Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/J6kxReqplrSsl5Prb8Hoap4Skn8.roa
File:                     J6kxReqplrSsl5Prb8Hoap4Skn8.roa (raw, json)
Hash identifier:          kODgXVWI19F1XTCDNrLQ8Sf4ZkyHkyPHykPw2oxjCco=
Subject key identifier:   27:A9:31:45:EA:A9:96:B4:AC:97:93:EB:6F:C1:E8:6A:9E:12:92:7F
Certificate issuer:       /CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Certificate serial:       0183CD04076464765169EDC8721BD746E173
Authority key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/J6kxReqplrSsl5Prb8Hoap4Skn8.roa
Signing time:             Wed 12 Oct 2022 16:25:36 +0000
ROA not before:           Wed 12 Oct 2022 16:25:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3561
IP address blocks:        94.103.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cd:04:07:64:64:76:51:69:ed:c8:72:1b:d7:46:e1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
        Validity
            Not Before: Oct 12 16:25:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27a93145eaa996b4ac9793eb6fc1e86a9e12927f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:ee:82:90:be:4b:04:cd:85:4e:ca:46:81:
                    b9:b3:d6:41:8c:7a:d2:48:7e:76:db:5a:c2:b7:3a:
                    a9:f2:82:59:e2:70:de:3d:cf:a7:0e:12:35:41:bd:
                    a4:08:53:9e:85:54:64:0c:bc:eb:38:61:0b:79:44:
                    68:82:6f:52:81:1b:44:37:e3:bb:25:1f:1b:e7:6a:
                    2e:10:40:2c:d5:48:fc:8f:07:3f:46:43:4d:2c:93:
                    08:de:86:e8:fb:dd:9b:1c:dc:95:50:25:45:aa:e7:
                    d7:37:30:b7:91:d6:72:8c:f3:7d:92:82:a6:cd:d9:
                    f2:c2:ab:0a:a3:b6:a6:10:c8:cb:f0:e4:1d:ea:6b:
                    6f:73:ac:3a:6e:b6:0c:9c:be:db:fd:09:af:4b:6f:
                    bb:4b:16:20:48:d2:63:25:31:f1:ca:ae:38:d5:45:
                    54:db:63:2c:5d:36:41:d3:53:46:e8:6b:2e:d5:13:
                    9f:c2:07:63:97:1e:fd:53:93:a3:f7:a1:d4:f3:e0:
                    0c:eb:fc:7e:98:0c:75:fe:0a:34:3a:70:99:6e:14:
                    e5:36:d5:f1:5f:81:d4:bb:38:94:67:cc:db:eb:ac:
                    72:2c:bc:e5:1a:22:d9:4b:99:ec:d7:2f:3f:72:4e:
                    f5:80:0b:6e:24:7b:af:06:fe:72:c1:fa:d6:46:66:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:31:45:EA:A9:96:B4:AC:97:93:EB:6F:C1:E8:6A:9E:12:92:7F
            X509v3 Authority Key Identifier:
                keyid:44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/J6kxReqplrSsl5Prb8Hoap4Skn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:2f:7c:18:8f:d5:e2:8e:00:7f:72:0a:31:14:fe:c6:ab:
         0b:dc:02:75:73:7b:df:e5:a9:5c:e1:bd:90:a6:54:37:b8:34:
         6a:41:61:42:34:91:08:e9:f5:74:42:68:48:76:d0:3c:f5:18:
         88:42:26:05:05:bb:65:5a:c4:c1:78:1c:47:a1:9c:5a:4b:97:
         e4:43:38:58:a5:03:8b:07:90:9f:e8:66:33:20:96:de:09:97:
         69:db:09:6f:22:bb:bc:e1:4c:4f:29:c0:d5:3e:1e:38:53:5f:
         14:a5:dd:26:2e:06:02:8c:8e:19:c3:93:ff:d7:77:ac:03:97:
         ee:79:31:97:60:30:0e:b2:6f:3e:5b:90:16:dd:d8:9d:79:10:
         3f:0e:c5:56:8e:c0:12:9f:17:1f:75:52:67:b8:70:e8:b2:26:
         73:93:1c:05:47:31:f4:08:8f:1f:90:0b:dd:1e:be:c6:ec:67:
         95:8a:31:75:ba:8e:86:62:69:95:b6:4a:53:d5:91:54:65:10:
         70:e2:06:9a:dd:59:79:da:9b:5b:98:95:d2:55:7e:49:cf:9f:
         49:6c:c1:15:b2:21:45:3a:e7:a9:d9:24:c0:75:1d:29:04:e8:
         09:e4:ed:99:6a:09:74:0d:28:20:9f:83:99:82:47:08:1e:c2:
         b8:08:33:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPNBAdkZHZRae3IchvXRuFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGNlNjg0ZDU3MDFkZGIwMmEyNmI1NWUyOWVhYzlmZTgw
NGRlZGEwHhcNMjIxMDEyMTYyNTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2E5MzE0NWVhYTk5NmI0YWM5NzkzZWI2ZmMxZTg2YTllMTI5MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzfugpC+SwTNhU7KRoG5s9ZBjHrS
SH5221rCtzqp8oJZ4nDePc+nDhI1Qb2kCFOehVRkDLzrOGELeURogm9SgRtEN+O7
JR8b52ouEEAs1Uj8jwc/RkNNLJMI3obo+92bHNyVUCVFqufXNzC3kdZyjPN9koKm
zdnywqsKo7amEMjL8OQd6mtvc6w6brYMnL7b/QmvS2+7SxYgSNJjJTHxyq441UVU
22MsXTZB01NG6Gsu1ROfwgdjlx79U5Oj96HU8+AM6/x+mAx1/go0OnCZbhTlNtXx
X4HUuziUZ8zb66xyLLzlGiLZS5ns1y8/ck71gAtuJHuvBv5ywfrWRmYOjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCepMUXqqZa0rJeT62/B6GqeEpJ/MB8GA1UdIwQY
MBaAFEQM5oTVcB3bAqJrVeKerJ/oBN7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkF6bWhOVndIZHNDb210VjRwNnNuLWdFM3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hNDg3OTEtY2FmZC00MjNmLWJkNjEt
ODE2YThjMjEwNjI0LzEvSjZreFJlcXBsclNzbDVQcmI4SG9hcDRTa244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hNDg3OTEtY2FmZC00MjNmLWJkNjEtODE2YThjMjEwNjI0
LzEvUkF6bWhOVndIZHNDb210VjRwNnNuLWdFM3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmewMA0G
CSqGSIb3DQEBCwUAA4IBAQAbVC98GI/V4o4Af3IKMRT+xqsL3AJ1c3vf5alc4b2Q
plQ3uDRqQWFCNJEI6fV0QmhIdtA89RiIQiYFBbtlWsTBeBxHoZxaS5fkQzhYpQOL
B5Cf6GYzIJbeCZdp2wlvIru84UxPKcDVPh44U18Upd0mLgYCjI4Zw5P/13esA5fu
eTGXYDAOsm8+W5AW3dideRA/DsVWjsASnxcfdVJnuHDosiZzkxwFRzH0CI8fkAvd
Hr7G7GeVijF1uo6GYmmVtkpT1ZFUZRBw4gaa3Vl52ptbmJXSVX5Jz59JbMEVsiFF
Ouep2STAdR0pBOgJ5O2Zagl0DSggn4OZgkcIHsK4CDNa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:26 2023 by rpki-client on console-ams.rpki-client.org