Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hG14oUzY7Ocd9J8fc8frsu6cj9w.roa
File:                     hG14oUzY7Ocd9J8fc8frsu6cj9w.roa (raw, json)
Hash identifier:          fJNv+FtY6LT021HkFYqXB7Vs5cLctYxGbAVlPAz6LaA=
Subject key identifier:   84:6D:78:A1:4C:D8:EC:E7:1D:F4:9F:1F:73:C7:EB:B2:EE:9C:8F:DC
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1ADDD9CE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hG14oUzY7Ocd9J8fc8frsu6cj9w.roa
Signing time:             Thu 28 Apr 2022 12:02:36 +0000
ROA not before:           Thu 28 Apr 2022 12:02:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12446
IP address blocks:        80.96.230.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450746830 (0x1addd9ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Apr 28 12:02:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=846d78a14cd8ece71df49f1f73c7ebb2ee9c8fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:94:26:61:ad:b8:87:ae:42:2e:cc:6a:f4:
                    b0:de:32:37:b6:a0:50:c4:a3:a8:22:6f:3d:24:41:
                    de:30:5c:08:c1:09:1c:bc:8f:8b:44:17:d1:1f:42:
                    f5:f2:00:ef:c9:30:ac:1b:2a:80:84:ba:0c:08:da:
                    ff:18:76:d6:1c:cc:91:03:27:03:83:8a:e4:e0:22:
                    0d:3e:18:a0:31:d5:b5:b5:b3:09:89:71:8b:03:fa:
                    08:69:81:bd:b9:ef:0d:cc:2b:2a:98:ec:93:da:25:
                    46:a5:24:0c:7c:b7:f6:2b:2b:05:e1:ef:88:b8:8a:
                    ad:27:10:87:fa:c3:2f:5b:ce:0c:3a:39:6f:e6:e4:
                    67:73:d8:69:bc:e7:a3:8a:79:2a:65:48:8a:ad:e2:
                    40:5d:ce:d6:f1:94:6a:a5:89:bf:d1:bd:1a:c3:42:
                    6b:db:b2:7e:e9:dd:c5:58:f3:a1:36:8d:b2:41:db:
                    b2:b9:72:a5:17:b3:48:b6:26:1e:26:83:ac:5a:e0:
                    77:ea:1c:24:82:6b:ed:8c:13:7c:c6:97:99:52:6e:
                    90:1a:e6:c2:42:b4:c7:b8:18:3e:fe:59:20:46:fb:
                    7a:b6:dc:c8:0e:87:38:90:b9:35:5e:0f:de:ac:81:
                    a6:84:91:23:a2:46:9c:90:9e:f3:56:97:46:e2:58:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:78:A1:4C:D8:EC:E7:1D:F4:9F:1F:73:C7:EB:B2:EE:9C:8F:DC
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hG14oUzY7Ocd9J8fc8frsu6cj9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:6c:04:91:76:5d:27:9b:da:9a:f5:89:86:e1:91:96:21:f1:
         0f:53:64:ce:e0:45:9e:43:de:c9:3c:3a:b1:f1:53:96:02:cf:
         7e:2a:fd:15:ff:f7:a3:4b:82:6a:01:43:30:05:42:18:9f:6d:
         7f:9d:49:2c:4a:5e:a6:8e:8c:96:25:33:a4:b1:0e:1f:59:b7:
         eb:90:a6:80:af:17:b6:ed:b9:1c:42:c0:7b:ba:89:40:06:a8:
         c4:7e:5a:a7:ba:a9:05:13:1c:b8:fc:f2:a6:7e:ba:a5:c3:b5:
         5c:09:ec:96:3b:d4:d2:cc:54:38:ab:c3:d0:81:41:5d:f9:03:
         aa:47:29:56:52:f5:e5:0f:42:fa:6e:7c:2a:44:1d:92:e8:17:
         12:24:7f:ea:d0:09:63:84:aa:c6:b7:ef:a5:05:b7:c8:5f:5f:
         9e:2a:0d:8f:29:8b:99:03:7b:6e:fa:26:a3:7b:83:60:a0:db:
         bf:45:c6:97:7e:5f:18:b2:ea:87:4a:76:54:d2:34:46:48:12:
         76:63:0e:34:92:d8:9b:52:a7:01:d2:6d:4a:fa:59:ef:79:fc:
         61:4e:a6:21:24:91:83:c3:c7:fd:76:09:f9:d4:c0:87:85:42:
         0e:62:31:bc:dc:7e:4e:90:1a:54:09:f7:3b:79:d4:d9:fc:24:
         28:21:a2:41
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGt3ZzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDQy
ODEyMDIzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ2ZDc4YTE0Y2Q4
ZWNlNzFkZjQ5ZjFmNzNjN2ViYjJlZTljOGZkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ/ClCZhrbiHrkIuzGr0sN4yN7agUMSjqCJvPSRB3jBcCMEJ
HLyPi0QX0R9C9fIA78kwrBsqgIS6DAja/xh21hzMkQMnA4OK5OAiDT4YoDHVtbWz
CYlxiwP6CGmBvbnvDcwrKpjsk9olRqUkDHy39isrBeHviLiKrScQh/rDL1vODDo5
b+bkZ3PYabzno4p5KmVIiq3iQF3O1vGUaqWJv9G9GsNCa9uyfundxVjzoTaNskHb
srlypRezSLYmHiaDrFrgd+ocJIJr7YwTfMaXmVJukBrmwkK0x7gYPv5ZIEb7erbc
yA6HOJC5NV4P3qyBpoSRI6JGnJCe81aXRuJY0aMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSEbXihTNjs5x30nx9zx+uy7pyP3DAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L2hHMTRvVXpZN09jZDlKOGZjOGZyc3U2Y2o5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVBg5jANBgkqhkiG9w0BAQsFAAOC
AQEAYmwEkXZdJ5vamvWJhuGRliHxD1NkzuBFnkPeyTw6sfFTlgLPfir9Ff/3o0uC
agFDMAVCGJ9tf51JLEpepo6MliUzpLEOH1m365CmgK8Xtu25HELAe7qJQAaoxH5a
p7qpBRMcuPzypn66pcO1XAnsljvU0sxUOKvD0IFBXfkDqkcpVlL15Q9C+m58KkQd
kugXEiR/6tAJY4SqxrfvpQW3yF9fnioNjymLmQN7bvomo3uDYKDbv0XGl35fGLLq
h0p2VNI0RkgSdmMONJLYm1KnAdJtSvpZ73n8YU6mISSRg8PH/XYJ+dTAh4VCDmIx
vNx+TpAaVAn3O3nU2fwkKCGiQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org