Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Mat8JVqshhVcXLQzO3pjQfoZ7Jw.roa
File:                     Mat8JVqshhVcXLQzO3pjQfoZ7Jw.roa (raw, json)
Hash identifier:          aysSYQxOsZBFkmKw5K5yofPZkSuws6eEI6czXY0LZqE=
Subject key identifier:   31:AB:7C:25:5A:AC:86:15:5C:5C:B4:33:3B:7A:63:41:FA:19:EC:9C
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       04755E56
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Mat8JVqshhVcXLQzO3pjQfoZ7Jw.roa
Signing time:             Wed 02 Mar 2022 10:06:11 +0000
ROA not before:           Wed 02 Mar 2022 10:06:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207105
IP address blocks:        194.181.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74800726 (0x4755e56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  2 10:06:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31ab7c255aac86155c5cb4333b7a6341fa19ec9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:dc:fa:8b:f8:0c:e4:78:30:36:35:ca:d7:
                    3f:79:b1:8b:71:97:82:60:3a:09:63:a6:4f:28:2c:
                    16:35:32:26:e7:d6:35:2c:d4:8f:ce:36:17:45:7b:
                    8c:cc:dd:ff:e0:ae:19:38:2a:dc:5e:40:1a:87:07:
                    6d:f9:d5:dc:83:ca:89:84:68:29:89:00:57:35:cb:
                    63:68:db:1d:66:b2:ef:5a:1b:c5:4a:56:7e:ec:b0:
                    92:0c:ef:66:c3:ae:0e:35:2b:0a:1c:c9:d0:48:1c:
                    c7:7c:d4:59:24:16:17:f6:39:8d:63:ad:61:a8:46:
                    60:fc:d3:9e:5d:bd:e4:bd:80:0e:5c:2f:2d:10:a5:
                    74:ef:6d:34:26:62:37:42:0e:e8:12:d4:d4:3b:3c:
                    fd:52:74:5b:ae:96:9f:f6:e8:b6:96:6e:5b:4e:7b:
                    31:9d:d4:76:ea:4b:6a:83:88:54:79:a7:80:77:19:
                    19:19:5a:b7:c1:4f:cf:6f:cd:40:54:fb:75:8c:d7:
                    9c:db:98:86:ad:b6:27:5e:0c:11:cb:09:e4:93:55:
                    c7:4b:bf:7a:d6:35:1f:da:b0:0d:8f:38:55:fe:46:
                    38:49:b9:22:ee:1a:42:38:9d:5a:e4:b9:8d:13:60:
                    67:44:f1:69:bb:63:f4:eb:6e:b3:d4:55:e7:4c:7b:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AB:7C:25:5A:AC:86:15:5C:5C:B4:33:3B:7A:63:41:FA:19:EC:9C
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Mat8JVqshhVcXLQzO3pjQfoZ7Jw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.181.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:49:41:cc:ca:cc:3e:4f:16:9e:e8:3e:27:6e:90:f1:52:
         08:b1:49:b8:3d:fe:e3:c6:4c:c4:c7:69:db:94:74:ef:c4:80:
         7d:d7:9f:4e:e5:97:cf:ec:f9:d8:bc:20:05:5f:b9:31:b7:02:
         d7:77:02:71:e9:36:73:a4:38:6e:3d:31:bc:58:ed:e7:5a:6d:
         3f:32:0b:5e:b7:af:19:e4:b7:63:5f:14:fc:3e:10:a7:bd:5a:
         75:f2:46:15:24:f9:5b:3b:c1:20:74:ab:d8:f9:a9:e9:56:e0:
         2a:b7:55:f3:93:b8:77:b5:70:87:f7:c7:3f:28:54:c2:32:60:
         81:36:88:34:96:db:a0:26:fb:40:87:c3:39:68:76:08:9a:89:
         ce:18:36:75:df:8c:a2:60:fc:3d:95:ec:36:a0:bf:81:66:70:
         08:75:b9:8d:7c:9d:fa:ed:0e:7f:87:b9:55:3e:4f:22:9a:48:
         5c:45:57:b8:14:4e:53:c0:fc:a6:37:e4:d1:55:79:35:91:c8:
         15:97:74:85:3b:00:f6:b2:19:99:e9:bf:53:fd:e4:a6:aa:a0:
         b3:b2:da:c3:99:8a:97:7a:39:d6:38:a1:cc:ce:9c:b5:42:08:
         1e:9c:d2:4d:ef:08:ce:e2:85:1a:e0:b2:fe:ad:9d:f4:2a:c3:
         c6:80:c7:c0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBHVeVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MGM0MDk2MTNmZWEwYTJiNDQyY2UxMTJlOWNiZGI0ODVlMDExODhmMB4XDTIyMDMw
MjEwMDYxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzFhYjdjMjU1YWFj
ODYxNTVjNWNiNDMzM2I3YTYzNDFmYTE5ZWM5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANzC3PqL+AzkeDA2NcrXP3mxi3GXgmA6CWOmTygsFjUyJufW
NSzUj842F0V7jMzd/+CuGTgq3F5AGocHbfnV3IPKiYRoKYkAVzXLY2jbHWay71ob
xUpWfuywkgzvZsOuDjUrChzJ0Egcx3zUWSQWF/Y5jWOtYahGYPzTnl295L2ADlwv
LRCldO9tNCZiN0IO6BLU1Ds8/VJ0W66Wn/botpZuW057MZ3UdupLaoOIVHmngHcZ
GRlat8FPz2/NQFT7dYzXnNuYhq22J14MEcsJ5JNVx0u/etY1H9qwDY84Vf5GOEm5
Iu4aQjidWuS5jRNgZ0Txabtj9Otus9RV50x7JTcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQxq3wlWqyGFVxctDM7emNB+hnsnDAfBgNVHSMEGDAWgBQwxAlhP+oKK0Qs
4RLpy9tIXgEYjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01NUUpZVF9xQ2l0RUxPRVM2Y3ZiU0Y0QkdJOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8x
L01hdDhKVnFzaGhWY1hMUXpPM3BqUWZvWjdKdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
Yjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8xL01NUUpZVF9xQ2l0
RUxPRVM2Y3ZiU0Y0QkdJOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMK1LzANBgkqhkiG9w0BAQsFAAOC
AQEAZqVJQczKzD5PFp7oPidukPFSCLFJuD3+48ZMxMdp25R078SAfdefTuWXz+z5
2LwgBV+5MbcC13cCcek2c6Q4bj0xvFjt51ptPzILXrevGeS3Y18U/D4Qp71adfJG
FST5WzvBIHSr2Pmp6VbgKrdV85O4d7Vwh/fHPyhUwjJggTaINJbboCb7QIfDOWh2
CJqJzhg2dd+MomD8PZXsNqC/gWZwCHW5jXyd+u0Of4e5VT5PIppIXEVXuBROU8D8
pjfk0VV5NZHIFZd0hTsA9rIZmem/U/3kpqqgs7Law5mKl3o51jihzM6ctUIIHpzS
Te8IzuKFGuCy/q2d9CrDxoDHwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org