Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GOYc8lmiR8J37abmkAtu_FdZoRo.roa
File:                     GOYc8lmiR8J37abmkAtu_FdZoRo.roa (raw, json)
Hash identifier:          3VcJMqO2k7eoInIeAumpDjzjJsitLm2Ic5ZhcBx6w2M=
Subject key identifier:   18:E6:1C:F2:59:A2:47:C2:77:ED:A6:E6:90:0B:6E:FC:57:59:A1:1A
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       401869
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GOYc8lmiR8J37abmkAtu_FdZoRo.roa
Signing time:             Thu 10 Mar 2022 13:39:37 +0000
ROA not before:           Thu 10 Mar 2022 13:39:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62313
IP address blocks:        193.22.141.0/24 maxlen: 24
                          91.209.240.0/24 maxlen: 24
                          212.46.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4200553 (0x401869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Mar 10 13:39:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18e61cf259a247c277eda6e6900b6efc5759a11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:3b:1b:eb:83:e6:d8:9c:df:8f:de:ea:4e:
                    ba:ca:e2:d4:2f:53:c1:08:c9:ee:dc:39:e3:fe:cd:
                    bb:c2:c3:d1:10:c2:ed:19:5e:b5:5c:71:bd:b9:45:
                    5b:85:cd:44:44:a2:e8:90:a9:dd:45:4a:26:5b:b7:
                    3e:06:1a:f5:d8:cc:38:c1:ad:46:4f:fa:e6:a5:de:
                    dc:5c:98:fc:cc:9f:82:aa:81:75:f9:5f:c6:fb:ef:
                    9b:e5:ff:33:01:05:e9:d9:80:8b:98:d1:b4:70:31:
                    ca:12:f7:ba:61:5f:0d:ae:e0:fb:80:43:74:3e:73:
                    be:cd:df:1f:e6:7a:13:07:9d:6c:65:b1:6d:94:8d:
                    77:b8:54:75:7c:12:b1:08:eb:2d:68:b8:84:00:7d:
                    fc:93:91:46:ad:65:d5:e0:57:c9:b7:2d:e8:0c:e6:
                    a5:88:12:8c:97:3d:ff:99:4e:00:47:4d:da:bb:42:
                    1d:c9:93:0a:37:c3:87:ba:d0:5a:35:2e:15:4e:9f:
                    de:2a:98:de:1a:60:f4:9a:9d:fe:9f:8d:de:46:0c:
                    4e:50:4e:65:a4:fc:67:30:1d:43:25:0e:24:d3:13:
                    97:3d:5d:f4:5b:15:e5:19:fe:a4:43:8e:a9:6b:35:
                    88:6b:58:a0:9e:be:45:c9:68:ed:1c:ee:27:f4:84:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:1C:F2:59:A2:47:C2:77:ED:A6:E6:90:0B:6E:FC:57:59:A1:1A
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GOYc8lmiR8J37abmkAtu_FdZoRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.240.0/24
                  193.22.141.0/24
                  212.46.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:17:11:e6:aa:47:1b:42:ab:d7:ec:3b:51:92:6b:fb:e0:6e:
         9a:4c:10:cd:88:d9:02:5e:c0:1a:c5:99:f5:91:06:1a:07:89:
         69:91:20:04:43:ed:11:e3:37:78:93:8c:a8:68:5e:bb:8f:52:
         28:75:b1:f4:bf:78:17:40:08:7b:1b:25:3f:cf:0d:2c:67:3b:
         66:17:ad:07:c5:64:1f:68:79:34:18:28:cd:58:48:01:cb:42:
         a3:ba:10:ac:d1:84:4e:a4:ab:90:24:44:fd:94:ea:5d:41:77:
         66:fc:17:b5:4e:17:2b:43:76:a3:05:4d:70:9c:0b:d6:6e:5c:
         04:74:20:93:4e:cf:f7:97:2c:c3:cc:55:08:5e:ff:40:00:4b:
         7c:8e:78:4f:1a:a8:db:f0:ce:17:dd:b9:66:04:17:4a:66:5e:
         54:89:22:75:82:9d:c9:65:96:10:5c:3d:fb:ea:2c:c2:fe:3c:
         f1:59:59:d7:7e:6c:98:13:36:17:6f:56:ad:72:89:f9:31:16:
         2b:8f:94:7a:e6:45:0e:2e:fc:5f:66:e1:05:cb:ec:a6:9a:13:
         68:00:e9:66:68:5b:68:95:c3:0b:b1:c9:04:8f:bc:ed:08:04:
         d0:3b:b2:05:ad:de:b4:c5:29:56:32:ea:f7:67:7d:5e:19:34:
         33:1b:16:9b
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDQBhpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFh
ZGMwMDkzYzVhZjg5NGNmNTIwYjU5MzZlMzBiMjE1MDkwZGU5ZjgwHhcNMjIwMzEw
MTMzOTM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxOGU2MWNmMjU5YTI0
N2MyNzdlZGE2ZTY5MDBiNmVmYzU3NTlhMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAniU7G+uD5tic34/e6k66yuLUL1PBCMnu3Dnj/s27wsPREMLt
GV61XHG9uUVbhc1ERKLokKndRUomW7c+Bhr12Mw4wa1GT/rmpd7cXJj8zJ+CqoF1
+V/G+++b5f8zAQXp2YCLmNG0cDHKEve6YV8NruD7gEN0PnO+zd8f5noTB51sZbFt
lI13uFR1fBKxCOstaLiEAH38k5FGrWXV4FfJty3oDOaliBKMlz3/mU4AR03au0Id
yZMKN8OHutBaNS4VTp/eKpjeGmD0mp3+n43eRgxOUE5lpPxnMB1DJQ4k0xOXPV30
WxXlGf6kQ46pazWIa1ignr5FyWjtHO4n9IQxiwIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFBjmHPJZokfCd+2m5pALbvxXWaEaMB8GA1UdIwQYMBaAFBrcAJPFr4lM9SC1
k24wshUJDen4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
R3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2LzEv
R09ZYzhsbWlSOEozN2FibWtBdHVfRmRab1JvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82
YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2LzEvR3R3QWs4V3ZpVXox
SUxXVGJqQ3lGUWtONmZnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9HwAwQAwRaNAwQA1C4zMA0GCSqG
SIb3DQEBCwUAA4IBAQAGFxHmqkcbQqvX7DtRkmv74G6aTBDNiNkCXsAaxZn1kQYa
B4lpkSAEQ+0R4zd4k4yoaF67j1IodbH0v3gXQAh7GyU/zw0sZztmF60HxWQfaHk0
GCjNWEgBy0KjuhCs0YROpKuQJET9lOpdQXdm/Be1ThcrQ3ajBU1wnAvWblwEdCCT
Ts/3lyzDzFUIXv9AAEt8jnhPGqjb8M4X3blmBBdKZl5UiSJ1gp3JZZYQXD376izC
/jzxWVnXfmyYEzYXb1atcon5MRYrj5R65kUOLvxfZuEFy+ymmhNoAOlmaFtolcML
sckEj7ztCATQO7IFrd60xSlWMur3Z31eGTQzGxab
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:44 2024 by rpki-client on console-ams.rpki-client.org