Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/eSlLbOLk5hw9zCKi9ud7yysA3ZI.roa
File:                     eSlLbOLk5hw9zCKi9ud7yysA3ZI.roa (raw, json)
Hash identifier:          a0L1v2EC4jFrQwOdnZASkIOwxGrsbZqkXt+wMHWzRNU=
Subject key identifier:   79:29:4B:6C:E2:E4:E6:1C:3D:CC:22:A2:F6:E7:7B:CB:2B:00:DD:92
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       05DD3E61
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/eSlLbOLk5hw9zCKi9ud7yysA3ZI.roa
Signing time:             Wed 23 Mar 2022 08:22:34 +0000
ROA not before:           Wed 23 Mar 2022 08:22:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48430
IP address blocks:        92.118.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98385505 (0x5dd3e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Mar 23 08:22:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79294b6ce2e4e61c3dcc22a2f6e77bcb2b00dd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fb:0d:b9:5d:a6:47:c2:43:28:06:8a:36:e1:
                    c9:37:8a:85:18:d2:2e:6e:33:ae:19:08:cd:7c:33:
                    d2:be:3e:56:4b:a0:95:4e:2e:c2:ba:4c:36:84:cf:
                    2a:75:ef:d4:26:06:24:d9:50:ce:c2:d8:7c:35:59:
                    ab:4f:af:6b:33:80:25:48:93:9b:6c:79:6c:82:74:
                    48:3a:62:c5:58:40:da:5c:19:c5:17:66:a7:0d:d2:
                    f4:21:b8:3b:a7:ec:7b:41:8e:d8:f2:f3:fd:df:26:
                    97:46:9d:e8:50:5c:b9:a1:34:08:30:33:63:4a:2f:
                    be:7a:05:5f:0a:2a:35:e6:f8:1c:fd:7e:35:7b:3d:
                    9f:4c:4c:08:37:f4:00:ba:f7:4d:2f:06:69:7b:e1:
                    af:a9:0f:ac:c9:33:5c:f7:7c:a8:61:85:4d:7d:2e:
                    5e:5c:de:ed:bd:99:f0:49:a8:b2:0d:2a:b5:1e:e0:
                    0b:fa:7b:88:38:14:39:bb:a4:1f:dd:5b:89:9e:ea:
                    d7:ab:14:b9:ff:2c:48:f3:02:a2:5f:ba:25:9f:3c:
                    b8:a5:75:b2:2a:42:f2:92:6d:d3:ea:97:ae:c9:6d:
                    e1:01:57:79:7b:63:31:08:e7:22:7a:09:0e:23:e5:
                    2f:9a:9c:78:f2:ee:fb:86:e1:e5:86:1b:ac:de:35:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:29:4B:6C:E2:E4:E6:1C:3D:CC:22:A2:F6:E7:7B:CB:2B:00:DD:92
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/eSlLbOLk5hw9zCKi9ud7yysA3ZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:d8:de:86:5b:b7:a1:71:62:82:e6:c1:fc:12:3a:24:ad:68:
         b4:fc:4b:d6:14:67:31:a7:bb:7a:17:88:6b:de:a7:25:af:d4:
         62:b7:b2:aa:82:3f:5d:41:9a:45:b6:a3:bd:4e:7a:19:0a:6e:
         96:6c:b3:cf:84:4c:99:b3:72:5b:53:1c:29:a6:d0:98:d6:b0:
         2e:ef:50:f4:ba:fc:e4:8d:54:6e:a1:5c:7c:29:6b:de:49:cc:
         aa:8d:dd:57:28:e6:6f:25:5f:54:c8:66:b3:3f:58:c3:5b:ba:
         ae:ae:a6:da:f2:82:09:ab:d1:fa:03:5f:73:87:58:29:02:46:
         39:8c:c4:42:a9:2c:d9:83:85:9b:fb:ea:a9:45:60:22:53:09:
         c6:27:c3:d8:9c:20:b7:4b:50:72:31:99:c7:46:61:b9:33:79:
         d4:e6:b5:f1:09:c7:da:b4:bc:5c:6a:cb:98:2b:9a:d3:7e:41:
         b3:5f:dd:61:aa:de:d8:85:9c:37:1e:41:5b:11:e5:9a:18:57:
         d9:cb:be:48:37:e7:e9:41:e8:06:38:fb:5e:f0:a9:37:29:12:
         e4:03:ff:91:41:08:d0:32:c9:89:42:8f:fb:3e:59:d5:40:93:
         d4:85:04:21:e1:f7:f2:05:d7:02:d9:46:a3:2b:10:e5:f6:49:
         a5:1f:d9:32
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBd0+YTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDIwZGRkMzk4ZGFjOGY2MmNjMTI1MjYzMjVmMTgyMWZiNzI0Zjc1MB4XDTIyMDMy
MzA4MjIzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzkyOTRiNmNlMmU0
ZTYxYzNkY2MyMmEyZjZlNzdiY2IyYjAwZGQ5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOX7DbldpkfCQygGijbhyTeKhRjSLm4zrhkIzXwz0r4+Vkug
lU4uwrpMNoTPKnXv1CYGJNlQzsLYfDVZq0+vazOAJUiTm2x5bIJ0SDpixVhA2lwZ
xRdmpw3S9CG4O6fse0GO2PLz/d8ml0ad6FBcuaE0CDAzY0ovvnoFXwoqNeb4HP1+
NXs9n0xMCDf0ALr3TS8GaXvhr6kPrMkzXPd8qGGFTX0uXlze7b2Z8Emosg0qtR7g
C/p7iDgUObukH91biZ7q16sUuf8sSPMCol+6JZ88uKV1sipC8pJt0+qXrslt4QFX
eXtjMQjnInoJDiPlL5qcePLu+4bh5YYbrN41yRcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5KUts4uTmHD3MIqL253vLKwDdkjAfBgNVHSMEGDAWgBRtIN3TmNrI9izB
JSYyXxgh+3JPdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JTRGQwNWpheVBZc3dTVW1NbDhZSWZ0eVQzVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvYTFhODhmLTFkZmYtNGVmZi04MjZiLTM2ZGU2NTcyMzJiZS8x
L2VTbExiT0xrNWh3OXpDS2k5dWQ3eXlzQTNaSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
YTFhODhmLTFkZmYtNGVmZi04MjZiLTM2ZGU2NTcyMzJiZS8xL2JTRGQwNWpheVBZ
c3dTVW1NbDhZSWZ0eVQzVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlx2fDANBgkqhkiG9w0BAQsFAAOC
AQEAItjehlu3oXFigubB/BI6JK1otPxL1hRnMae7eheIa96nJa/UYreyqoI/XUGa
RbajvU56GQpulmyzz4RMmbNyW1McKabQmNawLu9Q9Lr85I1UbqFcfClr3knMqo3d
VyjmbyVfVMhmsz9Yw1u6rq6m2vKCCavR+gNfc4dYKQJGOYzEQqks2YOFm/vqqUVg
IlMJxifD2Jwgt0tQcjGZx0ZhuTN51Oa18QnH2rS8XGrLmCua035Bs1/dYare2IWc
Nx5BWxHlmhhX2cu+SDfn6UHoBjj7XvCpNykS5AP/kUEI0DLJiUKP+z5Z1UCT1IUE
IeH38gXXAtlGoysQ5fZJpR/ZMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org