Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/gjygxqZubVAgE_0iOnwjIbo6aHs.roa
File:                     gjygxqZubVAgE_0iOnwjIbo6aHs.roa (raw, json)
Hash identifier:          EwjlvZTB5/sRFZc73rCXOLKnbF9pd/Zn9tyUKiJSiEQ=
Subject key identifier:   82:3C:A0:C6:A6:6E:6D:50:20:13:FD:22:3A:7C:23:21:BA:3A:68:7B
Certificate issuer:       /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial:       0586D56A
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/gjygxqZubVAgE_0iOnwjIbo6aHs.roa
Signing time:             Sat 22 Jan 2022 15:44:33 +0000
ROA not before:           Sat 22 Jan 2022 15:44:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209810
IP address blocks:        194.31.188.0/22 maxlen: 22
                          85.92.96.0/22 maxlen: 22
                          2a09:1980::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92722538 (0x586d56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
        Validity
            Not Before: Jan 22 15:44:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=823ca0c6a66e6d502013fd223a7c2321ba3a687b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:5f:a0:5d:ad:a8:9a:7f:b7:18:a3:37:00:
                    79:6e:4f:11:37:58:00:55:0d:54:81:c5:ef:b0:67:
                    e3:25:4e:d5:2d:87:e7:f6:b2:dc:0d:53:19:67:09:
                    42:6f:7e:3b:8a:9d:8b:c7:fe:b4:22:21:65:19:28:
                    74:25:df:fd:21:60:8b:53:34:1e:f2:8b:bd:a4:00:
                    c0:02:41:21:9f:13:60:e0:1e:ec:1d:4e:8b:79:26:
                    51:0e:93:18:fa:a9:b8:88:c3:1d:cb:2e:85:3d:3d:
                    21:94:23:c0:7b:6e:5e:1f:05:58:f3:33:06:fc:a8:
                    2a:75:bf:25:6d:d9:b1:4b:33:cd:dc:7d:37:60:8a:
                    cb:33:41:e6:f4:4a:a9:43:bb:bb:f8:47:2a:11:0c:
                    b8:ba:52:a3:46:3e:29:04:53:7f:bb:13:22:e4:68:
                    ec:26:37:21:30:13:af:60:06:6c:ca:69:ef:56:c1:
                    d2:2d:f9:f9:a6:67:f4:06:3b:0d:fe:bb:a1:b9:3d:
                    97:e4:d0:78:b2:b2:f8:95:49:c0:af:b8:00:50:2e:
                    38:01:1b:ac:d5:c4:1f:58:33:af:20:56:52:93:13:
                    d0:84:82:b5:cf:7b:d7:74:a0:0a:64:e2:bd:26:be:
                    48:73:55:22:a2:cf:9f:dc:f6:32:a9:71:79:b4:d3:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3C:A0:C6:A6:6E:6D:50:20:13:FD:22:3A:7C:23:21:BA:3A:68:7B
            X509v3 Authority Key Identifier:
                keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/gjygxqZubVAgE_0iOnwjIbo6aHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.92.96.0/22
                  194.31.188.0/22
                IPv6:
                  2a09:1980::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:43:92:c8:3c:f9:40:ff:a7:18:66:a0:e3:09:f8:dc:f2:
         b4:4b:8a:02:d4:9c:e4:6e:cb:ed:99:5d:32:77:9d:f3:96:de:
         6a:40:be:dc:09:bb:d5:96:4a:90:26:f2:99:34:ac:3a:59:50:
         c0:72:fd:9c:ef:f4:fc:cb:b4:a6:e8:a1:7c:f8:22:74:40:85:
         84:65:dd:a5:3f:e9:7d:4c:4b:b1:33:0b:ae:41:08:18:c6:62:
         c2:86:c8:ec:26:b8:6a:84:31:64:6a:22:4b:d0:46:c4:09:cb:
         3a:75:26:6c:16:6c:e0:84:a6:6d:d9:62:e5:24:7e:93:9d:de:
         44:83:f8:9c:cd:26:e5:ab:c0:db:67:9b:2f:cf:51:cc:77:97:
         ba:08:67:77:4c:14:38:57:ff:3c:04:6d:3a:55:69:ea:79:e6:
         c3:f8:2b:be:a9:26:c7:d3:f8:c0:62:be:5a:26:72:bb:92:8b:
         06:33:74:ad:31:e7:6f:44:73:af:f1:19:46:e4:41:9b:7e:9d:
         2f:bd:b2:f5:31:34:51:73:76:23:0d:6c:79:25:69:c0:39:aa:
         b3:6e:54:1f:17:9b:10:d9:4e:a5:20:ef:34:8f:1f:34:77:26:
         f7:86:d1:f0:14:b4:be:bc:b6:b2:63:e5:6d:b7:35:f2:23:92:
         85:a6:a6:ad
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBYbVajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZTQyYzM1NjEyZjQ1YWY0MTEwMzUyMGFmMjc2MWNkYWE1MWUzYWE0MB4XDTIyMDEy
MjE1NDQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODIzY2EwYzZhNjZl
NmQ1MDIwMTNmZDIyM2E3YzIzMjFiYTNhNjg3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPLX6Bdraiaf7cYozcAeW5PETdYAFUNVIHF77Bn4yVO1S2H
5/ay3A1TGWcJQm9+O4qdi8f+tCIhZRkodCXf/SFgi1M0HvKLvaQAwAJBIZ8TYOAe
7B1Oi3kmUQ6TGPqpuIjDHcsuhT09IZQjwHtuXh8FWPMzBvyoKnW/JW3ZsUszzdx9
N2CKyzNB5vRKqUO7u/hHKhEMuLpSo0Y+KQRTf7sTIuRo7CY3ITATr2AGbMpp71bB
0i35+aZn9AY7Df67obk9l+TQeLKy+JVJwK+4AFAuOAEbrNXEH1gzryBWUpMT0ISC
tc9713SgCmTivSa+SHNVIqLPn9z2MqlxebTTT8cCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSCPKDGpm5tUCAT/SI6fCMhujpoezAfBgNVHSMEGDAWgBReQsNWEvRa9BED
UgrydhzapR46pDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hrTERWaEwwV3ZRUkExSUs4blljMnFVZU9xUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNjc0NDk2LTk3YmQtNGViMC1hODg2LTgyMTE5OTc4ZDZiYi8x
L2dqeWd4cVp1YlZBZ0VfMGlPbndqSWJvNmFIcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
Njc0NDk2LTk3YmQtNGViMC1hODg2LTgyMTE5OTc4ZDZiYi8xL1hrTERWaEwwV3ZR
UkExSUs4blljMnFVZU9xUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAlVcYAMEAsIfvDANBAIAAjAHAwUD
KgkZgDANBgkqhkiG9w0BAQsFAAOCAQEADmNDksg8+UD/pxhmoOMJ+NzytEuKAtSc
5G7L7ZldMned85beakC+3Am71ZZKkCbymTSsOllQwHL9nO/0/Mu0puihfPgidECF
hGXdpT/pfUxLsTMLrkEIGMZiwobI7Ca4aoQxZGoiS9BGxAnLOnUmbBZs4ISmbdli
5SR+k53eRIP4nM0m5avA22ebL89RzHeXughnd0wUOFf/PARtOlVp6nnmw/grvqkm
x9P4wGK+WiZyu5KLBjN0rTHnb0Rzr/EZRuRBm36dL72y9TE0UXN2Iw1seSVpwDmq
s25UHxebENlOpSDvNI8fNHcm94bR8BS0vry2smPlbbc18iOShaamrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org