Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b9OX6wqnci1YFPe15aC1uFLjX8Q.roa
File:                     b9OX6wqnci1YFPe15aC1uFLjX8Q.roa (raw, json)
Hash identifier:          518+I43AYhMUa1LfQXAEjwV/Ol+ZrtrQtZSuRPnlL78=
Subject key identifier:   6F:D3:97:EB:0A:A7:72:2D:58:14:F7:B5:E5:A0:B5:B8:52:E3:5F:C4
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       047BBBF7
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b9OX6wqnci1YFPe15aC1uFLjX8Q.roa
Signing time:             Wed 02 Mar 2022 10:29:12 +0000
ROA not before:           Wed 02 Mar 2022 10:29:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49926
IP address blocks:        195.187.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75217911 (0x47bbbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  2 10:29:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6fd397eb0aa7722d5814f7b5e5a0b5b852e35fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:bc:45:90:f0:82:b3:02:e4:14:d7:97:88:
                    c7:76:44:90:aa:9c:40:bb:c3:a9:f9:94:1b:c5:51:
                    df:a5:9c:42:23:3e:25:7f:de:67:47:57:b7:d4:88:
                    5a:e7:90:ea:fd:bc:81:29:28:0c:54:0a:70:bb:df:
                    79:50:83:83:f2:3e:1b:a6:14:77:b3:c5:cf:f6:13:
                    43:d2:ab:1c:a5:57:d3:41:42:83:23:4c:97:21:7d:
                    9d:fc:ab:dd:8b:80:fb:55:92:e6:18:32:0d:a8:85:
                    02:70:ce:78:7b:45:d3:41:2e:93:da:51:3a:4a:40:
                    17:32:49:f1:61:85:e3:cb:2c:4f:df:2c:cc:38:e9:
                    dd:7d:71:4c:22:4d:bb:a6:9b:bb:f4:d2:63:2b:4c:
                    98:be:83:83:13:b0:85:cb:f4:8f:29:81:25:14:c4:
                    14:41:4c:17:95:ed:b1:7a:51:b3:9c:18:3f:ab:c0:
                    0f:9e:a8:b9:30:1f:2a:44:f4:49:83:e2:87:f8:95:
                    4c:01:c8:15:ea:df:be:50:e4:0f:8f:37:9f:e4:16:
                    51:88:57:a8:e9:41:0d:dc:7e:15:23:96:67:df:7f:
                    cf:81:b9:c0:5e:ec:41:0e:06:52:46:fe:c0:0a:f0:
                    d2:51:ec:71:c4:e4:00:e6:46:78:72:b9:f2:c6:55:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D3:97:EB:0A:A7:72:2D:58:14:F7:B5:E5:A0:B5:B8:52:E3:5F:C4
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b9OX6wqnci1YFPe15aC1uFLjX8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.187.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:31:c9:cb:1c:32:a2:ab:05:52:2b:fc:e1:51:e4:1a:b0:
         50:7a:91:48:04:12:07:6f:6b:c0:8e:db:21:77:5c:ce:ae:48:
         88:8f:03:b4:99:ba:f6:05:40:03:5c:5e:09:9e:87:6c:44:64:
         a5:f6:ec:b0:ac:79:ab:ac:c5:f0:87:ab:aa:a4:b6:07:8c:63:
         47:c6:51:1b:73:1f:50:53:68:13:a5:17:49:c1:9d:20:b1:16:
         7e:80:7a:ec:22:80:e3:0b:50:1b:79:dc:5c:dc:3c:1d:f1:47:
         a4:82:48:d2:62:e8:24:c3:20:f7:80:3b:58:b1:dc:32:19:9a:
         b6:1c:8c:f1:09:28:53:70:6f:1d:92:d3:75:24:0a:7f:77:0c:
         ac:af:b6:bb:1f:ab:d0:18:d9:5d:aa:c4:8a:2a:c0:8e:03:ef:
         1f:8b:71:4f:0e:b9:fc:0c:03:55:16:98:5b:7c:78:44:c9:33:
         b3:c6:24:04:82:42:b1:6c:31:9e:56:66:a0:10:01:c4:8b:06:
         7a:83:f2:a5:b8:36:6f:fa:64:e0:5f:ac:b6:f9:b9:c9:c6:42:
         36:ec:88:8a:18:7c:5d:b7:58:b4:96:e9:b2:9f:c4:9a:01:6c:
         bd:c7:ae:ff:f1:f8:ea:f6:49:79:6e:d6:14:88:2e:cf:62:37:
         01:af:cf:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBHu79zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MGM0MDk2MTNmZWEwYTJiNDQyY2UxMTJlOWNiZGI0ODVlMDExODhmMB4XDTIyMDMw
MjEwMjkxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmZkMzk3ZWIwYWE3
NzIyZDU4MTRmN2I1ZTVhMGI1Yjg1MmUzNWZjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMhxvEWQ8IKzAuQU15eIx3ZEkKqcQLvDqfmUG8VR36WcQiM+
JX/eZ0dXt9SIWueQ6v28gSkoDFQKcLvfeVCDg/I+G6YUd7PFz/YTQ9KrHKVX00FC
gyNMlyF9nfyr3YuA+1WS5hgyDaiFAnDOeHtF00Euk9pROkpAFzJJ8WGF48ssT98s
zDjp3X1xTCJNu6abu/TSYytMmL6DgxOwhcv0jymBJRTEFEFMF5XtsXpRs5wYP6vA
D56ouTAfKkT0SYPih/iVTAHIFerfvlDkD483n+QWUYhXqOlBDdx+FSOWZ99/z4G5
wF7sQQ4GUkb+wArw0lHsccTkAOZGeHK58sZVMOkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRv05frCqdyLVgU97XloLW4UuNfxDAfBgNVHSMEGDAWgBQwxAlhP+oKK0Qs
4RLpy9tIXgEYjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01NUUpZVF9xQ2l0RUxPRVM2Y3ZiU0Y0QkdJOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8x
L2I5T1g2d3FuY2kxWUZQZTE1YUMxdUZMalg4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
Yjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8xL01NUUpZVF9xQ2l0
RUxPRVM2Y3ZiU0Y0QkdJOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMO7JzANBgkqhkiG9w0BAQsFAAOC
AQEAYk8xycscMqKrBVIr/OFR5BqwUHqRSAQSB29rwI7bIXdczq5IiI8DtJm69gVA
A1xeCZ6HbERkpfbssKx5q6zF8IerqqS2B4xjR8ZRG3MfUFNoE6UXScGdILEWfoB6
7CKA4wtQG3ncXNw8HfFHpIJI0mLoJMMg94A7WLHcMhmathyM8QkoU3BvHZLTdSQK
f3cMrK+2ux+r0BjZXarEiirAjgPvH4txTw65/AwDVRaYW3x4RMkzs8YkBIJCsWwx
nlZmoBABxIsGeoPypbg2b/pk4F+stvm5ycZCNuyIihh8XbdYtJbpsp/EmgFsvceu
//H46vZJeW7WFIguz2I3Aa/POQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org