Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/vuogBm_8YlaE6l_VhEbG37dUG68.roa
File:                     vuogBm_8YlaE6l_VhEbG37dUG68.roa (raw, json)
Hash identifier:          uA8W6vyHVv3PlI8UUofFS+YADXYuX9Ky/ryJXaqmKm4=
Subject key identifier:   BE:EA:20:06:6F:FC:62:56:84:EA:5F:D5:84:46:C6:DF:B7:54:1B:AF
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       127C3C4A
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/vuogBm_8YlaE6l_VhEbG37dUG68.roa
Signing time:             Thu 09 Jun 2022 16:51:02 +0000
ROA not before:           Thu 09 Jun 2022 16:51:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56403
IP address blocks:        185.232.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310131786 (0x127c3c4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Jun  9 16:51:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=beea20066ffc625684ea5fd58446c6dfb7541baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:49:8b:96:f7:89:cd:4a:36:93:cc:40:ab:
                    60:19:47:20:8e:ae:74:17:56:a6:2c:9b:6d:d8:be:
                    95:ee:bd:25:1c:a3:17:fd:ce:32:5a:a3:cc:59:06:
                    7b:f0:72:f5:61:e1:83:97:1f:0f:f3:3c:a8:be:3a:
                    f1:6d:34:57:fd:d5:63:64:ff:b5:6c:a3:1c:e9:aa:
                    b7:e5:44:2b:b4:2f:56:52:fe:3a:94:19:42:35:5f:
                    44:32:45:a3:76:2a:27:af:6b:c6:81:b4:59:9b:b9:
                    bd:21:29:fe:56:f0:6d:ec:db:4e:e0:4c:d6:25:72:
                    90:bd:8a:d7:8d:67:a5:10:dc:43:f5:66:ab:7d:42:
                    19:ce:ff:51:cc:b3:64:25:2f:76:e3:d5:56:1d:2f:
                    93:25:d3:cb:5f:49:2e:45:fe:95:1d:b3:d3:88:e8:
                    19:63:c2:2d:47:09:1b:8b:62:20:5c:01:05:a7:a3:
                    18:c4:58:d9:7a:1a:30:ed:a2:97:84:02:aa:d4:a4:
                    b4:ea:f9:d7:9e:55:a0:f1:50:2f:bc:37:3c:86:3f:
                    53:53:b1:b0:26:f7:1e:5b:17:08:10:e9:bd:37:1f:
                    5e:60:9b:09:b4:27:33:59:59:41:d3:80:52:b5:1b:
                    5c:e4:8f:c1:03:20:e7:b8:b7:04:82:2d:91:07:ba:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:20:06:6F:FC:62:56:84:EA:5F:D5:84:46:C6:DF:B7:54:1B:AF
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/vuogBm_8YlaE6l_VhEbG37dUG68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:68:8e:91:12:29:f5:9f:3f:e6:b5:5b:27:e1:91:b9:94:
         d9:e1:97:58:d3:3b:74:8f:9f:73:ba:8a:a1:44:b9:10:92:61:
         ba:c3:ac:16:6e:11:89:49:4d:9f:ca:6f:50:d1:7d:9f:e8:92:
         ac:c7:a6:3a:95:46:8c:13:2e:e7:b5:65:24:30:29:ea:61:41:
         81:a8:8b:70:1b:f8:f1:3b:f2:b6:aa:f8:1f:bf:8c:a8:95:bd:
         ae:9b:0f:29:39:ce:16:ff:20:72:11:7a:19:66:31:1b:77:20:
         e3:fb:1f:98:eb:ae:d7:16:94:43:da:ac:6c:74:ca:63:f3:d1:
         44:75:37:e6:fd:8c:e5:50:32:2d:6d:5c:ac:52:c3:53:c7:19:
         22:5e:82:52:50:25:98:dc:4f:9c:3c:9b:28:9c:b5:bd:38:b2:
         e5:5d:46:49:6d:68:80:c8:f3:64:54:2b:b5:72:f5:f8:e0:23:
         94:0f:f5:38:e2:57:03:a0:7c:19:1f:4c:a6:cc:b1:92:73:5a:
         36:fb:bd:db:58:86:b9:e0:2c:a2:c8:33:df:fa:c3:c9:d1:1b:
         43:b7:02:bf:0b:b1:ab:6e:fa:17:cb:15:6b:cb:17:48:8c:c4:
         00:48:46:a9:2b:3e:16:b9:4f:67:db:e6:55:91:70:73:f1:25:
         dc:6f:61:4b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEnw8SjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
Nzk0OWFjODRkMGI4NjkxMGY0ZmQzY2Y1OTYyOTI3ZDgzNDUwYWViMB4XDTIyMDYw
OTE2NTEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmVlYTIwMDY2ZmZj
NjI1Njg0ZWE1ZmQ1ODQ0NmM2ZGZiNzU0MWJhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL5vSYuW94nNSjaTzECrYBlHII6udBdWpiybbdi+le69JRyj
F/3OMlqjzFkGe/By9WHhg5cfD/M8qL468W00V/3VY2T/tWyjHOmqt+VEK7QvVlL+
OpQZQjVfRDJFo3YqJ69rxoG0WZu5vSEp/lbwbezbTuBM1iVykL2K141npRDcQ/Vm
q31CGc7/UcyzZCUvduPVVh0vkyXTy19JLkX+lR2z04joGWPCLUcJG4tiIFwBBaej
GMRY2XoaMO2il4QCqtSktOr5155VoPFQL7w3PIY/U1OxsCb3HlsXCBDpvTcfXmCb
CbQnM1lZQdOAUrUbXOSPwQMg57i3BIItkQe6/WcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+6iAGb/xiVoTqX9WERsbft1QbrzAfBgNVHSMEGDAWgBQ3lJrITQuGkQ9P
089ZYpJ9g0UK6zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L041U2F5RTBMaHBFUFQ5UFBXV0tTZllORkN1cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvYzI4ZWE0LTA1OWMtNDlkZC05Mjc4LWE0ZGIzOTZjODk4Ny8x
L3Z1b2dCbV84WWxhRTZsX1ZoRWJHMzdkVUc2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
YzI4ZWE0LTA1OWMtNDlkZC05Mjc4LWE0ZGIzOTZjODk4Ny8xL041U2F5RTBMaHBF
UFQ5UFBXV0tTZllORkN1cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnowDANBgkqhkiG9w0BAQsFAAOC
AQEALUhojpESKfWfP+a1WyfhkbmU2eGXWNM7dI+fc7qKoUS5EJJhusOsFm4RiUlN
n8pvUNF9n+iSrMemOpVGjBMu57VlJDAp6mFBgaiLcBv48Tvytqr4H7+MqJW9rpsP
KTnOFv8gchF6GWYxG3cg4/sfmOuu1xaUQ9qsbHTKY/PRRHU35v2M5VAyLW1crFLD
U8cZIl6CUlAlmNxPnDybKJy1vTiy5V1GSW1ogMjzZFQrtXL1+OAjlA/1OOJXA6B8
GR9MpsyxknNaNvu921iGueAsosgz3/rDydEbQ7cCvwuxq276F8sVa8sXSIzEAEhG
qSs+FrlPZ9vmVZFwc/El3G9hSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:51 2024 by rpki-client on console-ams.rpki-client.org