Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_no64fwT54H44C_vDFq6YRmo58E.roa
File:                     _no64fwT54H44C_vDFq6YRmo58E.roa (raw, json)
Hash identifier:          UNQACNBmaoPK67xH/l5/UOhe7kL2EXi3gaYKSDH0ECs=
Subject key identifier:   FE:7A:3A:E1:FC:13:E7:81:F8:E0:2F:EF:0C:5A:BA:61:19:A8:E7:C1
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1ACB85B0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_no64fwT54H44C_vDFq6YRmo58E.roa
Signing time:             Tue 26 Apr 2022 14:18:34 +0000
ROA not before:           Tue 26 Apr 2022 14:18:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12442
IP address blocks:        193.230.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449545648 (0x1acb85b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Apr 26 14:18:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe7a3ae1fc13e781f8e02fef0c5aba6119a8e7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:8b:23:84:1e:c4:78:ab:22:46:68:c7:d7:
                    e9:48:a7:15:7c:a1:68:e7:a3:f5:10:06:92:f9:99:
                    06:33:01:22:94:b2:f6:81:6e:30:1b:73:47:ae:85:
                    b7:55:be:0a:31:02:50:b0:39:5c:cd:fe:67:b0:33:
                    7d:42:e8:66:77:a7:35:db:b9:95:48:ae:53:a0:a5:
                    ea:e3:b9:f5:56:41:e8:08:37:44:97:f4:9c:ad:20:
                    95:d9:d9:e7:96:de:74:5f:60:dd:8b:88:e9:bb:19:
                    e9:7a:23:58:71:55:89:b6:51:52:5a:a6:13:41:59:
                    65:9c:51:5c:9d:13:99:35:c8:c1:20:8a:cc:e8:3b:
                    6d:de:04:58:00:9c:5a:13:00:83:39:43:e9:3d:ff:
                    20:c4:27:97:87:65:6b:23:84:94:4e:02:8f:93:b8:
                    e6:c9:52:cc:a2:98:03:9d:88:47:2d:3c:2a:9f:1b:
                    d2:6b:1b:a2:e9:a9:66:5f:86:68:48:c0:11:ae:41:
                    73:8d:d5:b9:bc:68:2a:4c:8d:90:51:c9:4a:d3:c6:
                    25:f8:2f:fb:92:15:50:55:c2:cd:54:0f:4f:0d:19:
                    6d:70:50:fd:29:5b:bb:62:2e:cb:b8:90:dd:28:27:
                    aa:a8:6a:4a:43:b4:b6:f4:29:66:62:ff:72:8e:a5:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7A:3A:E1:FC:13:E7:81:F8:E0:2F:EF:0C:5A:BA:61:19:A8:E7:C1
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_no64fwT54H44C_vDFq6YRmo58E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.230.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:fc:2c:0f:dc:86:d8:71:7c:58:dc:a5:b1:51:e0:41:21:
         0c:2c:f5:b6:ad:0d:12:3c:66:42:14:c6:3e:5c:6d:a4:20:74:
         bf:03:b3:92:ea:00:55:20:a8:ca:ac:ca:4f:8a:d5:fa:2a:47:
         66:fc:3e:eb:38:31:60:94:ae:fb:32:5c:7e:00:61:28:a6:63:
         b8:df:ba:42:2e:95:b3:b1:f5:e5:50:9e:a7:46:ac:07:74:a4:
         6d:07:f7:9d:29:14:23:c9:9d:64:e0:7f:91:21:44:af:e1:a6:
         66:3e:d4:89:6d:c8:b6:36:16:c7:8c:91:c7:07:ad:1c:4e:e3:
         50:e5:df:af:fe:a6:3d:a9:b5:12:e5:57:86:3a:25:f3:77:6e:
         3a:05:da:43:b2:ae:78:c5:46:f9:42:d6:73:c2:62:6d:5a:cd:
         96:a2:c6:94:1d:3c:72:ad:3b:dc:f5:32:fb:2a:2d:49:7c:6f:
         cc:df:65:73:df:2f:e5:ea:9c:55:d4:c4:c0:03:aa:7c:3c:a6:
         f2:13:70:18:ef:88:15:7a:11:e2:1f:5e:ff:2f:5e:d2:3b:ce:
         95:10:6e:50:d1:f9:f4:d3:34:1e:ee:0a:a6:13:e5:6f:ce:37:
         f8:23:d9:da:68:b2:26:ec:85:0f:7a:2a:59:c2:37:39:7e:22:
         fb:ab:ba:7f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGsuFsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDQy
NjE0MTgzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmU3YTNhZTFmYzEz
ZTc4MWY4ZTAyZmVmMGM1YWJhNjExOWE4ZTdjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEpiyOEHsR4qyJGaMfX6UinFXyhaOej9RAGkvmZBjMBIpSy
9oFuMBtzR66Ft1W+CjECULA5XM3+Z7AzfULoZnenNdu5lUiuU6Cl6uO59VZB6Ag3
RJf0nK0gldnZ55bedF9g3YuI6bsZ6XojWHFVibZRUlqmE0FZZZxRXJ0TmTXIwSCK
zOg7bd4EWACcWhMAgzlD6T3/IMQnl4dlayOElE4Cj5O45slSzKKYA52IRy08Kp8b
0msboumpZl+GaEjAEa5Bc43VubxoKkyNkFHJStPGJfgv+5IVUFXCzVQPTw0ZbXBQ
/Slbu2Iuy7iQ3SgnqqhqSkO0tvQpZmL/co6lnjcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT+ejrh/BPngfjgL+8MWrphGajnwTAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L19ubzY0ZndUNTRINDRDX3ZERnE2WVJtbzU4RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHm4zANBgkqhkiG9w0BAQsFAAOC
AQEAWNT8LA/chthxfFjcpbFR4EEhDCz1tq0NEjxmQhTGPlxtpCB0vwOzkuoAVSCo
yqzKT4rV+ipHZvw+6zgxYJSu+zJcfgBhKKZjuN+6Qi6Vs7H15VCep0asB3SkbQf3
nSkUI8mdZOB/kSFEr+GmZj7UiW3ItjYWx4yRxwetHE7jUOXfr/6mPam1EuVXhjol
83duOgXaQ7KueMVG+ULWc8JibVrNlqLGlB08cq073PUy+yotSXxvzN9lc98v5eqc
VdTEwAOqfDym8hNwGO+IFXoR4h9e/y9e0jvOlRBuUNH59NM0Hu4KphPlb843+CPZ
2miyJuyFD3oqWcI3OX4i+6u6fw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org