Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/E8c9xSOptrauWIyQs--cHIsZOYQ.roa
File:                     E8c9xSOptrauWIyQs--cHIsZOYQ.roa (raw, json)
Hash identifier:          vBXrSKC/8zsliAwwhHfASMDuchY6bCJpaa4a9JabL4U=
Subject key identifier:   13:C7:3D:C5:23:A9:B6:B6:AE:58:8C:90:B3:EF:9C:1C:8B:19:39:84
Certificate issuer:       /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial:       0183AFA07B3078CD7A3205FF4938CA38B320
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/E8c9xSOptrauWIyQs--cHIsZOYQ.roa
Signing time:             Thu 06 Oct 2022 23:27:53 +0000
ROA not before:           Thu 06 Oct 2022 23:27:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212335
IP address blocks:        185.93.220.0/22 maxlen: 22
                          213.139.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:af:a0:7b:30:78:cd:7a:32:05:ff:49:38:ca:38:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
        Validity
            Not Before: Oct  6 23:27:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13c73dc523a9b6b6ae588c90b3ef9c1c8b193984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:2d:8f:42:80:84:b8:ff:44:a1:81:78:98:
                    44:e2:d1:af:ee:48:86:6f:c8:68:2e:4f:6d:78:5f:
                    b5:7f:a0:f9:c7:fc:29:04:4f:c4:30:4a:2f:35:44:
                    8e:3d:47:21:e2:89:eb:8d:e2:72:6c:73:c8:74:3b:
                    20:e2:81:fc:ec:b0:62:53:49:08:a6:85:66:b3:d5:
                    7d:39:ac:78:83:d1:9c:cb:7d:ae:59:be:a2:f9:70:
                    25:6d:c0:ab:de:2c:55:1c:bd:7a:bb:67:d0:36:5b:
                    3f:95:21:79:c5:8f:42:9c:db:30:d2:84:80:61:56:
                    dc:ac:94:25:c8:0a:f6:94:ee:0f:7f:92:45:fd:d8:
                    2a:cf:74:5a:22:fa:b3:ff:65:f8:c5:3d:0b:d1:d1:
                    04:80:c5:94:c2:7e:47:4c:68:b6:f0:f0:2e:e6:fd:
                    b3:48:51:ff:5c:0e:c0:4b:2b:a6:91:89:12:d1:28:
                    9d:f4:b5:cb:ad:f6:39:a6:a9:a3:f0:d7:15:75:a0:
                    36:d7:e2:f4:cb:4c:47:76:bf:55:c2:94:ac:e6:73:
                    2c:2f:79:64:03:b4:5a:f6:25:b2:32:d0:d1:1b:eb:
                    27:2e:98:d6:e8:94:44:79:65:b7:1a:f6:fb:3a:eb:
                    0d:f0:e3:0c:1f:0d:13:2a:23:6a:fb:05:e2:f0:4d:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C7:3D:C5:23:A9:B6:B6:AE:58:8C:90:B3:EF:9C:1C:8B:19:39:84
            X509v3 Authority Key Identifier:
                keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/E8c9xSOptrauWIyQs--cHIsZOYQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.220.0/22
                  213.139.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:9a:6c:04:8d:af:c9:54:4c:52:3d:ff:a9:ee:4d:9a:b5:
         53:7e:7b:4c:98:77:6a:0b:21:58:2b:0e:79:b1:3f:94:a8:36:
         b8:50:d4:69:0d:ec:af:f9:0d:e7:bd:b6:8e:af:c3:3e:cd:ac:
         f0:6d:b9:aa:c1:a1:cb:e8:e4:98:87:02:a5:df:a1:3a:2b:78:
         d6:81:50:7c:c1:20:00:ee:fd:67:3f:74:9d:f1:4f:45:29:73:
         c0:a5:ec:62:59:1a:08:7d:fb:6e:0e:7a:20:55:51:b4:66:db:
         f7:72:71:57:ad:b7:4b:d0:b4:fe:6a:1a:e5:4d:4e:92:80:bb:
         f7:e3:5b:ae:a4:8f:f3:9d:8f:23:4f:ca:23:1f:3c:06:6a:c0:
         f3:58:c4:ca:3e:f5:35:1c:e7:2b:78:7e:26:11:27:f6:dd:44:
         7e:a6:81:cc:6f:03:ac:c0:b3:3d:38:97:64:3b:03:13:e4:4b:
         64:b2:1b:93:ae:c7:d3:44:bb:6a:ee:9e:17:ee:f9:f4:f8:e4:
         0d:7c:03:60:04:63:b5:ee:d9:36:8d:34:08:1b:e6:32:68:4f:
         e4:c5:c4:7c:ff:fb:48:9f:b8:08:de:16:d2:03:08:b5:40:d8:
         66:83:13:2a:3a:0d:da:d7:d5:ff:7e:58:41:b2:a2:17:96:d6:
         24:2e:28:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOvoHsweM16MgX/STjKOLMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjIxMDA2MjMyNzUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2M3M2RjNTIzYTliNmI2YWU1ODhjOTBiM2VmOWMxYzhiMTkzOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPEtj0KAhLj/RKGBeJhE4tGv7kiG
b8hoLk9teF+1f6D5x/wpBE/EMEovNUSOPUch4onrjeJybHPIdDsg4oH87LBiU0kI
poVms9V9Oax4g9Gcy32uWb6i+XAlbcCr3ixVHL16u2fQNls/lSF5xY9CnNsw0oSA
YVbcrJQlyAr2lO4Pf5JF/dgqz3RaIvqz/2X4xT0L0dEEgMWUwn5HTGi28PAu5v2z
SFH/XA7ASyumkYkS0Sid9LXLrfY5pqmj8NcVdaA21+L0y0xHdr9VwpSs5nMsL3lk
A7Ra9iWyMtDRG+snLpjW6JREeWW3Gvb7OusN8OMMHw0TKiNq+wXi8E0R1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBPHPcUjqba2rliMkLPvnByLGTmEMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvRThjOXhTT3B0cmF1V0l5UXMtLWNISXNaT1lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuV3cAwQC
1YvMMA0GCSqGSIb3DQEBCwUAA4IBAQCb65psBI2vyVRMUj3/qe5NmrVTfntMmHdq
CyFYKw55sT+UqDa4UNRpDeyv+Q3nvbaOr8M+zazwbbmqwaHL6OSYhwKl36E6K3jW
gVB8wSAA7v1nP3Sd8U9FKXPApexiWRoIfftuDnogVVG0Ztv3cnFXrbdL0LT+ahrl
TU6SgLv341uupI/znY8jT8ojHzwGasDzWMTKPvU1HOcreH4mESf23UR+poHMbwOs
wLM9OJdkOwMT5EtkshuTrsfTRLtq7p4X7vn0+OQNfANgBGO17tk2jTQIG+YyaE/k
xcR8//tIn7gI3hbSAwi1QNhmgxMqOg3a19X/flhBsqIXltYkLiin
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org