Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/w0_XTzwZNYSs7JCuslbSlBWrYVI.roa
File:                     w0_XTzwZNYSs7JCuslbSlBWrYVI.roa (raw, json)
Hash identifier:          mqFKB/jCgEDf28s4++jdNNvuISeNYtcz1AcoOPrS+jg=
Subject key identifier:   C3:4F:D7:4F:3C:19:35:84:AC:EC:90:AE:B2:56:D2:94:15:AB:61:52
Certificate issuer:       /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial:       091AAFCA
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/w0_XTzwZNYSs7JCuslbSlBWrYVI.roa
Signing time:             Thu 03 Mar 2022 04:10:51 +0000
ROA not before:           Thu 03 Mar 2022 04:10:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200590
IP address blocks:        193.106.98.0/24 maxlen: 24
                          91.231.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152743882 (0x91aafca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
        Validity
            Not Before: Mar  3 04:10:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c34fd74f3c193584acec90aeb256d29415ab6152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:2d:ac:d8:2d:9d:2b:3d:f4:e4:5f:e2:93:
                    45:43:fb:b8:83:d3:b1:af:da:0c:46:46:54:c6:c9:
                    f7:6f:9f:be:84:0f:3a:5b:77:9e:3c:5d:ed:c8:d8:
                    d5:93:6c:b2:cc:51:33:ec:f9:dd:8a:0c:f0:86:ac:
                    51:0a:a0:22:19:31:a2:63:b4:26:97:6f:20:e1:31:
                    50:57:cc:ed:ee:96:12:40:a5:a9:ee:6f:ec:03:ac:
                    38:fc:9c:6e:10:b9:19:3d:8f:2c:44:bc:28:ee:f0:
                    28:a9:ba:53:a3:7a:40:22:18:58:ac:d1:a9:f0:f5:
                    14:66:29:ae:9f:78:c7:ef:f7:d6:be:6b:42:fb:bc:
                    d7:25:b9:35:f0:61:a9:32:21:90:b7:03:a4:d8:ae:
                    b1:c3:65:65:41:2d:28:fc:4c:b2:34:84:cc:c2:c1:
                    b1:21:99:6e:b1:d7:a3:85:7d:39:b1:7c:8f:15:5a:
                    61:b3:01:c4:96:3d:2a:67:ae:fc:44:73:45:81:f2:
                    f2:65:57:21:bd:73:87:ca:cb:4a:8d:ea:fa:db:15:
                    40:9e:32:4b:8d:42:d1:77:57:0b:fb:b2:d6:59:aa:
                    98:59:52:e5:fc:cf:c9:89:59:67:31:a0:5f:31:78:
                    9d:fe:c6:d9:44:2c:63:86:56:7b:82:c8:e9:23:a0:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4F:D7:4F:3C:19:35:84:AC:EC:90:AE:B2:56:D2:94:15:AB:61:52
            X509v3 Authority Key Identifier:
                keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/w0_XTzwZNYSs7JCuslbSlBWrYVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.67.0/24
                  193.106.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:bb:74:17:61:46:57:89:5f:1a:b8:17:2b:0f:90:33:fd:
         e0:5a:c5:b3:eb:6d:39:6b:6c:f9:c0:9b:69:0c:4c:8d:e1:e8:
         c2:9a:2a:de:5d:21:57:53:c5:0d:81:ac:98:05:98:58:cf:b3:
         2a:ff:87:23:fb:93:43:9d:e9:12:87:1b:c5:b2:8c:f6:37:6b:
         7b:d4:f2:3a:37:fb:10:4b:2e:bb:0f:70:5f:5b:2b:ab:4a:b6:
         aa:d5:fc:73:1c:89:19:d6:2f:78:78:95:b4:ba:62:22:ca:bc:
         1a:86:ca:bb:c8:64:5a:58:af:ac:f8:3f:21:0e:0b:06:71:98:
         d9:6a:9f:0b:af:89:da:b1:c9:f4:4b:d1:8f:16:57:c6:07:09:
         9c:6f:f1:57:b7:b4:37:5c:d6:63:f1:88:5a:d5:db:c5:0c:aa:
         82:bc:e3:0f:13:a1:eb:d7:e5:cc:b0:85:e5:9b:55:fb:d6:5d:
         f7:54:8c:c4:dc:06:82:33:27:94:43:5e:fb:fd:17:cc:fc:44:
         83:ff:c2:2f:54:e1:c3:32:16:e7:a3:e2:5a:d7:50:8a:b6:5c:
         13:fc:a5:44:e0:87:08:c2:d3:b9:c4:b2:71:09:48:e7:6d:c2:
         9e:bb:a7:05:42:e5:9b:8f:83:2c:0b:16:cb:ff:e2:1c:46:63:
         0f:54:e0:3b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECRqvyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YTczMjc4MDVkZjIwZmI1YzFkNmY0ZTg5MDc0NzQzY2FlYjI0YWY3MB4XDTIyMDMw
MzA0MTA1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzM0ZmQ3NGYzYzE5
MzU4NGFjZWM5MGFlYjI1NmQyOTQxNWFiNjE1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/3LazYLZ0rPfTkX+KTRUP7uIPTsa/aDEZGVMbJ92+fvoQP
Olt3njxd7cjY1ZNsssxRM+z53YoM8IasUQqgIhkxomO0JpdvIOExUFfM7e6WEkCl
qe5v7AOsOPycbhC5GT2PLES8KO7wKKm6U6N6QCIYWKzRqfD1FGYprp94x+/31r5r
Qvu81yW5NfBhqTIhkLcDpNiuscNlZUEtKPxMsjSEzMLBsSGZbrHXo4V9ObF8jxVa
YbMBxJY9Kmeu/ERzRYHy8mVXIb1zh8rLSo3q+tsVQJ4yS41C0XdXC/uy1lmqmFlS
5fzPyYlZZzGgXzF4nf7G2UQsY4ZWe4LI6SOg6u0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTDT9dPPBk1hKzskK6yVtKUFathUjAfBgNVHSMEGDAWgBQKcyeAXfIPtcHW
9OiQdHQ8rrJK9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NuTW5nRjN5RDdYQjF2VG9rSFIwUEs2eVN2Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvOGIxZmFjLTVhMjEtNDg0OC1hNjZhLTEwYmI0NTc5ZDUyOC8x
L3cwX1hUendaTllTczdKQ3VzbGJTbEJXcllWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
OGIxZmFjLTVhMjEtNDg0OC1hNjZhLTEwYmI0NTc5ZDUyOC8xL0NuTW5nRjN5RDdY
QjF2VG9rSFIwUEs2eVN2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvnQwMEAMFqYjANBgkqhkiG9w0B
AQsFAAOCAQEAIbO7dBdhRleJXxq4FysPkDP94FrFs+ttOWts+cCbaQxMjeHowpoq
3l0hV1PFDYGsmAWYWM+zKv+HI/uTQ53pEocbxbKM9jdre9TyOjf7EEsuuw9wX1sr
q0q2qtX8cxyJGdYveHiVtLpiIsq8GobKu8hkWlivrPg/IQ4LBnGY2WqfC6+J2rHJ
9EvRjxZXxgcJnG/xV7e0N1zWY/GIWtXbxQyqgrzjDxOh69flzLCF5ZtV+9Zd91SM
xNwGgjMnlENe+/0XzPxEg//CL1ThwzIW56PiWtdQirZcE/ylROCHCMLTucSycQlI
523CnrunBULlm4+DLAsWy//iHEZjD1TgOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:15 2024 by rpki-client on console-fra.rpki-client.org