aa:93:3f:2c:8d:22:40:ef:37:68:00:ec:4b:29:
                    48:46:95:af:94:0c:6b:67:f4:63:5e:89:fa:ac:e2:
                    ff:b9:e5:f4:9e:20:1e:fd:05:2d:8a:5f:4c:5c:72:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FC:B8:D2:38:BC:13:F0:5C:7E:8C:3F:88:6A:02:78:E7:16:07:3C
            X509v3 Authority Key Identifier:
                keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Dvy40ji8E_Bcfow_iGoCeOcWBzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:49:af:fa:31:0b:ee:a5:e8:0f:01:bf:20:3d:57:0b:e1:ca:
         75:29:4f:00:32:e9:30:d0:ec:6e:8e:9f:b5:f7:da:d4:e6:7d:
         82:86:63:4a:e6:2d:ab:34:6d:e1:9c:dc:ff:cb:3f:ed:c2:e4:
         0c:8e:8c:39:65:4f:c0:00:28:87:00:93:1b:6d:98:5a:45:b6:
         3e:45:80:f1:7b:6e:d8:7c:34:07:53:01:b3:95:d9:bf:08:26:
         ae:a3:c7:46:49:34:0a:d9:a1:68:03:e8:49:88:7a:9a:c7:1c:
         c1:79:e5:99:ee:fa:b0:79:37:40:1c:bf:40:af:a0:0d:7e:5a:
         ec:bc:84:6c:df:27:e8:16:68:90:a0:75:c5:c8:a3:74:39:42:
         41:7c:30:9f:20:bb:9b:cf:cb:0b:85:df:68:2b:10:84:85:50:
         42:51:1d:ac:55:63:bc:5a:51:e3:51:66:28:dc:1a:9a:fb:81:
         5c:eb:68:b4:bc:44:a2:b6:f0:f2:f7:f0:a7:31:32:d4:c8:4a:
         9a:5e:c9:58:ec:54:a0:a4:e9:bf:dc:b5:85:70:da:57:05:ad:
         e3:aa:90:b5:34:cb:5e:79:bc:af:12:19:ae:54:55:a1:20:ed:
         c6:5a:8c:9d:a7:e8:8d:60:66:3b:a0:87:f9:37:c2:13:b5:ef:
         32:1c:2e:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKDVUzboHNlf5chaJMjd2SjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjIwODA5MTU1OTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWZjYjhkMjM4YmMxM2YwNWM3ZThjM2Y4ODZhMDI3OGU3MTYwNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhzzOpCZ/FmEC/MDY+U/2thnqzv5
sH8oKKb0jvosd0ZjqEoOhqYdY/JRBdE2lCArWMB+YZMG2i2qHq/thpqSWVmT6xkf
3uMuydJlXRtEHCDCnRfl6Tgbl7nrhYoS8BqmFh7jdxRJGuPw1amQpr4sWg90akoF
aOzo5Yq0ag5uvmSskvz1TgZffUGz3kFxo5Y1o6rHNTAirpCoYn0zH5f8TMTBeWjo
9h0kp099I4V3WFAYhTJavZvvj0G2P7OK8hpdYT2CZY9aZluu+bLSc4xo4WgaqpM/
LI0iQO83aADsSylIRpWvlAxrZ/RjXon6rOL/ueX0niAe/QUtil9MXHK1IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA78uNI4vBPwXH6MP4hqAnjnFgc8MB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvRHZ5NDBqaThFX0JjZm93X2lHb0NlT2NXQnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbtsMA0G
CSqGSIb3DQEBCwUAA4IBAQBBSa/6MQvupegPAb8gPVcL4cp1KU8AMukw0Oxujp+1
99rU5n2ChmNK5i2rNG3hnNz/yz/twuQMjow5ZU/AACiHAJMbbZhaRbY+RYDxe27Y
fDQHUwGzldm/CCauo8dGSTQK2aFoA+hJiHqaxxzBeeWZ7vqweTdAHL9Ar6ANflrs
vIRs3yfoFmiQoHXFyKN0OUJBfDCfILubz8sLhd9oKxCEhVBCUR2sVWO8WlHjUWYo
3Bqa+4Fc62i0vESitvDy9/CnMTLUyEqaXslY7FSgpOm/3LWFcNpXBa3jqpC1NMte
ebyvEhmuVFWhIO3GWoydp+iNYGY7oIf5N8ITte8yHC6/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org