Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/EOGslTy0FynQege2wZjR6XTRU0M.roa
File:                     EOGslTy0FynQege2wZjR6XTRU0M.roa (raw, json)
Hash identifier:          c8bDI0kLhPXAx7J2mkGDggwL3pC6uwJT0sWeuCyeIvo=
Subject key identifier:   10:E1:AC:95:3C:B4:17:29:D0:7A:07:B6:C1:98:D1:E9:74:D1:53:43
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       1CCA2C88
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/EOGslTy0FynQege2wZjR6XTRU0M.roa
Signing time:             Mon 18 Apr 2022 21:27:13 +0000
ROA not before:           Mon 18 Apr 2022 21:27:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33667
IP address blocks:        2a03:2887:ff32::/48 maxlen: 48
                          2a03:2887:ff31::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483011720 (0x1cca2c88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Apr 18 21:27:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10e1ac953cb41729d07a07b6c198d1e974d15343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:41:2a:58:27:3a:e4:d7:64:70:2d:6e:0c:
                    11:9d:30:71:45:fd:40:46:23:c7:77:6b:c7:74:cf:
                    1e:9b:30:08:ab:19:86:17:c8:3b:54:e3:d2:4f:e4:
                    ec:81:f5:30:ca:d1:70:81:8e:e8:1c:ba:84:91:18:
                    c5:00:90:00:77:ce:e5:f6:83:ef:b9:60:b3:4f:ce:
                    4a:e1:f5:05:06:31:70:6f:b5:f4:2f:82:65:e9:3d:
                    26:64:a6:ca:15:47:73:4d:9f:7f:6e:36:e0:aa:43:
                    65:49:64:ab:d3:04:6b:5e:5d:79:c2:0e:be:ba:3e:
                    66:00:cd:02:9f:1f:7d:d7:eb:1c:39:86:10:fa:0e:
                    93:84:f0:80:3d:f2:22:8f:fc:36:2e:27:4e:d7:c5:
                    e9:31:b0:7c:f9:9e:53:4c:3e:ec:8d:42:8f:a3:07:
                    00:0e:3a:5d:36:b5:23:32:41:78:db:9b:95:53:08:
                    de:5f:96:3c:5f:15:ee:cb:83:f6:b1:b7:ba:8c:74:
                    e6:9e:03:3f:e5:d7:fb:2e:ac:5b:04:b7:e3:49:57:
                    ca:06:65:7f:3d:62:fa:dd:0a:0a:fc:a1:53:f1:52:
                    03:e0:14:ac:9b:47:3b:66:72:31:a0:e6:32:0a:72:
                    5d:0d:59:b9:55:83:d4:86:4b:d3:7e:3e:de:8c:02:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:AC:95:3C:B4:17:29:D0:7A:07:B6:C1:98:D1:E9:74:D1:53:43
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/EOGslTy0FynQege2wZjR6XTRU0M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2887:ff31::-2a03:2887:ff32:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         d4:c4:54:d9:86:9e:b4:6f:fc:a6:ba:ac:38:94:3d:a6:5a:a3:
         af:e2:fc:96:5c:c1:48:a4:ba:76:48:f6:65:97:4e:91:ed:72:
         ea:5e:fb:5c:c5:d6:e0:18:0d:76:8b:25:20:a2:8d:db:52:db:
         88:d7:7e:3d:a2:e7:33:70:b7:1b:87:38:01:38:86:d8:fa:bf:
         0c:87:b8:a4:f7:25:71:9a:96:79:3f:fa:84:fb:b1:dc:e2:33:
         6b:c4:3d:15:8d:7b:ef:30:4c:61:b1:b0:50:87:20:e8:cc:1f:
         a3:b3:4c:37:d0:68:1c:73:4c:73:8b:a7:81:67:51:e8:30:58:
         1e:9b:93:0c:ca:c9:6b:eb:e7:89:f9:45:0d:6a:5e:13:e2:e2:
         1a:f9:c6:6b:53:23:5e:af:ca:57:97:df:68:22:ad:4a:a3:12:
         3b:e4:23:20:d1:c9:49:3f:f3:f8:23:63:27:e8:8b:f0:9e:55:
         03:db:f9:7b:7d:0d:43:4d:cc:82:09:97:2b:2b:8b:c6:6c:42:
         bb:60:28:a8:2b:08:e2:7b:04:66:68:f4:28:62:4e:58:3d:5f:
         d7:41:d0:01:bc:e1:1b:1f:df:1b:11:c2:eb:0a:98:d7:f6:f4:
         0f:b4:e0:c6:ac:31:43:63:0b:7a:ff:8d:de:76:27:16:d3:b5:
         48:0e:30:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEHMosiDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzVhMDY0ZjMwMTAyNmJjM2NmODc2NjZkNmE4MjAxMjgyMTJhODExMB4XDTIyMDQx
ODIxMjcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBlMWFjOTUzY2I0
MTcyOWQwN2EwN2I2YzE5OGQxZTk3NGQxNTM0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1+QSpYJzrk12RwLW4MEZ0wcUX9QEYjx3drx3TPHpswCKsZ
hhfIO1Tj0k/k7IH1MMrRcIGO6By6hJEYxQCQAHfO5faD77lgs0/OSuH1BQYxcG+1
9C+CZek9JmSmyhVHc02ff2424KpDZUlkq9MEa15decIOvro+ZgDNAp8ffdfrHDmG
EPoOk4TwgD3yIo/8Ni4nTtfF6TGwfPmeU0w+7I1Cj6MHAA46XTa1IzJBeNublVMI
3l+WPF8V7suD9rG3uox05p4DP+XX+y6sWwS340lXygZlfz1i+t0KCvyhU/FSA+AU
rJtHO2ZyMaDmMgpyXQ1ZuVWD1IZL034+3owCDMECAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQQ4ayVPLQXKdB6B7bBmNHpdNFTQzAfBgNVHSMEGDAWgBQ3WgZPMBAmvDz4
dmbWqCASghKoETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L04xb0dUekFRSnJ3OC1IWm0xcWdnRW9JU3FCRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvZGM1ODgxLTM2MzItNDVhZi1iZjU5LWY0NGE1N2NlZDczZC8x
L0VPR3NsVHkwRnluUWVnZTJ3WmpSNlhUUlUwTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
ZGM1ODgxLTM2MzItNDVhZi1iZjU5LWY0NGE1N2NlZDczZC8xL04xb0dUekFRSnJ3
OC1IWm0xcWdnRW9JU3FCRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcAKgMoh/8xAwcAKgMoh/8yMA0G
CSqGSIb3DQEBCwUAA4IBAQDUxFTZhp60b/ymuqw4lD2mWqOv4vyWXMFIpLp2SPZl
l06R7XLqXvtcxdbgGA12iyUgoo3bUtuI1349ouczcLcbhzgBOIbY+r8Mh7ik9yVx
mpZ5P/qE+7Hc4jNrxD0VjXvvMExhsbBQhyDozB+js0w30Ggcc0xzi6eBZ1HoMFge
m5MMyslr6+eJ+UUNal4T4uIa+cZrUyNer8pXl99oIq1KoxI75CMg0clJP/P4I2Mn
6IvwnlUD2/l7fQ1DTcyCCZcrK4vGbEK7YCioKwjiewRmaPQoYk5YPV/XQdABvOEb
H98bEcLrCpjX9vQPtODGrDFDYwt6/43edicW07VIDjAi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org