Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/kO_lse2A0_U1B1CiU_flfC1to1w.roa
File:                     kO_lse2A0_U1B1CiU_flfC1to1w.roa (raw, json)
Hash identifier:          x8UTSEGCqcqZVToQlwVkbGVPA6KPPvTySvxlgi3Hen4=
Subject key identifier:   90:EF:E5:B1:ED:80:D3:F5:35:07:50:A2:53:F7:E5:7C:2D:6D:A3:5C
Certificate issuer:       /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial:       0930D94E
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/kO_lse2A0_U1B1CiU_flfC1to1w.roa
Signing time:             Sat 01 Jan 2022 12:03:12 +0000
ROA not before:           Sat 01 Jan 2022 12:03:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41294
IP address blocks:        194.176.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154196302 (0x930d94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
        Validity
            Not Before: Jan  1 12:03:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=90efe5b1ed80d3f5350750a253f7e57c2d6da35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:4b:70:36:05:1e:e5:55:4a:4c:0f:e2:1d:
                    e1:25:2d:ed:10:31:cc:a4:58:37:48:38:87:28:bf:
                    07:b7:c7:93:36:19:3b:86:24:2d:03:be:84:b7:83:
                    b9:85:56:19:34:fc:92:33:e1:b3:03:a9:45:a6:63:
                    69:e3:74:d9:5e:19:a6:1e:cf:4b:08:dc:55:df:56:
                    00:71:28:9a:0c:91:1a:5a:1b:4b:e2:13:54:9f:7f:
                    38:0a:4e:87:a2:4d:df:38:09:d5:6f:1e:ad:ec:9d:
                    fc:b9:ea:37:67:c9:11:ab:54:ae:48:61:0b:dc:af:
                    65:35:b0:74:b0:61:b3:9b:66:e6:cf:76:e5:36:73:
                    ab:43:d5:8b:90:bd:a4:ce:5b:78:a2:df:8a:68:e5:
                    ea:56:85:c0:c7:cf:fa:db:40:2d:cd:29:8f:c8:5d:
                    c1:fd:f3:55:bd:9b:4b:c2:91:60:37:e1:31:38:a6:
                    ea:5c:43:6e:0b:86:dc:35:e0:de:93:b3:80:0a:f1:
                    cd:c5:57:74:30:d6:aa:e7:e3:94:ab:52:dd:79:cd:
                    2e:81:87:a2:e9:4b:49:51:d7:23:e2:db:fc:2f:75:
                    f9:d1:e8:f3:5e:02:2a:6e:dd:57:1c:b5:40:62:1f:
                    65:cc:24:b7:3b:06:67:c3:b3:88:b0:35:f2:b2:f5:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EF:E5:B1:ED:80:D3:F5:35:07:50:A2:53:F7:E5:7C:2D:6D:A3:5C
            X509v3 Authority Key Identifier:
                keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/kO_lse2A0_U1B1CiU_flfC1to1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.176.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:1e:59:a1:8c:ac:f8:ad:b1:53:bb:39:0d:af:00:b8:e8:
         62:77:ca:3b:2f:85:64:2d:ce:3c:e4:1b:34:13:65:98:53:27:
         3e:ab:a1:2a:a2:40:15:eb:85:49:23:88:ff:09:17:18:31:98:
         81:0f:f7:5e:19:e7:23:c2:2f:4b:0f:69:38:1a:b9:9d:34:32:
         ef:83:42:6d:a6:5b:4d:17:e8:d3:eb:39:9e:5a:d9:5d:02:d9:
         df:16:8c:9f:3d:38:01:cc:74:f5:fb:cc:c1:e2:08:20:45:51:
         00:72:f3:8b:a6:95:44:fc:cc:21:07:e4:1c:0c:01:2b:7d:11:
         23:ab:5d:0c:a2:30:3c:67:55:ec:9a:b5:09:a7:fb:56:df:1f:
         07:38:5c:6e:25:e8:f6:8c:f5:f8:45:b9:d4:69:b3:f4:04:3f:
         51:65:3d:28:10:ab:ee:ca:2a:c5:92:42:8e:46:58:78:16:16:
         26:e8:f7:2a:19:05:22:82:a3:69:0b:17:4f:d6:f1:77:f0:21:
         d5:64:79:12:57:a1:ea:07:96:64:df:5f:04:89:cb:a6:e3:8e:
         d7:a7:30:33:9f:22:54:ca:cb:a8:95:95:b8:f0:11:af:ff:e7:
         0c:cf:55:15:e9:87:44:4b:71:68:f3:3b:e4:0a:c5:ee:2d:43:
         f4:7f:52:d4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECTDZTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjY4MjgxMTNiYmEzNDIzZDE1NzMxOTY0ZmU1N2I1ZjI1MmJmZGU2MB4XDTIyMDEw
MTEyMDMxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTBlZmU1YjFlZDgw
ZDNmNTM1MDc1MGEyNTNmN2U1N2MyZDZkYTM1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJwLS3A2BR7lVUpMD+Id4SUt7RAxzKRYN0g4hyi/B7fHkzYZ
O4YkLQO+hLeDuYVWGTT8kjPhswOpRaZjaeN02V4Zph7PSwjcVd9WAHEomgyRGlob
S+ITVJ9/OApOh6JN3zgJ1W8ereyd/LnqN2fJEatUrkhhC9yvZTWwdLBhs5tm5s92
5TZzq0PVi5C9pM5beKLfimjl6laFwMfP+ttALc0pj8hdwf3zVb2bS8KRYDfhMTim
6lxDbguG3DXg3pOzgArxzcVXdDDWqufjlKtS3XnNLoGHoulLSVHXI+Lb/C91+dHo
814CKm7dVxy1QGIfZcwktzsGZ8OziLA18rL1cDECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSQ7+Wx7YDT9TUHUKJT9+V8LW2jXDAfBgNVHSMEGDAWgBQbaCgRO7o0I9FX
MZZP5XtfJSv95jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0cyZ29FVHU2TkNQUlZ6R1dULVY3WHlVcl9lWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvNGY1OTUxLTIwNDctNDRiYy1iNjlhLTAzYmM2M2NhMjVhMy8x
L2tPX2xzZTJBMF9VMUIxQ2lVX2ZsZkMxdG8xdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
NGY1OTUxLTIwNDctNDRiYy1iNjlhLTAzYmM2M2NhMjVhMy8xL0cyZ29FVHU2TkNQ
UlZ6R1dULVY3WHlVcl9lWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKwaDANBgkqhkiG9w0BAQsFAAOC
AQEAZPAeWaGMrPitsVO7OQ2vALjoYnfKOy+FZC3OPOQbNBNlmFMnPquhKqJAFeuF
SSOI/wkXGDGYgQ/3XhnnI8IvSw9pOBq5nTQy74NCbaZbTRfo0+s5nlrZXQLZ3xaM
nz04Acx09fvMweIIIEVRAHLzi6aVRPzMIQfkHAwBK30RI6tdDKIwPGdV7Jq1Caf7
Vt8fBzhcbiXo9oz1+EW51Gmz9AQ/UWU9KBCr7soqxZJCjkZYeBYWJuj3KhkFIoKj
aQsXT9bxd/Ah1WR5Eleh6geWZN9fBInLpuOO16cwM58iVMrLqJWVuPARr//nDM9V
FemHREtxaPM75ArF7i1D9H9S1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:10 2024 by rpki-client on console-fra.rpki-client.org