Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qp-qA_qBupS7K-riauFCFHLecYk.roa
File:                     qp-qA_qBupS7K-riauFCFHLecYk.roa (raw, json)
Hash identifier:          odNEzv3a7v3foHRZfGO2Mk84LFOVYKS7sFeO7GZH+Ms=
Subject key identifier:   AA:9F:AA:03:FA:81:BA:94:BB:2B:EA:E2:6A:E1:42:14:72:DE:71:89
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       37F74017
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qp-qA_qBupS7K-riauFCFHLecYk.roa
Signing time:             Thu 28 Apr 2022 12:17:15 +0000
ROA not before:           Thu 28 Apr 2022 12:17:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62411
IP address blocks:        92.247.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938950679 (0x37f74017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Apr 28 12:17:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa9faa03fa81ba94bb2beae26ae1421472de7189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:42:94:9f:5f:00:ff:d7:a9:83:aa:d8:29:
                    a3:72:97:73:11:f5:cc:5a:42:19:c1:82:d8:56:06:
                    67:39:91:54:9a:dc:de:84:11:93:0b:47:02:d5:bf:
                    6c:07:d8:e5:12:bf:dd:ed:3a:0d:30:1f:d0:1d:82:
                    5b:2d:d5:80:24:45:9c:9a:21:8c:2a:c0:ec:2f:b4:
                    01:6a:21:bf:3b:f5:6e:e7:ae:ce:5f:7c:ba:0f:a5:
                    3c:aa:ef:51:38:79:6c:bc:15:02:73:fb:67:6f:ff:
                    36:02:eb:47:6e:05:b3:fb:3c:d0:a8:be:ba:5a:06:
                    4c:e0:b3:ca:57:c2:8b:6f:5a:05:26:5c:29:b8:09:
                    6d:26:79:02:6b:7e:df:34:e7:f0:43:aa:93:b6:f5:
                    fd:91:16:8f:77:19:f4:b1:c8:59:b6:f2:96:15:76:
                    ed:fd:43:89:51:e2:11:a9:5d:79:4a:35:01:e5:e8:
                    3e:49:aa:7f:62:84:5b:f5:e9:65:c6:6f:de:aa:e1:
                    ed:ff:20:42:2c:0f:d4:6c:9b:6c:28:9a:40:81:98:
                    07:8e:7f:ac:1a:e4:0b:b2:2b:f9:6e:d6:de:a0:fa:
                    8c:1c:6b:3a:8c:5c:e1:bc:ba:02:db:51:32:61:49:
                    d6:53:31:21:72:00:6f:33:21:9a:cc:1c:e9:53:2c:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9F:AA:03:FA:81:BA:94:BB:2B:EA:E2:6A:E1:42:14:72:DE:71:89
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qp-qA_qBupS7K-riauFCFHLecYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:cd:eb:1f:00:a4:2d:df:bc:9c:a0:1b:60:c8:52:70:36:
         fe:8a:a9:52:30:dd:93:08:73:bf:09:9a:c1:4a:00:1e:1b:48:
         94:e6:a4:1e:ec:0c:05:82:0f:dc:68:a6:88:f4:f2:7f:7f:a3:
         bd:c6:82:f1:4c:b3:cc:39:77:ea:4f:5b:60:10:36:4a:66:af:
         4b:42:38:03:c3:65:23:04:ef:8b:6e:30:56:b2:04:f8:16:cf:
         fa:df:06:a5:16:4d:33:bb:5e:89:90:14:d3:ac:4a:08:98:4c:
         8f:16:58:bb:5b:ac:80:b7:17:b4:86:d7:c1:0e:2f:66:e2:18:
         6f:41:24:23:d2:1b:f8:b0:da:24:4c:0d:ac:7b:b6:15:3f:68:
         02:1c:b4:f1:0d:14:8b:e4:73:63:e3:6c:7e:d7:a6:56:28:15:
         b4:84:ac:0e:c1:8f:a6:b5:bb:9b:c2:ed:8c:0d:15:62:88:79:
         91:b9:e5:eb:eb:3a:ac:29:d6:8c:b8:da:c0:c7:3e:4d:bd:18:
         9e:9a:3f:96:59:76:66:21:71:91:13:d9:42:18:c6:06:06:85:
         2e:16:68:f6:41:7c:0e:67:3c:1e:c3:28:a9:c4:bf:51:f8:1b:
         82:9f:3c:2c:aa:73:13:e1:28:02:28:a9:63:c5:2d:91:80:47:
         9d:9d:3d:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN/dAFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDQy
ODEyMTcxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWE5ZmFhMDNmYTgx
YmE5NGJiMmJlYWUyNmFlMTQyMTQ3MmRlNzE4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvjQpSfXwD/16mDqtgpo3KXcxH1zFpCGcGC2FYGZzmRVJrc
3oQRkwtHAtW/bAfY5RK/3e06DTAf0B2CWy3VgCRFnJohjCrA7C+0AWohvzv1bueu
zl98ug+lPKrvUTh5bLwVAnP7Z2//NgLrR24Fs/s80Ki+uloGTOCzylfCi29aBSZc
KbgJbSZ5Amt+3zTn8EOqk7b1/ZEWj3cZ9LHIWbbylhV27f1DiVHiEaldeUo1AeXo
Pkmqf2KEW/XpZcZv3qrh7f8gQiwP1GybbCiaQIGYB45/rBrkC7Ir+W7W3qD6jBxr
Ooxc4by6AttRMmFJ1lMxIXIAbzMhmswc6VMspn8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSqn6oD+oG6lLsr6uJq4UIUct5xiTAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L3FwLXFBX3FCdXBTN0stcmlhdUZDRkhMZWNZay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFz3vDANBgkqhkiG9w0BAQsFAAOC
AQEAUS/N6x8ApC3fvJygG2DIUnA2/oqpUjDdkwhzvwmawUoAHhtIlOakHuwMBYIP
3GimiPTyf3+jvcaC8UyzzDl36k9bYBA2SmavS0I4A8NlIwTvi24wVrIE+BbP+t8G
pRZNM7teiZAU06xKCJhMjxZYu1usgLcXtIbXwQ4vZuIYb0EkI9Ib+LDaJEwNrHu2
FT9oAhy08Q0Ui+RzY+NsftemVigVtISsDsGPprW7m8LtjA0VYoh5kbnl6+s6rCnW
jLjawMc+Tb0Ynpo/lll2ZiFxkRPZQhjGBgaFLhZo9kF8Dmc8HsMoqcS/Ufgbgp88
LKpzE+EoAiipY8UtkYBHnZ09Pw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:21 2023 by rpki-client on console-fra.rpki-client.org