Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b1ny2nmXSKiGUHspd-Nhiah4xrU.roa
File:                     b1ny2nmXSKiGUHspd-Nhiah4xrU.roa (raw, json)
Hash identifier:          Uz4LiqTB4m+v2DcBshFVd51z4a40ROVuX2fhSPjaFgM=
Subject key identifier:   6F:59:F2:DA:79:97:48:A8:86:50:7B:29:77:E3:61:89:A8:78:C6:B5
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       0467E711
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b1ny2nmXSKiGUHspd-Nhiah4xrU.roa
Signing time:             Tue 01 Mar 2022 08:30:14 +0000
ROA not before:           Tue 01 Mar 2022 08:30:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201143
IP address blocks:        193.59.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73918225 (0x467e711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  1 08:30:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f59f2da799748a886507b2977e36189a878c6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:f4:f2:c6:87:41:a2:97:6d:0b:7d:5b:b6:
                    94:51:80:92:40:b7:fc:98:d9:7c:80:d5:e3:b1:08:
                    9b:29:27:aa:79:58:41:98:6d:26:e9:5c:56:60:d5:
                    d7:50:6d:73:f3:dd:3b:6f:d8:dd:20:7c:2c:9b:9a:
                    8c:54:b8:72:08:59:bc:ef:30:39:48:e0:25:af:17:
                    27:be:7b:90:1a:51:45:81:62:f4:1c:0d:bf:01:95:
                    ec:b8:95:df:f2:32:f1:4a:0e:21:74:6a:62:1b:b5:
                    50:3c:fd:61:6f:02:c7:e7:8c:b6:1f:3b:ad:fa:84:
                    fb:10:5f:59:81:63:10:e8:fc:93:66:d2:08:32:0e:
                    57:9a:85:57:77:fa:6e:39:39:ba:f1:f2:02:89:44:
                    99:9f:69:b4:97:03:a7:a9:62:7a:6d:5c:39:af:6a:
                    fd:6c:43:47:47:7f:1b:41:ba:c2:71:a2:9c:a2:5c:
                    27:f2:47:90:4b:84:92:15:62:48:9e:cf:d3:9b:70:
                    1e:35:19:d4:93:74:2f:a2:a1:ed:35:65:06:9b:07:
                    3b:5c:4e:ac:28:73:91:4e:00:dc:97:39:2c:e0:87:
                    37:51:f1:85:a2:76:43:93:94:f6:b2:93:19:62:ba:
                    f2:9e:09:b2:f1:1f:f3:8f:d3:f9:e9:81:50:25:22:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:59:F2:DA:79:97:48:A8:86:50:7B:29:77:E3:61:89:A8:78:C6:B5
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b1ny2nmXSKiGUHspd-Nhiah4xrU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:e3:5c:d4:6d:16:eb:da:a0:b3:a8:44:c1:1d:5e:b4:fb:
         c0:17:9f:1e:b8:69:4c:c1:25:83:ca:2e:34:75:21:d9:c3:69:
         b3:ae:92:cd:c2:f3:9f:9a:01:22:ee:cf:a1:2c:54:f7:95:83:
         f2:68:22:1d:89:59:d4:cf:4b:f7:6e:5f:19:c0:42:26:f5:17:
         14:1e:fd:b1:8a:c8:fa:9c:9b:e7:e6:32:4e:c1:22:b8:a9:9a:
         cc:71:a5:63:52:c8:f1:3f:ee:a1:18:2f:f1:16:05:9a:ba:93:
         a7:07:73:c9:e8:5d:a6:f6:39:3c:13:75:3c:96:d9:e4:52:10:
         fc:90:48:56:02:38:41:ae:52:eb:e4:dc:fc:b4:32:f1:42:f1:
         45:3f:eb:a4:dd:30:0b:ee:e0:41:96:d2:15:07:8d:91:61:ba:
         1b:61:ac:c2:b6:98:5b:5c:37:97:59:f2:d0:31:58:6d:56:bc:
         41:e6:ce:88:05:9e:fd:e1:91:41:9d:c1:dd:ca:c5:4e:39:44:
         8f:84:ac:12:dc:25:3a:7d:1a:bf:78:ee:68:a2:78:b0:47:15:
         7e:d5:2b:6c:6b:37:e8:6d:6e:b6:c3:d9:84:51:20:86:c5:b3:
         4e:8d:b2:24:ff:6d:e8:49:f1:5b:5a:46:ae:f2:a6:b5:d2:5f:
         2e:90:2d:ec
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBGfnETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MGM0MDk2MTNmZWEwYTJiNDQyY2UxMTJlOWNiZGI0ODVlMDExODhmMB4XDTIyMDMw
MTA4MzAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmY1OWYyZGE3OTk3
NDhhODg2NTA3YjI5NzdlMzYxODlhODc4YzZiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZK9PLGh0Gil20LfVu2lFGAkkC3/JjZfIDV47EImyknqnlY
QZhtJulcVmDV11Btc/PdO2/Y3SB8LJuajFS4cghZvO8wOUjgJa8XJ757kBpRRYFi
9BwNvwGV7LiV3/Iy8UoOIXRqYhu1UDz9YW8Cx+eMth87rfqE+xBfWYFjEOj8k2bS
CDIOV5qFV3f6bjk5uvHyAolEmZ9ptJcDp6liem1cOa9q/WxDR0d/G0G6wnGinKJc
J/JHkEuEkhViSJ7P05twHjUZ1JN0L6Kh7TVlBpsHO1xOrChzkU4A3Jc5LOCHN1Hx
haJ2Q5OU9rKTGWK68p4JsvEf84/T+emBUCUi8uUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRvWfLaeZdIqIZQeyl342GJqHjGtTAfBgNVHSMEGDAWgBQwxAlhP+oKK0Qs
4RLpy9tIXgEYjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01NUUpZVF9xQ2l0RUxPRVM2Y3ZiU0Y0QkdJOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8x
L2Ixbnkybm1YU0tpR1VIc3BkLU5oaWFoNHhyVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
Yjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8xL01NUUpZVF9xQ2l0
RUxPRVM2Y3ZiU0Y0QkdJOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAME7YDANBgkqhkiG9w0BAQsFAAOC
AQEAUu/jXNRtFuvaoLOoRMEdXrT7wBefHrhpTMElg8ouNHUh2cNps66SzcLzn5oB
Iu7PoSxU95WD8mgiHYlZ1M9L925fGcBCJvUXFB79sYrI+pyb5+YyTsEiuKmazHGl
Y1LI8T/uoRgv8RYFmrqTpwdzyehdpvY5PBN1PJbZ5FIQ/JBIVgI4Qa5S6+Tc/LQy
8ULxRT/rpN0wC+7gQZbSFQeNkWG6G2GswraYW1w3l1ny0DFYbVa8QebOiAWe/eGR
QZ3B3crFTjlEj4SsEtwlOn0av3juaKJ4sEcVftUrbGs36G1utsPZhFEghsWzTo2y
JP9t6EnxW1pGrvKmtdJfLpAt7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org