Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/yZHAu-XBwt_Wb2D3qIyLHkGlSQM.roa
File:                     yZHAu-XBwt_Wb2D3qIyLHkGlSQM.roa (raw, json)
Hash identifier:          nnuoGfIiKKSVC4TPEpupg3tB1/triKCgmiE0ldAlUcU=
Subject key identifier:   C9:91:C0:BB:E5:C1:C2:DF:D6:6F:60:F7:A8:8C:8B:1E:41:A5:49:03
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       15CD1677
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/yZHAu-XBwt_Wb2D3qIyLHkGlSQM.roa
Signing time:             Tue 15 Feb 2022 08:39:38 +0000
ROA not before:           Tue 15 Feb 2022 08:39:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206092
IP address blocks:        185.92.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365762167 (0x15cd1677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Feb 15 08:39:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c991c0bbe5c1c2dfd66f60f7a88c8b1e41a54903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:28:4a:b0:f6:ea:21:96:85:da:32:be:28:
                    62:8b:3d:0f:89:21:32:25:85:94:e5:ed:41:1d:e3:
                    95:d9:19:63:66:5a:d2:55:47:8b:72:0f:8d:7c:54:
                    43:66:90:6e:47:99:3f:c4:b8:37:41:c7:9a:a6:01:
                    35:91:bd:3d:7b:6f:1a:0f:e9:c9:c9:13:4b:83:80:
                    95:6b:5a:05:2f:78:bf:c5:be:a8:4d:1d:73:6b:2c:
                    9a:a9:d4:4b:f4:9f:58:8d:1c:37:29:bd:7b:59:a0:
                    56:43:64:51:72:7e:33:57:12:e8:dd:c1:7f:97:a8:
                    8f:56:be:fd:f4:b8:b1:6d:ea:cc:91:5d:82:c3:fd:
                    f8:3c:fd:2d:b2:1a:15:d0:f9:5a:39:85:42:a1:90:
                    56:e6:b8:79:01:9b:c1:60:fb:7d:de:9d:4e:0f:3e:
                    ab:1e:0b:7c:f7:25:a2:d7:e6:7e:fe:b5:75:70:e8:
                    d4:87:35:23:9c:eb:fd:4e:02:97:ff:ad:53:33:05:
                    14:73:d7:24:1c:40:61:18:28:3e:05:a5:0d:e0:75:
                    7b:22:c5:e7:82:c6:65:23:e6:5c:34:71:d3:d9:be:
                    21:98:49:59:76:af:75:94:20:07:69:57:23:d7:3f:
                    84:d5:ec:a2:8c:3c:93:bb:3b:ee:d1:85:8f:0d:e7:
                    27:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:91:C0:BB:E5:C1:C2:DF:D6:6F:60:F7:A8:8C:8B:1E:41:A5:49:03
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/yZHAu-XBwt_Wb2D3qIyLHkGlSQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:02:78:77:a6:a6:25:0e:ee:80:72:47:c2:ad:a2:16:fc:6f:
         f8:c5:81:a0:c1:a8:00:56:4d:f4:35:d4:d4:53:54:fe:33:7e:
         07:33:53:74:f2:92:58:de:0f:ba:4f:8a:43:40:3d:9a:b6:8a:
         df:7d:2a:3d:b4:ba:fe:05:93:18:ec:5e:89:d1:17:da:8a:e4:
         3e:76:4a:0c:12:64:8e:56:9a:e7:e9:da:ca:ec:72:4e:80:09:
         f5:a4:63:87:9b:2d:da:fb:9c:4d:78:f8:3e:76:d6:9c:cf:a8:
         7e:88:26:e5:77:51:39:5c:9b:54:86:4b:31:6e:66:34:d8:ce:
         a6:b8:fb:07:f9:b0:29:08:44:d6:09:35:1a:93:4a:c7:18:e7:
         1b:5a:ca:11:1d:5e:ca:7a:b2:77:cb:47:a5:9f:bc:26:53:26:
         17:91:ca:b4:94:fd:2c:85:2f:00:32:c6:ed:8a:f3:7c:e4:94:
         34:d1:20:2a:6f:08:3d:6d:45:85:19:e3:07:c5:e5:50:95:ac:
         e1:d8:12:7b:e0:de:8d:a0:5d:43:34:44:30:4d:71:80:f4:91:
         98:2a:68:d4:2d:a1:f9:b2:93:d8:2c:0b:db:bc:d6:91:51:b3:
         e7:04:0d:65:09:e4:ff:30:a0:c6:53:32:43:a3:7d:ef:dd:ac:
         0c:77:d0:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFc0WdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjA3NDM0OTZjN2ZmM2VmZmI4NzA2MDExMzljYWQ5ZDJmMjcxZTEwMB4XDTIyMDIx
NTA4MzkzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzk5MWMwYmJlNWMx
YzJkZmQ2NmY2MGY3YTg4YzhiMWU0MWE1NDkwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJxFKEqw9uohloXaMr4oYos9D4khMiWFlOXtQR3jldkZY2Za
0lVHi3IPjXxUQ2aQbkeZP8S4N0HHmqYBNZG9PXtvGg/pyckTS4OAlWtaBS94v8W+
qE0dc2ssmqnUS/SfWI0cNym9e1mgVkNkUXJ+M1cS6N3Bf5eoj1a+/fS4sW3qzJFd
gsP9+Dz9LbIaFdD5WjmFQqGQVua4eQGbwWD7fd6dTg8+qx4LfPclotfmfv61dXDo
1Ic1I5zr/U4Cl/+tUzMFFHPXJBxAYRgoPgWlDeB1eyLF54LGZSPmXDRx09m+IZhJ
WXavdZQgB2lXI9c/hNXsoow8k7s77tGFjw3nJw8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJkcC75cHC39ZvYPeojIseQaVJAzAfBgNVHSMEGDAWgBSfB0NJbH/z7/uH
BgETnK2dLyceEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L253ZERTV3hfOC1fN2h3WUJFNXl0blM4bkhoQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvMjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8x
L3laSEF1LVhCd3RfV2IyRDNxSXlMSGtHbFNRTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
MjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8xL253ZERTV3hfOC1f
N2h3WUJFNXl0blM4bkhoQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlcGTANBgkqhkiG9w0BAQsFAAOC
AQEAgAJ4d6amJQ7ugHJHwq2iFvxv+MWBoMGoAFZN9DXU1FNU/jN+BzNTdPKSWN4P
uk+KQ0A9mraK330qPbS6/gWTGOxeidEX2orkPnZKDBJkjlaa5+nayuxyToAJ9aRj
h5st2vucTXj4PnbWnM+ofogm5XdROVybVIZLMW5mNNjOprj7B/mwKQhE1gk1GpNK
xxjnG1rKER1eynqyd8tHpZ+8JlMmF5HKtJT9LIUvADLG7YrzfOSUNNEgKm8IPW1F
hRnjB8XlUJWs4dgSe+DejaBdQzREME1xgPSRmCpo1C2h+bKT2CwL27zWkVGz5wQN
ZQnk/zCgxlMyQ6N9792sDHfQZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-ams.rpki-client.org