Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/Vtv8YG6AeXdlFDanWLVQDhGEr7A.roa
File:                     Vtv8YG6AeXdlFDanWLVQDhGEr7A.roa (raw, json)
Hash identifier:          5GbhDjsAL9mVouUPkU4OAIaunC5LjLyJN9SVPmlK4yw=
Subject key identifier:   56:DB:FC:60:6E:80:79:77:65:14:36:A7:58:B5:50:0E:11:84:AF:B0
Certificate issuer:       /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial:       C47A
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/Vtv8YG6AeXdlFDanWLVQDhGEr7A.roa
Signing time:             Tue 15 Feb 2022 14:10:47 +0000
ROA not before:           Tue 15 Feb 2022 14:10:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        193.177.180.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50298 (0xc47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
        Validity
            Not Before: Feb 15 14:10:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56dbfc606e807977651436a758b5500e1184afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b4:77:1d:f9:fa:c8:d4:04:ee:21:b4:f0:92:
                    ef:c6:2c:21:4a:f6:9f:ee:08:98:ec:10:78:81:ae:
                    15:5e:5f:85:50:a7:13:1c:6c:c7:b4:af:9d:4a:80:
                    f2:19:be:4e:a4:f2:d0:85:65:76:c9:67:6d:21:73:
                    fc:00:6c:d1:77:2c:00:96:9d:82:16:ef:52:26:ad:
                    ea:bf:9b:fb:bb:88:9d:24:cc:de:a1:fb:4f:5a:7c:
                    93:87:05:91:07:52:c9:a5:2a:9c:f1:b5:e3:eb:b6:
                    90:9c:ce:80:83:1b:25:d9:ff:43:4e:07:1c:90:57:
                    c6:00:3a:32:35:ec:04:ba:fe:b7:8f:03:b7:d9:f3:
                    65:74:11:7f:ba:07:6e:6e:f4:a4:e0:95:fe:de:4a:
                    35:d5:98:6a:79:56:3b:82:25:ac:93:59:0d:9f:71:
                    5c:9f:91:49:fa:cc:c9:c1:50:38:e9:e9:13:17:12:
                    5a:12:62:2a:b3:7d:42:f1:fe:cc:61:90:78:68:00:
                    d9:e9:02:9e:de:c6:77:04:47:26:19:62:6e:d2:1a:
                    db:ff:16:3c:9f:a6:e8:ce:ab:b9:62:aa:9d:92:e7:
                    4e:43:7c:33:a5:a7:06:56:5f:28:1e:7a:f0:3b:0c:
                    65:e1:10:2b:db:87:ea:9f:62:b4:f3:12:f7:86:6e:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DB:FC:60:6E:80:79:77:65:14:36:A7:58:B5:50:0E:11:84:AF:B0
            X509v3 Authority Key Identifier:
                keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/Vtv8YG6AeXdlFDanWLVQDhGEr7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.177.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:a0:99:2c:38:35:d0:a5:f9:d3:1b:af:66:6f:87:13:a5:62:
         06:80:33:1d:e7:9d:b4:6c:eb:8d:48:42:c9:6c:dd:af:cc:9e:
         9e:8c:96:15:80:3d:6a:8d:f5:d1:13:e4:a0:ae:df:63:66:84:
         b4:98:fb:c2:10:ee:b2:a8:9d:ab:f3:a3:9f:ed:68:d4:d0:39:
         c8:0d:34:5f:cd:32:fd:8b:31:7e:d2:64:1b:67:bf:68:98:b2:
         a7:c8:ea:5f:e9:60:d4:f2:ca:aa:d0:3e:c6:89:9e:d1:52:bb:
         91:87:f3:99:39:4a:e3:a8:0a:ba:08:3e:aa:58:a4:f6:2d:1c:
         c2:97:75:88:ae:e1:6c:61:4b:d6:84:1e:93:07:a5:36:57:7b:
         f3:8a:14:26:79:2f:0d:6c:3a:ef:38:fc:df:3b:a8:e3:91:4f:
         0d:8a:20:7d:72:07:b3:d1:3d:71:ce:a3:d2:33:eb:91:f8:79:
         4a:d7:1a:17:2c:7b:f0:db:09:a9:7e:aa:0f:43:58:86:7b:9f:
         01:10:88:fb:32:97:84:c4:9c:7e:24:89:d9:14:15:2f:97:3e:
         91:55:c8:fb:57:2c:ab:fc:a3:cb:72:1b:71:5e:8b:90:12:74:
         06:d3:8e:6a:7b:d2:e9:88:9c:5f:74:d1:5b:f5:12:18:33:c9:
         b4:46:94:b9
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAMR6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
OTY4MDI5ZjEyNDA5NmVhYjk1NWRmOWI3YTgxYzg4Y2IzMzNhMDUwHhcNMjIwMjE1
MTQxMDQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1NmRiZmM2MDZlODA3
OTc3NjUxNDM2YTc1OGI1NTAwZTExODRhZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6bR3Hfn6yNQE7iG08JLvxiwhSvaf7giY7BB4ga4VXl+FUKcT
HGzHtK+dSoDyGb5OpPLQhWV2yWdtIXP8AGzRdywAlp2CFu9SJq3qv5v7u4idJMze
oftPWnyThwWRB1LJpSqc8bXj67aQnM6Agxsl2f9DTgcckFfGADoyNewEuv63jwO3
2fNldBF/ugdubvSk4JX+3ko11ZhqeVY7giWsk1kNn3Fcn5FJ+szJwVA46ekTFxJa
EmIqs31C8f7MYZB4aADZ6QKe3sZ3BEcmGWJu0hrb/xY8n6bozqu5YqqdkudOQ3wz
pacGVl8oHnrwOwxl4RAr24fqn2K08xL3hm7mDwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFbb/GBugHl3ZRQ2p1i1UA4RhK+wMB8GA1UdIwQYMBaAFNmWgCnxJAluq5Vd
+beoHIjLMzoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMtNmVlYTEyMjA1NzIwLzEv
VnR2OFlHNkFlWGRsRkRhbldMVlFEaEdFcjdBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8y
N2ExYmMtYjI1OC00MDVmLTlmOTMtNmVlYTEyMjA1NzIwLzEvMlphQUtmRWtDVzZy
bFYzNXQ2Z2NpTXN6T2dVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbG0MA0GCSqGSIb3DQEBCwUAA4IB
AQC7oJksODXQpfnTG69mb4cTpWIGgDMd5520bOuNSELJbN2vzJ6ejJYVgD1qjfXR
E+Sgrt9jZoS0mPvCEO6yqJ2r86Of7WjU0DnIDTRfzTL9izF+0mQbZ79omLKnyOpf
6WDU8sqq0D7GiZ7RUruRh/OZOUrjqAq6CD6qWKT2LRzCl3WIruFsYUvWhB6TB6U2
V3vzihQmeS8NbDrvOPzfO6jjkU8NiiB9cgez0T1xzqPSM+uR+HlK1xoXLHvw2wmp
fqoPQ1iGe58BEIj7MpeExJx+JInZFBUvlz6RVcj7Vyyr/KPLchtxXouQEnQG045q
e9LpiJxfdNFb9RIYM8m0RpS5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:02 2024 by rpki-client on console-fra.rpki-client.org