Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/JwgHo96-mIiq7ZPyrk6b7VUVmEY.roa
File:                     JwgHo96-mIiq7ZPyrk6b7VUVmEY.roa (raw, json)
Hash identifier:          hXXA8ZUytEqAxEp4/9yqGp3NdKw7E8gMVrpxRahPdMs=
Subject key identifier:   27:08:07:A3:DE:BE:98:88:AA:ED:93:F2:AE:4E:9B:ED:55:15:98:46
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       0619CDD7
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/JwgHo96-mIiq7ZPyrk6b7VUVmEY.roa
Signing time:             Sat 01 Jan 2022 14:58:43 +0000
ROA not before:           Sat 01 Jan 2022 14:58:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48737
IP address blocks:        195.49.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102354391 (0x619cdd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Jan  1 14:58:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=270807a3debe9888aaed93f2ae4e9bed55159846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:42:f1:d5:55:fc:72:42:14:d0:f8:49:9d:68:
                    4f:a7:23:d7:9f:1d:56:0c:c3:63:0c:26:97:79:2d:
                    14:74:8d:ec:4d:26:5d:9d:64:26:bc:c7:8b:a5:a8:
                    3a:aa:f1:38:e5:4e:3e:fd:61:03:64:5f:7a:9b:7e:
                    eb:6d:39:c7:64:43:e2:d5:23:fc:18:7a:ac:30:7a:
                    82:18:3f:f0:cb:41:b8:3f:08:ec:87:e3:f8:f3:21:
                    28:1b:db:dd:c8:53:94:a2:94:f8:03:34:6c:a4:2f:
                    13:fd:2c:63:d0:6d:9c:74:e5:aa:e3:fa:da:2b:9d:
                    9a:3d:fc:26:96:98:ae:d0:f0:02:5e:f0:f6:f5:9a:
                    c5:26:e4:b9:1d:84:7e:bf:e3:21:68:0a:44:49:63:
                    9b:97:5a:b9:e4:29:cd:b4:df:67:37:d3:21:13:f2:
                    f9:68:0f:70:5e:6b:4c:91:ee:c3:b2:d7:e1:51:48:
                    0c:bd:5a:fc:9e:81:cb:aa:ee:91:c3:32:bd:95:fb:
                    ad:6d:b4:1d:a4:6a:92:80:76:72:cc:05:cd:68:4d:
                    0d:34:d0:83:27:c0:fc:51:ee:74:94:05:39:d9:cd:
                    93:ac:36:eb:a9:22:2f:8d:3c:0a:68:bf:e4:ea:39:
                    42:fd:a7:b1:1f:be:b5:cc:5c:11:3d:ee:99:1b:0e:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:08:07:A3:DE:BE:98:88:AA:ED:93:F2:AE:4E:9B:ED:55:15:98:46
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/JwgHo96-mIiq7ZPyrk6b7VUVmEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.49.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:fa:9e:24:25:e6:0f:51:47:62:10:ff:95:04:2c:48:9a:da:
         a6:37:6c:87:1a:4e:7b:30:00:ed:79:25:b7:ab:9d:4f:db:cc:
         6c:77:e6:46:57:e3:eb:c9:53:e6:7e:52:eb:49:58:95:64:04:
         31:be:c8:f6:18:00:dc:7a:a5:19:76:66:c3:90:7e:e7:0b:c4:
         14:05:dd:5f:fa:ff:7b:eb:46:a0:41:33:90:30:44:6b:a3:3e:
         a2:2b:57:72:39:af:f0:ea:d8:2c:3e:9f:d7:49:10:83:92:36:
         cf:a1:56:d9:2e:34:d6:27:70:86:5d:ad:87:6a:fc:69:72:78:
         39:4f:4f:0b:3a:55:d0:35:08:a2:28:3b:c4:6a:7f:97:b8:e5:
         1e:cc:fd:e5:a5:b2:11:70:ce:b6:5e:81:d6:f2:fd:09:5e:5d:
         6f:e8:91:8a:e8:de:6e:6a:58:5d:48:67:19:86:6a:25:47:d7:
         41:c5:4f:8f:df:4f:9a:26:d5:9a:a7:d5:10:1d:fc:07:53:f8:
         f9:3f:78:76:5d:ad:df:d3:74:42:0c:9b:c3:b4:25:17:f2:8d:
         39:f5:6b:ec:c2:ff:4f:57:65:4d:b7:93:b8:21:81:22:0c:c5:
         37:96:3e:63:6a:b4:74:6e:87:4f:a0:5e:e5:79:c2:18:f8:06:
         88:cb:73:84
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhnN1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTRmODAwMWMzMGNhYzU0NmUzZjkyMTAzYjRiMTI3MzJkZmNiZjUyMB4XDTIyMDEw
MTE0NTg0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjcwODA3YTNkZWJl
OTg4OGFhZWQ5M2YyYWU0ZTliZWQ1NTE1OTg0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOhC8dVV/HJCFND4SZ1oT6cj158dVgzDYwwml3ktFHSN7E0m
XZ1kJrzHi6WoOqrxOOVOPv1hA2Rfept+6205x2RD4tUj/Bh6rDB6ghg/8MtBuD8I
7Ifj+PMhKBvb3chTlKKU+AM0bKQvE/0sY9BtnHTlquP62iudmj38JpaYrtDwAl7w
9vWaxSbkuR2Efr/jIWgKREljm5daueQpzbTfZzfTIRPy+WgPcF5rTJHuw7LX4VFI
DL1a/J6By6rukcMyvZX7rW20HaRqkoB2cswFzWhNDTTQgyfA/FHudJQFOdnNk6w2
66kiL408Cmi/5Oo5Qv2nsR++tcxcET3umRsOtyECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQnCAej3r6YiKrtk/KuTpvtVRWYRjAfBgNVHSMEGDAWgBQaT4ABwwysVG4/
khA7SxJzLfy/UjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0drLUFBY01NckZSdVA1SVFPMHNTY3kzOHYxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvZDZjODZkLTZjNjUtNGEyNS1hOGZhLTM4ZDRmMzIxMTg5Ni8x
L0p3Z0hvOTYtbUlpcTdaUHlyazZiN1ZVVm1FWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
ZDZjODZkLTZjNjUtNGEyNS1hOGZhLTM4ZDRmMzIxMTg5Ni8xL0drLUFBY01NckZS
dVA1SVFPMHNTY3kzOHYxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMx7jANBgkqhkiG9w0BAQsFAAOC
AQEAq/qeJCXmD1FHYhD/lQQsSJrapjdshxpOezAA7Xklt6udT9vMbHfmRlfj68lT
5n5S60lYlWQEMb7I9hgA3HqlGXZmw5B+5wvEFAXdX/r/e+tGoEEzkDBEa6M+oitX
cjmv8OrYLD6f10kQg5I2z6FW2S401idwhl2th2r8aXJ4OU9PCzpV0DUIoig7xGp/
l7jlHsz95aWyEXDOtl6B1vL9CV5db+iRiujebmpYXUhnGYZqJUfXQcVPj99PmibV
mqfVEB38B1P4+T94dl2t39N0Qgybw7QlF/KNOfVr7ML/T1dlTbeTuCGBIgzFN5Y+
Y2q0dG6HT6Be5XnCGPgGiMtzhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:21 2024 by rpki-client on console-ams.rpki-client.org