Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/0sHYEgirCe-C6AYNk1mQWNi1owE.roa
File:                     0sHYEgirCe-C6AYNk1mQWNi1owE.roa (raw, json)
Hash identifier:          GBvzX+W0p+uJhbchB/sHnvu2oXdsbJWBtXf57sjH9Og=
Subject key identifier:   D2:C1:D8:12:08:AB:09:EF:82:E8:06:0D:93:59:90:58:D8:B5:A3:01
Certificate issuer:       /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial:       ED72
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/0sHYEgirCe-C6AYNk1mQWNi1owE.roa
Signing time:             Tue 25 Jan 2022 17:18:52 +0000
ROA not before:           Tue 25 Jan 2022 17:18:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210104
IP address blocks:        193.105.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60786 (0xed72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
        Validity
            Not Before: Jan 25 17:18:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2c1d81208ab09ef82e8060d93599058d8b5a301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:b8:06:fc:96:25:f2:c5:97:73:c4:ea:43:
                    eb:36:44:ea:e1:71:9e:e4:fd:29:09:47:9d:14:26:
                    1c:e1:d7:2f:24:33:c0:75:c5:6c:b5:4a:96:51:8d:
                    9b:c1:d2:17:c4:02:99:88:77:35:fb:34:92:91:ab:
                    5a:1c:ed:7d:5c:1a:7b:db:d9:49:67:04:3b:1b:50:
                    3c:3d:99:89:dc:07:02:b8:d4:92:8c:89:07:0e:80:
                    e8:ca:26:d2:db:e9:be:db:b6:4a:62:8a:ae:d8:aa:
                    24:d5:88:1b:89:42:63:6b:f4:0b:8d:ce:91:02:a8:
                    1d:84:73:2b:99:59:e9:07:77:79:df:72:9d:9f:3e:
                    db:6e:28:0f:c2:38:d7:e7:3b:2f:05:5c:32:d2:24:
                    d2:76:1e:32:89:e8:fb:91:0f:cb:4c:6a:c2:ca:d1:
                    da:cd:2c:5c:44:43:22:b0:6d:f5:88:ce:38:17:e1:
                    7a:b4:33:81:c1:b0:bc:6a:b0:2f:14:a3:99:a4:4d:
                    69:ec:50:97:39:b5:32:32:90:ed:c9:f2:2a:fb:39:
                    ca:bc:c9:a3:23:e1:d4:43:ad:73:3c:c2:7b:d9:85:
                    1f:11:4c:e6:3f:f1:ca:11:83:fa:5f:a5:eb:2e:4f:
                    b5:23:ff:bf:50:b1:ca:81:59:3a:98:6a:0a:cd:34:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:D8:12:08:AB:09:EF:82:E8:06:0D:93:59:90:58:D8:B5:A3:01
            X509v3 Authority Key Identifier:
                keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/0sHYEgirCe-C6AYNk1mQWNi1owE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:2b:c9:e0:4c:e4:5d:dc:ea:ac:92:de:27:0e:ae:d0:92:
         ab:36:10:84:f4:77:e0:26:82:30:7e:f1:ad:d6:56:e3:5e:4c:
         09:a6:63:4d:4d:d0:c0:f0:02:5c:65:7d:7e:21:6b:60:4d:06:
         b0:48:8e:87:de:9a:7c:a4:a2:05:a8:25:fe:b8:64:ef:39:91:
         00:b4:42:18:1d:3b:62:5e:c8:fa:c1:96:4b:ba:ad:fe:95:84:
         07:51:76:75:77:0f:e1:de:a7:e9:b8:d1:42:f3:f3:7a:74:03:
         43:f6:d7:02:ae:41:16:a2:ae:67:e9:45:1b:3e:c3:9e:3b:80:
         e7:1b:d2:21:92:0a:22:b9:fb:7b:18:8c:bf:e5:f9:02:df:8b:
         c5:e7:9f:0c:91:33:42:73:56:c4:af:cb:a7:9d:24:24:5e:72:
         55:a8:e5:65:8f:e3:d1:9a:a2:e1:8c:ee:f3:7e:53:95:ea:0f:
         bd:ab:43:6d:07:46:83:fb:f6:93:89:b5:d9:1f:68:26:70:fa:
         13:6e:05:44:dc:40:c9:64:69:57:76:9f:f4:87:ee:93:5b:c8:
         71:3b:fe:4b:e1:16:e9:6f:fa:54:79:2a:10:9d:f8:f6:b0:ee:
         07:c9:54:9a:81:95:13:1a:78:3d:2c:00:0c:5f:8b:5b:9c:7b:
         a2:75:8e:9b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAO1yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
YTVhZWE2ZjE4MGE5YThhZDk4NDUzNWVkMmU2NGJjZmNiM2ZlMWEwHhcNMjIwMTI1
MTcxODUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMmMxZDgxMjA4YWIw
OWVmODJlODA2MGQ5MzU5OTA1OGQ4YjVhMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtIq4BvyWJfLFl3PE6kPrNkTq4XGe5P0pCUedFCYc4dcvJDPA
dcVstUqWUY2bwdIXxAKZiHc1+zSSkataHO19XBp729lJZwQ7G1A8PZmJ3AcCuNSS
jIkHDoDoyibS2+m+27ZKYoqu2Kok1YgbiUJja/QLjc6RAqgdhHMrmVnpB3d533Kd
nz7bbigPwjjX5zsvBVwy0iTSdh4yiej7kQ/LTGrCytHazSxcREMisG31iM44F+F6
tDOBwbC8arAvFKOZpE1p7FCXObUyMpDtyfIq+znKvMmjI+HUQ61zPMJ72YUfEUzm
P/HKEYP6X6XrLk+1I/+/ULHKgVk6mGoKzTSrKwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNLB2BIIqwnvgugGDZNZkFjYtaMBMB8GA1UdIwQYMBaAFLqlrqbxgKmorZhF
Ne0uZLz8s/4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dXFXdXB2R0FxYWl0bUVVMTdTNWt2UHl6X2hvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80YS83ZjhmNzYtMGQ5ZC00NmFmLTliZWEtNDdlNGUyNzRjZjY0LzEv
MHNIWUVnaXJDZS1DNkFZTmsxbVFXTmkxb3dFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83
ZjhmNzYtMGQ5ZC00NmFmLTliZWEtNDdlNGUyNzRjZjY0LzEvdXFXdXB2R0FxYWl0
bUVVMTdTNWt2UHl6X2hvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlTMA0GCSqGSIb3DQEBCwUAA4IB
AQAH8CvJ4EzkXdzqrJLeJw6u0JKrNhCE9HfgJoIwfvGt1lbjXkwJpmNNTdDA8AJc
ZX1+IWtgTQawSI6H3pp8pKIFqCX+uGTvOZEAtEIYHTtiXsj6wZZLuq3+lYQHUXZ1
dw/h3qfpuNFC8/N6dAND9tcCrkEWoq5n6UUbPsOeO4DnG9Ihkgoiuft7GIy/5fkC
34vF558MkTNCc1bEr8unnSQkXnJVqOVlj+PRmqLhjO7zflOV6g+9q0NtB0aD+/aT
ibXZH2gmcPoTbgVE3EDJZGlXdp/0h+6TW8hxO/5L4Rbpb/pUeSoQnfj2sO4HyVSa
gZUTGng9LAAMX4tbnHuidY6b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:14 2024 by rpki-client on console-fra.rpki-client.org