Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/w6jd_IErcu6EEhjO92LUnZIDiiI.roa
File:                     w6jd_IErcu6EEhjO92LUnZIDiiI.roa (raw, json)
Hash identifier:          l/TpbDBdgLoW4CqDezlEvabdmg49sCzW75MMOHtntmE=
Subject key identifier:   C3:A8:DD:FC:81:2B:72:EE:84:12:18:CE:F7:62:D4:9D:92:03:8A:22
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       04E67AD6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/w6jd_IErcu6EEhjO92LUnZIDiiI.roa
Signing time:             Tue 01 Mar 2022 14:06:29 +0000
ROA not before:           Tue 01 Mar 2022 14:06:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        193.233.232.0/22 maxlen: 22
                          193.233.85.0/24 maxlen: 24
                          193.233.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82213590 (0x4e67ad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Mar  1 14:06:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3a8ddfc812b72ee841218cef762d49d92038a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:97:a3:ea:05:bf:47:00:28:16:bf:a4:f0:
                    dd:e0:ee:a0:49:60:1c:6a:5a:09:50:f9:54:d8:17:
                    57:70:4f:26:8e:8f:f0:62:2f:2a:93:42:16:81:ce:
                    a2:6f:d0:39:5d:d5:c7:98:5a:22:b7:5d:d8:da:e7:
                    18:0b:c7:a0:44:1b:c8:c6:89:49:3d:bc:d8:6a:56:
                    21:e6:b7:20:61:51:ce:2a:28:0a:9d:fc:7c:20:c1:
                    45:e2:7b:38:04:ab:cc:19:45:37:a7:58:27:6c:01:
                    08:0d:07:94:c4:7b:06:c7:d5:3e:44:d5:fd:ca:61:
                    05:83:b0:54:35:72:15:2f:28:af:14:5d:92:04:fb:
                    3b:66:4d:67:f3:a1:c6:20:6a:a4:05:4b:38:ef:7f:
                    ba:52:3d:b9:13:07:c6:51:74:cc:a4:7c:0e:3b:1a:
                    29:df:47:19:05:8a:67:bc:17:50:26:c4:83:8d:77:
                    e1:47:d4:a5:ef:a8:0f:3f:b2:ba:fb:41:c6:18:26:
                    1b:c0:40:93:e3:5c:9d:40:d1:65:c5:71:28:1c:a3:
                    52:8c:40:65:a3:3b:e0:25:35:b0:ff:89:55:64:4f:
                    59:8b:b0:7c:ab:79:9e:f5:1e:e2:5b:66:a8:73:15:
                    6d:6d:14:78:66:1f:ed:67:95:b5:a7:59:8e:67:58:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:DD:FC:81:2B:72:EE:84:12:18:CE:F7:62:D4:9D:92:03:8A:22
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/w6jd_IErcu6EEhjO92LUnZIDiiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.85.0/24
                  193.233.212.0/22
                  193.233.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:6b:18:7b:f5:26:dc:d7:8c:d1:c2:6b:08:cb:cd:dc:1d:
         b3:66:88:19:1f:5b:48:44:01:90:96:5b:f5:f3:92:35:77:13:
         61:d8:cf:88:c1:23:37:a5:fc:3d:fb:66:90:1b:f1:4f:99:87:
         a0:c3:fc:35:9d:a4:9e:cf:b0:95:05:c5:9a:0a:77:3c:1b:a5:
         d8:6f:63:47:b6:5d:de:44:f5:72:b8:90:a6:06:4b:d5:c2:47:
         ee:77:09:13:93:9b:8c:eb:ae:21:fb:b3:41:22:27:57:e3:44:
         e0:78:0a:33:89:b3:36:f6:db:33:d7:98:0e:bf:8d:dd:90:a6:
         46:8b:7a:14:12:da:0a:1f:28:7e:52:40:72:f3:77:9b:eb:82:
         db:d2:a3:1a:79:5a:b2:22:e3:33:e5:68:09:e4:44:e4:fb:79:
         41:b8:7f:69:94:f4:2c:a0:68:dd:5b:99:a8:24:85:75:76:14:
         6e:ce:2c:ec:70:8b:40:79:72:c7:37:c9:25:cf:e2:7c:f4:ab:
         07:3b:d5:17:76:81:87:44:2c:02:41:59:3f:c6:41:18:fa:71:
         75:4f:bd:85:3b:c5:91:f5:a6:82:3b:9c:90:c9:75:9d:8a:7a:
         d2:36:87:36:b4:1f:93:cb:c6:6d:ee:6d:a3:8e:93:05:c8:39:
         4f:4d:6e:67
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBOZ61jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmQ2NDhiZGJhOTY1NDYxYjFlOGMxMWI5ZGQ0MzZjNjEzODI4NzNjMB4XDTIyMDMw
MTE0MDYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNhOGRkZmM4MTJi
NzJlZTg0MTIxOGNlZjc2MmQ0OWQ5MjAzOGEyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIUdl6PqBb9HACgWv6Tw3eDuoElgHGpaCVD5VNgXV3BPJo6P
8GIvKpNCFoHOom/QOV3Vx5haIrdd2NrnGAvHoEQbyMaJST282GpWIea3IGFRzioo
Cp38fCDBReJ7OASrzBlFN6dYJ2wBCA0HlMR7BsfVPkTV/cphBYOwVDVyFS8orxRd
kgT7O2ZNZ/OhxiBqpAVLOO9/ulI9uRMHxlF0zKR8DjsaKd9HGQWKZ7wXUCbEg413
4UfUpe+oDz+yuvtBxhgmG8BAk+NcnUDRZcVxKByjUoxAZaM74CU1sP+JVWRPWYuw
fKt5nvUe4ltmqHMVbW0UeGYf7WeVtadZjmdYfE0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTDqN38gSty7oQSGM73YtSdkgOKIjAfBgNVHSMEGDAWgBSG1ki9upZUYbHo
wRud1DbGE4KHPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2h0Wkl2YnFXVkdHeDZNRWJuZFEyeGhPQ2h6dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvYWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0OS8x
L3c2amRfSUVyY3U2RUVoak85MkxVblpJRGlpSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
YWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0OS8xL2h0Wkl2YnFXVkdH
eDZNRWJuZFEyeGhPQ2h6dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMHpVQMEAsHp1AMEAsHp6DANBgkq
hkiG9w0BAQsFAAOCAQEAFcNrGHv1JtzXjNHCawjLzdwds2aIGR9bSEQBkJZb9fOS
NXcTYdjPiMEjN6X8PftmkBvxT5mHoMP8NZ2kns+wlQXFmgp3PBul2G9jR7Zd3kT1
criQpgZL1cJH7ncJE5ObjOuuIfuzQSInV+NE4HgKM4mzNvbbM9eYDr+N3ZCmRot6
FBLaCh8oflJAcvN3m+uC29KjGnlasiLjM+VoCeRE5Pt5Qbh/aZT0LKBo3VuZqCSF
dXYUbs4s7HCLQHlyxzfJJc/ifPSrBzvVF3aBh0QsAkFZP8ZBGPpxdU+9hTvFkfWm
gjuckMl1nYp60jaHNrQfk8vGbe5to46TBcg5T01uZw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org