Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Hs1Y9rAcuN9RNUM11tzPQDDQi-Y.roa
File:                     Hs1Y9rAcuN9RNUM11tzPQDDQi-Y.roa (raw, json)
Hash identifier:          H8lQOufq5seA4mDlbwgOvaNrfH9TplFzjunqAh87TI4=
Subject key identifier:   1E:CD:58:F6:B0:1C:B8:DF:51:35:43:35:D6:DC:CF:40:30:D0:8B:E6
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       37E5029F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Hs1Y9rAcuN9RNUM11tzPQDDQi-Y.roa
Signing time:             Thu 28 Apr 2022 11:34:30 +0000
ROA not before:           Thu 28 Apr 2022 11:34:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198280
IP address blocks:        78.83.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937755295 (0x37e5029f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Apr 28 11:34:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ecd58f6b01cb8df51354335d6dccf4030d08be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:40:9e:66:dd:ad:e5:bc:64:e9:c1:31:12:5f:
                    c5:bb:83:32:2a:f3:05:fb:0a:85:0d:1f:7e:8a:73:
                    5c:1c:59:4f:27:ed:e3:d8:cf:e4:71:a1:3a:ae:09:
                    f4:e8:48:42:28:16:ee:72:39:48:a9:cd:24:71:bb:
                    3c:a5:69:f0:64:e8:2b:b1:5b:3c:68:3d:a4:fa:21:
                    4f:d6:95:df:a9:2d:fd:68:13:4c:e7:cc:3f:8b:3f:
                    2a:be:96:dd:61:33:86:59:50:8c:80:7d:e5:4d:35:
                    2d:4a:2d:cc:11:69:65:4a:85:f9:54:4b:f3:08:59:
                    f8:1d:de:cf:ed:f1:00:32:07:f7:21:15:f6:ac:75:
                    da:06:5a:b9:5a:26:f8:54:c8:a0:a8:3f:5b:d9:14:
                    54:c9:dc:f7:d7:ee:37:13:7d:d8:6b:6a:73:da:d9:
                    6c:69:44:5a:fa:0f:25:4a:90:3c:09:34:b2:93:99:
                    59:63:f0:de:d9:f8:ad:10:3a:9f:1e:d0:03:e1:ac:
                    23:96:a8:8e:fe:11:40:db:42:05:bd:da:e6:15:66:
                    f1:f3:7d:60:49:a9:af:3f:06:00:7a:0f:ac:2f:80:
                    45:4e:8b:7b:3c:dd:24:b6:e3:16:d5:67:8a:42:92:
                    19:67:4c:a4:83:90:b7:40:63:c1:71:c4:21:eb:32:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CD:58:F6:B0:1C:B8:DF:51:35:43:35:D6:DC:CF:40:30:D0:8B:E6
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Hs1Y9rAcuN9RNUM11tzPQDDQi-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:96:3a:bc:40:f7:4d:c1:9c:75:de:ed:bc:d9:2f:4b:f1:20:
         55:62:00:53:81:50:90:2d:46:4e:51:11:51:02:0f:f8:87:ac:
         34:1d:d0:2f:ca:5c:63:a1:7f:ea:06:66:db:b1:86:ee:1b:9a:
         80:79:58:57:0b:8d:a4:61:d4:47:e9:b8:8c:77:e9:ee:36:50:
         d5:e2:20:04:8b:76:71:af:04:2c:d2:5a:a6:f9:34:ea:cb:1d:
         62:69:80:dc:d9:17:7f:d3:1d:0a:2f:1f:f5:f0:35:60:8b:3c:
         dd:50:2a:c1:1f:33:f8:01:50:af:90:47:80:bb:87:9b:42:a7:
         0f:a7:c5:31:bf:7e:7e:90:8d:cf:50:97:18:1d:3e:f3:70:cb:
         66:1d:12:0c:dd:46:77:03:f1:99:5b:f9:21:65:bd:eb:1c:13:
         7d:58:ed:53:9e:0e:35:b0:5f:4a:f7:c7:d5:fc:d1:54:a4:66:
         cb:5c:91:69:3c:f4:ab:28:95:b1:d4:02:64:cc:0d:38:5d:23:
         0a:12:01:38:90:be:1d:3b:b7:4c:4f:e2:da:ec:3d:56:c7:05:
         6d:21:4b:eb:d4:dc:ee:24:f4:89:a6:4d:5a:75:3e:16:fc:3d:
         51:cc:7a:d0:9c:6f:5e:44:5d:9c:3b:5c:79:d5:cd:b5:ed:c0:
         8b:a4:07:0b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN+UCnzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDQy
ODExMzQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWVjZDU4ZjZiMDFj
YjhkZjUxMzU0MzM1ZDZkY2NmNDAzMGQwOGJlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPlAnmbdreW8ZOnBMRJfxbuDMirzBfsKhQ0ffopzXBxZTyft
49jP5HGhOq4J9OhIQigW7nI5SKnNJHG7PKVp8GToK7FbPGg9pPohT9aV36kt/WgT
TOfMP4s/Kr6W3WEzhllQjIB95U01LUotzBFpZUqF+VRL8whZ+B3ez+3xADIH9yEV
9qx12gZauVom+FTIoKg/W9kUVMnc99fuNxN92Gtqc9rZbGlEWvoPJUqQPAk0spOZ
WWPw3tn4rRA6nx7QA+GsI5aojv4RQNtCBb3a5hVm8fN9YEmprz8GAHoPrC+ARU6L
ezzdJLbjFtVnikKSGWdMpIOQt0BjwXHEIesy8zECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQezVj2sBy431E1QzXW3M9AMNCL5jAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L0hzMVk5ckFjdU45Uk5VTTExdHpQUUREUWktWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE5T0TANBgkqhkiG9w0BAQsFAAOC
AQEAZJY6vED3TcGcdd7tvNkvS/EgVWIAU4FQkC1GTlERUQIP+IesNB3QL8pcY6F/
6gZm27GG7huagHlYVwuNpGHUR+m4jHfp7jZQ1eIgBIt2ca8ELNJapvk06ssdYmmA
3NkXf9MdCi8f9fA1YIs83VAqwR8z+AFQr5BHgLuHm0KnD6fFMb9+fpCNz1CXGB0+
83DLZh0SDN1GdwPxmVv5IWW96xwTfVjtU54ONbBfSvfH1fzRVKRmy1yRaTz0qyiV
sdQCZMwNOF0jChIBOJC+HTu3TE/i2uw9VscFbSFL69Tc7iT0iaZNWnU+Fvw9Ucx6
0JxvXkRdnDtcedXNte3Ai6QHCw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-ams.rpki-client.org