Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jk62mvU2DI_sQ_PfGK_KUYoRtrI.roa
File:                     jk62mvU2DI_sQ_PfGK_KUYoRtrI.roa (raw, json)
Hash identifier:          XmFjycVtBmOwi6r4ojimWPoVZ8FN/aQdfLMuqFtm6Go=
Subject key identifier:   8E:4E:B6:9A:F5:36:0C:8F:EC:43:F3:DF:18:AF:CA:51:8A:11:B6:B2
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       49132B36
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jk62mvU2DI_sQ_PfGK_KUYoRtrI.roa
Signing time:             Tue 01 Mar 2022 09:46:45 +0000
ROA not before:           Tue 01 Mar 2022 09:46:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43444
IP address blocks:        193.93.192.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225993014 (0x49132b36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Mar  1 09:46:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e4eb69af5360c8fec43f3df18afca518a11b6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:eb:8a:d7:02:32:f8:c5:17:97:88:cd:76:
                    28:89:fc:7d:cb:25:4c:39:93:88:b0:08:c9:3f:cf:
                    2a:9e:17:aa:07:a0:b9:7b:5e:2f:7c:0c:d5:de:86:
                    5f:2b:cd:5a:84:6d:df:de:2e:d6:fe:5b:db:5c:35:
                    c8:70:cd:98:22:38:f9:cf:e8:1d:3b:28:a5:6f:71:
                    a2:89:67:22:c5:2e:45:9b:4b:dd:b6:9c:93:b5:fb:
                    ca:d1:2e:4a:0d:9d:a7:ad:4c:c4:fb:12:95:0f:b6:
                    fa:8c:59:7d:b1:de:b0:3d:cd:a0:0b:fb:6b:9a:b5:
                    16:64:fa:ab:75:23:ee:1f:17:6d:f3:b4:f4:54:cd:
                    a5:38:16:2b:80:97:37:c1:7d:a2:98:4e:10:c7:8f:
                    e2:29:9d:da:d8:f9:cb:08:be:ee:3a:fa:99:8d:f7:
                    3c:c7:08:0d:c1:d8:23:a6:e1:4f:10:d6:ed:fe:8c:
                    87:e1:f4:5a:b9:45:0a:8b:50:41:24:26:26:11:97:
                    ba:ba:e5:4b:45:b5:0e:cb:56:db:5a:49:2c:7f:0b:
                    1e:ea:2d:0c:81:3c:7b:6d:19:ee:96:40:e9:14:ed:
                    25:05:58:53:57:5c:91:c4:72:e7:dd:a7:54:4d:af:
                    74:4b:dc:b2:ed:36:f8:01:45:da:97:3f:d6:80:ce:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4E:B6:9A:F5:36:0C:8F:EC:43:F3:DF:18:AF:CA:51:8A:11:B6:B2
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jk62mvU2DI_sQ_PfGK_KUYoRtrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:96:ec:30:98:5d:7b:35:6e:f2:5e:f5:42:be:e5:fc:ae:b4:
         66:a0:1d:12:8b:b4:76:62:69:f8:f3:1c:97:6b:83:0e:9f:99:
         33:d8:2e:66:23:87:26:9f:8e:a2:91:cf:01:bc:47:0b:44:76:
         2a:16:3f:bd:d9:12:35:33:ee:41:16:65:8e:82:d1:e0:79:72:
         11:f8:a1:0a:33:3a:d5:34:2d:e1:3c:42:0a:7e:5b:c0:77:bb:
         78:aa:5b:b8:80:ec:e8:68:cb:3d:d0:a0:fa:98:48:85:0f:fd:
         b8:2b:b6:6b:10:40:0f:23:1e:7c:49:18:0e:7b:1d:67:97:ad:
         67:68:b3:a1:96:79:85:9f:17:00:ec:81:65:f6:2a:6c:81:f5:
         5e:b7:4a:ec:53:e7:78:bd:b2:26:93:44:9d:25:12:49:6a:33:
         e0:3f:61:b2:7d:c9:81:b3:7a:8d:89:8d:e0:8f:1e:f4:db:9b:
         a5:25:5f:66:f6:3a:fe:9b:ba:d4:c1:c3:4c:57:ea:3b:9a:a8:
         dd:d0:2e:79:4d:25:86:d8:3e:ec:a7:9c:77:95:99:0f:e3:02:
         ca:7c:40:9e:f1:a5:34:09:d2:dc:dd:31:ac:8f:9f:56:20:f7:
         d2:b8:d9:1b:0a:7f:d5:c6:bd:04:df:65:09:07:7c:2d:61:ac:
         ce:fc:e3:4e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIESRMrNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMB4XDTIyMDMw
MTA5NDY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU0ZWI2OWFmNTM2
MGM4ZmVjNDNmM2RmMThhZmNhNTE4YTExYjZiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMym64rXAjL4xReXiM12KIn8fcslTDmTiLAIyT/PKp4Xqgeg
uXteL3wM1d6GXyvNWoRt394u1v5b21w1yHDNmCI4+c/oHTsopW9xoolnIsUuRZtL
3back7X7ytEuSg2dp61MxPsSlQ+2+oxZfbHesD3NoAv7a5q1FmT6q3Uj7h8XbfO0
9FTNpTgWK4CXN8F9ophOEMeP4imd2tj5ywi+7jr6mY33PMcIDcHYI6bhTxDW7f6M
h+H0WrlFCotQQSQmJhGXurrlS0W1DstW21pJLH8LHuotDIE8e20Z7pZA6RTtJQVY
U1dckcRy592nVE2vdEvcsu02+AFF2pc/1oDOVSECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSOTraa9TYMj+xD898Yr8pRihG2sjAfBgNVHSMEGDAWgBTqqooKX9/WmOEE
vjairuyBOuygcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8x
L2prNjJtdlUyRElfc1FfUGZHS19LVVlvUnRySS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBq
aEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsFdwDANBgkqhkiG9w0BAQsFAAOC
AQEAGZbsMJhdezVu8l71Qr7l/K60ZqAdEou0dmJp+PMcl2uDDp+ZM9guZiOHJp+O
opHPAbxHC0R2KhY/vdkSNTPuQRZljoLR4HlyEfihCjM61TQt4TxCCn5bwHe7eKpb
uIDs6GjLPdCg+phIhQ/9uCu2axBADyMefEkYDnsdZ5etZ2izoZZ5hZ8XAOyBZfYq
bIH1XrdK7FPneL2yJpNEnSUSSWoz4D9hsn3JgbN6jYmN4I8e9NubpSVfZvY6/pu6
1MHDTFfqO5qo3dAueU0lhtg+7Kecd5WZD+MCynxAnvGlNAnS3N0xrI+fViD30rjZ
Gwp/1ca9BN9lCQd8LWGszvzjTg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org