Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-MqCnzyxUpXEYkzBKGw8LFkbP1M.roa
File:                     1-MqCnzyxUpXEYkzBKGw8LFkbP1M.roa (raw, json)
Hash identifier:          4K3wDE1QgVEE4xeYhvKyWSAcIQ4DC6vrv1kRw8LCZuw=
Subject key identifier:   F8:CA:82:9F:3C:B1:52:95:C4:62:4C:C1:28:6C:3C:2C:59:1B:3F:53
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       04838507
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-MqCnzyxUpXEYkzBKGw8LFkbP1M.roa
Signing time:             Wed 02 Mar 2022 10:42:13 +0000
ROA not before:           Wed 02 Mar 2022 10:42:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41092
IP address blocks:        148.81.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75728135 (0x4838507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  2 10:42:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8ca829f3cb15295c4624cc1286c3c2c591b3f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:a0:5f:75:78:ad:4b:21:97:7c:51:00:1d:
                    28:e8:03:a4:9c:13:60:c6:8b:d7:74:a5:25:6e:48:
                    ef:a4:94:a2:52:31:07:3f:79:11:a7:59:68:73:22:
                    a8:fa:fa:9d:87:e7:17:26:8c:cd:e8:98:b2:fe:79:
                    06:b5:63:56:0e:c0:c6:11:59:c6:bf:67:59:83:65:
                    c7:27:35:3d:91:9c:4b:32:7a:97:ef:ae:56:49:0d:
                    9f:e7:4a:7d:24:17:4b:90:6c:5f:0c:88:77:d0:e2:
                    6b:77:1b:9a:93:fa:b8:f7:75:fb:40:d3:b1:98:02:
                    6a:5e:9c:3d:a0:be:e8:c3:35:25:1f:2f:52:7e:ee:
                    c1:79:0e:0c:2a:82:14:51:ab:90:d6:1b:73:1b:b7:
                    bf:49:97:12:74:55:69:79:fc:26:36:bb:08:f7:2b:
                    a1:db:a4:04:4b:1e:9e:0c:bc:79:c3:63:fc:b5:56:
                    99:d0:24:67:54:ae:43:62:a0:0e:cb:95:af:91:b2:
                    ff:c7:40:6a:9a:d7:ec:a0:65:a6:2c:a8:44:19:90:
                    48:f4:df:0d:08:e7:83:d8:8d:c0:42:6b:47:07:fb:
                    ee:b4:a4:48:19:b3:15:80:27:3d:ee:19:93:b2:2a:
                    71:d0:7a:54:ca:38:fe:10:4d:3b:9d:6e:bb:74:67:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:82:9F:3C:B1:52:95:C4:62:4C:C1:28:6C:3C:2C:59:1B:3F:53
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-MqCnzyxUpXEYkzBKGw8LFkbP1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:82:e5:a4:0e:21:42:09:72:38:96:78:8c:9f:ed:a9:7b:
         0c:c9:9f:c5:fa:0f:e4:da:81:03:95:a1:a7:24:7d:e7:60:08:
         af:0c:bf:a1:c8:4f:69:cb:1a:33:7b:9c:1e:b7:12:44:d4:c9:
         61:fb:9e:21:23:05:f1:48:e5:b4:94:95:28:7a:dd:32:1d:1a:
         0f:ae:ab:b8:b0:ab:ba:a6:e6:a6:32:c0:d5:c0:0c:04:a8:28:
         9a:56:62:e8:91:c3:62:ee:ad:27:05:0f:22:c7:da:93:67:e1:
         b7:00:16:62:e0:4a:15:2d:70:b7:97:32:e9:f9:55:92:9a:b7:
         c8:dc:d2:da:a7:cc:2f:ff:e9:c6:f9:f5:fa:61:b1:8a:d7:10:
         82:05:86:bf:67:e9:e9:02:30:40:82:52:ce:c5:35:67:5e:17:
         ac:c2:41:19:ac:f2:c6:53:6c:b9:85:7f:5b:e2:9c:b2:44:fc:
         b6:ee:a5:ba:29:5f:56:11:ec:cb:42:06:cf:88:7a:23:01:43:
         e3:83:fc:a1:ce:92:17:d9:97:f1:e9:4e:e3:5c:52:8c:ff:64:
         57:36:f8:c9:b2:06:c2:76:bb:07:67:72:11:c4:2b:c9:67:0d:
         b6:64:a6:67:e0:04:e5:bb:ef:9d:85:a5:70:7d:0b:4f:8f:eb:
         bb:0d:db:90
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBIOFBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MGM0MDk2MTNmZWEwYTJiNDQyY2UxMTJlOWNiZGI0ODVlMDExODhmMB4XDTIyMDMw
MjEwNDIxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjhjYTgyOWYzY2Ix
NTI5NWM0NjI0Y2MxMjg2YzNjMmM1OTFiM2Y1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzroF91eK1LIZd8UQAdKOgDpJwTYMaL13SlJW5I76SUolIx
Bz95EadZaHMiqPr6nYfnFyaMzeiYsv55BrVjVg7AxhFZxr9nWYNlxyc1PZGcSzJ6
l++uVkkNn+dKfSQXS5BsXwyId9Dia3cbmpP6uPd1+0DTsZgCal6cPaC+6MM1JR8v
Un7uwXkODCqCFFGrkNYbcxu3v0mXEnRVaXn8Jja7CPcrodukBEsengy8ecNj/LVW
mdAkZ1SuQ2KgDsuVr5Gy/8dAaprX7KBlpiyoRBmQSPTfDQjng9iNwEJrRwf77rSk
SBmzFYAnPe4Zk7IqcdB6VMo4/hBNO51uu3RnXf0CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT4yoKfPLFSlcRiTMEobDwsWRs/UzAfBgNVHSMEGDAWgBQwxAlhP+oKK0Qs
4RLpy9tIXgEYjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01NUUpZVF9xQ2l0RUxPRVM2Y3ZiU0Y0QkdJOC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8x
LzEtTXFDbnp5eFVwWEVZa3pCS0d3OExGa2JQMU0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEx
L2I3OGZiNS1hZmNhLTRkYjctODg4Ni1jMDY3MWJmNGNmM2UvMS9NTVFKWVRfcUNp
dEVMT0VTNmN2YlNGNEJHSTguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACUUX8wDQYJKoZIhvcNAQELBQAD
ggEBAE/MguWkDiFCCXI4lniMn+2pewzJn8X6D+TagQOVoackfedgCK8Mv6HIT2nL
GjN7nB63EkTUyWH7niEjBfFI5bSUlSh63TIdGg+uq7iwq7qm5qYywNXADASoKJpW
YuiRw2LurScFDyLH2pNn4bcAFmLgShUtcLeXMun5VZKat8jc0tqnzC//6cb59fph
sYrXEIIFhr9n6ekCMECCUs7FNWdeF6zCQRms8sZTbLmFf1vinLJE/LbupbopX1YR
7MtCBs+IeiMBQ+OD/KHOkhfZl/HpTuNcUoz/ZFc2+MmyBsJ2uwdnchHEK8lnDbZk
pmfgBOW7752FpXB9C0+P67sN25A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org