Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/gFUCaLlr27lH01N8gofqVYe8ik0.roa
File:                     gFUCaLlr27lH01N8gofqVYe8ik0.roa (raw, json)
Hash identifier:          gGtcjKPRKZRjS/sX2Ubvl+P1WVUGpM6mr0L8aUw4oL4=
Subject key identifier:   80:55:02:68:B9:6B:DB:B9:47:D3:53:7C:82:87:EA:55:87:BC:8A:4D
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       090C1BA2
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/gFUCaLlr27lH01N8gofqVYe8ik0.roa
Signing time:             Thu 27 Jan 2022 12:43:26 +0000
ROA not before:           Thu 27 Jan 2022 12:43:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        194.76.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151788450 (0x90c1ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Jan 27 12:43:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80550268b96bdbb947d3537c8287ea5587bc8a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:2f:28:c3:86:69:d1:a3:d6:9a:c8:ff:57:
                    ba:6d:f4:eb:20:35:c2:e1:76:c4:73:b5:32:61:23:
                    ec:5b:de:5a:29:a4:e0:61:04:f8:93:b2:82:2c:b1:
                    4d:9b:1b:da:74:8b:90:77:5b:1b:d8:39:38:4e:31:
                    77:ec:bb:7a:3e:b2:85:ac:f1:df:6b:64:2d:63:78:
                    81:5f:68:83:e7:23:f8:52:9e:a5:f6:31:49:2a:0c:
                    cd:b2:f9:ce:e5:54:af:7c:ce:2a:d9:fe:09:7d:2e:
                    35:d3:66:9d:f2:24:52:81:7d:4c:1b:2d:98:2d:09:
                    ea:8f:86:57:19:ef:8e:2f:40:f8:67:1e:e6:a3:6e:
                    5d:0a:3d:5b:a8:30:de:6c:a5:78:57:f2:2c:a6:02:
                    ac:9f:1a:25:00:f1:c9:07:af:25:55:5f:66:c0:ad:
                    da:13:9a:9a:8d:2b:90:c5:62:70:38:4e:b0:fc:f6:
                    0d:dd:77:54:97:b2:b8:7c:2d:f7:b4:c3:42:bf:87:
                    9a:0c:5b:24:31:e6:56:2b:89:1c:6f:f6:98:ad:70:
                    d4:37:ad:f4:43:fb:32:71:1f:02:48:b0:b6:6a:2f:
                    d5:44:fd:1d:5c:4b:37:58:26:d4:ca:71:31:92:b6:
                    71:f4:f5:99:ff:4c:33:e2:08:74:d8:5a:3d:99:25:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:55:02:68:B9:6B:DB:B9:47:D3:53:7C:82:87:EA:55:87:BC:8A:4D
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/gFUCaLlr27lH01N8gofqVYe8ik0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:c7:aa:19:e5:ab:62:14:7a:fa:fb:57:8f:31:7b:b8:b9:
         08:a9:55:70:ee:5f:01:7b:29:5d:1d:76:8a:ec:ea:96:b7:2d:
         e7:01:a9:2b:02:11:90:82:f6:3e:d8:f8:ff:d9:26:06:78:df:
         25:fb:ea:74:d8:90:17:5b:36:d3:80:9c:d2:db:8b:ad:fd:60:
         7d:4b:3d:74:2e:d0:66:8b:41:d5:f5:39:3a:20:4e:68:e7:94:
         9a:6d:4f:9b:4e:cf:b7:44:48:d1:2d:b9:ac:7f:5f:fc:c5:c2:
         c8:03:cb:bd:e2:ee:06:40:4b:ba:65:80:9f:f5:bc:ae:f5:1b:
         2a:bd:42:04:7f:af:52:44:c4:3a:c7:59:c2:57:93:94:39:2d:
         a7:be:47:5e:ad:3c:0d:2d:2f:5a:26:26:d3:22:cc:51:d2:ba:
         f1:98:28:7a:dc:4a:2d:67:d7:bc:03:50:04:5d:80:26:1a:39:
         37:1e:b0:05:bc:f2:96:98:fd:a3:41:9b:a0:0a:cb:b3:b9:e4:
         4a:20:c4:b7:26:51:a9:0f:21:90:92:ba:b4:9b:93:93:3c:f1:
         54:69:75:45:a4:95:f1:f4:ae:7d:0b:5f:a8:4e:82:36:29:72:
         e6:f1:00:8c:32:eb:d9:bc:e1:08:53:55:45:7c:0e:0e:e0:07:
         b6:44:62:f6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECQwbojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MWVmOTY5NGFhNDhkODEyNzllOGVkZTQzMDc5NWYyNzY4ZDJkZDUyMB4XDTIyMDEy
NzEyNDMyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODA1NTAyNjhiOTZi
ZGJiOTQ3ZDM1MzdjODI4N2VhNTU4N2JjOGE0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANOPLyjDhmnRo9aayP9Xum306yA1wuF2xHO1MmEj7FveWimk
4GEE+JOygiyxTZsb2nSLkHdbG9g5OE4xd+y7ej6yhazx32tkLWN4gV9og+cj+FKe
pfYxSSoMzbL5zuVUr3zOKtn+CX0uNdNmnfIkUoF9TBstmC0J6o+GVxnvji9A+Gce
5qNuXQo9W6gw3myleFfyLKYCrJ8aJQDxyQevJVVfZsCt2hOamo0rkMVicDhOsPz2
Dd13VJeyuHwt97TDQr+HmgxbJDHmViuJHG/2mK1w1Det9EP7MnEfAkiwtmov1UT9
HVxLN1gm1MpxMZK2cfT1mf9MM+IIdNhaPZklQzUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSAVQJouWvbuUfTU3yCh+pVh7yKTTAfBgNVHSMEGDAWgBTh75aUqkjYEnno
7eQweV8naNLdUjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRlLVdsS3BJMkJKNTZPM2tNSGxmSjJqUzNWSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvYjA1NjY3LWU4NTAtNGM0NS1hZWUzLWFkZWQxYzQ2OWVhZi8x
L2dGVUNhTGxyMjdsSDAxTjhnb2ZxVlllOGlrMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
YjA1NjY3LWU4NTAtNGM0NS1hZWUzLWFkZWQxYzQ2OWVhZi8xLzRlLVdsS3BJMkJK
NTZPM2tNSGxmSjJqUzNWSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJMcTANBgkqhkiG9w0BAQsFAAOC
AQEAe+nHqhnlq2IUevr7V48xe7i5CKlVcO5fAXspXR12iuzqlrct5wGpKwIRkIL2
Ptj4/9kmBnjfJfvqdNiQF1s204Cc0tuLrf1gfUs9dC7QZotB1fU5OiBOaOeUmm1P
m07Pt0RI0S25rH9f/MXCyAPLveLuBkBLumWAn/W8rvUbKr1CBH+vUkTEOsdZwleT
lDktp75HXq08DS0vWiYm0yLMUdK68ZgoetxKLWfXvANQBF2AJho5Nx6wBbzylpj9
o0GboArLs7nkSiDEtyZRqQ8hkJK6tJuTkzzxVGl1RaSV8fSufQtfqE6CNily5vEA
jDLr2bzhCFNVRXwODuAHtkRi9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org