Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa
File:                     lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa (raw, json)
Hash identifier:          VXOYEPNYqnI+hbQs1E08iTNMBMQcfyNhguKTRFP4vI0=
Subject key identifier:   95:56:0F:96:68:B7:38:D1:19:73:D6:76:C1:5C:F7:40:E0:0D:41:86
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       1560E27A
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa
Signing time:             Sat 01 Jan 2022 08:04:51 +0000
ROA not before:           Sat 01 Jan 2022 08:04:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46562
IP address blocks:        185.92.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358670970 (0x1560e27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Jan  1 08:04:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=95560f9668b738d11973d676c15cf740e00d4186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:61:0f:54:9f:88:e4:37:3d:ab:0b:48:3a:
                    96:aa:18:b8:a0:93:88:16:e8:7f:04:e8:52:f2:12:
                    da:d3:89:51:74:08:7d:20:2f:b5:38:6f:4b:8e:08:
                    77:03:2b:95:2d:8a:81:cd:3e:68:c7:9a:bb:05:a6:
                    8b:9b:79:16:0d:05:74:e0:62:8d:01:dd:3a:af:65:
                    be:3f:79:9f:9c:08:79:88:16:b0:11:20:f4:ce:75:
                    a8:ff:ce:c4:ae:42:09:d8:83:ff:6f:47:0e:8d:7b:
                    6a:3b:74:39:d9:f0:02:88:d0:57:79:f8:ec:b0:4a:
                    5f:19:d9:58:15:b4:f9:33:39:94:4a:44:df:06:02:
                    1b:5d:98:0b:4e:02:c4:fe:5f:6c:0e:89:39:59:6f:
                    32:f6:26:60:b8:58:37:d1:5b:58:9c:c3:ec:31:ac:
                    c1:52:7f:ab:2a:5a:3a:41:29:f3:2d:3e:ae:d6:9e:
                    14:42:5f:db:b5:fe:c9:da:4f:ef:02:ef:34:bb:83:
                    d5:a3:e8:eb:4d:8d:69:a4:3c:e8:58:23:49:28:06:
                    83:73:cf:e2:8c:ff:79:cc:ad:69:4a:44:b2:42:0f:
                    e6:b1:f4:84:94:c5:92:b0:e9:cf:83:18:d8:ac:c8:
                    6a:e9:01:9b:5c:ae:f8:ab:7c:3b:99:c7:15:b5:24:
                    cf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:0F:96:68:B7:38:D1:19:73:D6:76:C1:5C:F7:40:E0:0D:41:86
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:81:84:93:df:66:bf:c0:38:da:d3:8b:df:be:1b:df:68:dd:
         20:c1:57:9a:4c:5f:33:b5:77:07:4b:78:2d:d9:37:03:f0:1f:
         14:9f:d1:10:e2:1c:b9:85:f7:55:20:ce:d1:4e:90:e6:ba:68:
         0d:84:68:a6:07:e2:fc:eb:1d:97:a9:9d:92:22:8d:a2:53:6c:
         ba:5e:1c:c2:a0:f5:2e:19:c3:9f:2a:17:64:7b:9d:b6:60:c7:
         a5:6a:cb:4f:15:d6:7d:e9:aa:11:2d:05:60:c1:35:ec:b4:54:
         ea:b0:37:cc:12:be:c1:c6:90:16:ea:19:ba:85:d4:e6:5a:9e:
         f0:8e:48:fa:d0:2a:9d:f3:36:fc:ad:23:49:e3:2f:c7:a8:a8:
         44:5a:c2:a4:59:fb:b9:c7:82:77:e7:99:23:9f:a2:3a:ad:11:
         24:b1:60:7d:a1:5f:8b:e7:3d:74:48:34:98:f1:93:bf:d5:1c:
         c5:42:69:1d:f5:54:cd:08:02:1e:3d:ac:2d:1b:04:f8:ff:07:
         e3:df:c2:35:78:19:78:bc:30:2f:61:61:fa:c9:bb:dc:fc:80:
         7e:52:08:31:74:f6:6d:14:e8:7a:29:e6:e5:5f:f3:c0:c7:b9:
         d0:de:fb:49:3a:e4:a0:d0:91:94:26:93:80:82:11:5d:28:35:
         e5:ec:a6:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFWDiejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjA3NDM0OTZjN2ZmM2VmZmI4NzA2MDExMzljYWQ5ZDJmMjcxZTEwMB4XDTIyMDEw
MTA4MDQ1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU1NjBmOTY2OGI3
MzhkMTE5NzNkNjc2YzE1Y2Y3NDBlMDBkNDE4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZsYQ9Un4jkNz2rC0g6lqoYuKCTiBbofwToUvIS2tOJUXQI
fSAvtThvS44IdwMrlS2Kgc0+aMeauwWmi5t5Fg0FdOBijQHdOq9lvj95n5wIeYgW
sBEg9M51qP/OxK5CCdiD/29HDo17ajt0OdnwAojQV3n47LBKXxnZWBW0+TM5lEpE
3wYCG12YC04CxP5fbA6JOVlvMvYmYLhYN9FbWJzD7DGswVJ/qypaOkEp8y0+rtae
FEJf27X+ydpP7wLvNLuD1aPo602NaaQ86FgjSSgGg3PP4oz/ecytaUpEskIP5rH0
hJTFkrDpz4MY2KzIaukBm1yu+Kt8O5nHFbUkzz8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVVg+WaLc40Rlz1nbBXPdA4A1BhjAfBgNVHSMEGDAWgBSfB0NJbH/z7/uH
BgETnK2dLyceEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L253ZERTV3hfOC1fN2h3WUJFNXl0blM4bkhoQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvMjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8x
L2xWWVBsbWkzT05FWmM5WjJ3VnozUU9BTlFZWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
MjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8xL253ZERTV3hfOC1f
N2h3WUJFNXl0blM4bkhoQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlcGjANBgkqhkiG9w0BAQsFAAOC
AQEAToGEk99mv8A42tOL374b32jdIMFXmkxfM7V3B0t4Ldk3A/AfFJ/REOIcuYX3
VSDO0U6Q5rpoDYRopgfi/Osdl6mdkiKNolNsul4cwqD1LhnDnyoXZHudtmDHpWrL
TxXWfemqES0FYME17LRU6rA3zBK+wcaQFuoZuoXU5lqe8I5I+tAqnfM2/K0jSeMv
x6ioRFrCpFn7uceCd+eZI5+iOq0RJLFgfaFfi+c9dEg0mPGTv9UcxUJpHfVUzQgC
Hj2sLRsE+P8H49/CNXgZeLwwL2Fh+sm73PyAflIIMXT2bRToeinm5V/zwMe50N77
STrkoNCRlCaTgIIRXSg15eymjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:19 2024 by rpki-client on console-fra.rpki-client.org