Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/DCnyxENE7gBotmIpZQ_FFtuVvA0.roa
File:                     DCnyxENE7gBotmIpZQ_FFtuVvA0.roa (raw, json)
Hash identifier:          fo47UaBsazpwAqpKoKIsU76YsGBZ8+nii30GZf6j3zE=
Subject key identifier:   0C:29:F2:C4:43:44:EE:00:68:B6:62:29:65:0F:C5:16:DB:95:BC:0D
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       16806936
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/DCnyxENE7gBotmIpZQ_FFtuVvA0.roa
Signing time:             Sat 01 Jan 2022 05:56:04 +0000
ROA not before:           Sat 01 Jan 2022 05:56:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48586
IP address blocks:        80.92.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377514294 (0x16806936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jan  1 05:56:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c29f2c44344ee0068b66229650fc516db95bc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:b5:a1:a2:48:65:cb:63:7d:1e:91:d3:8d:
                    29:29:31:4a:12:bf:a6:ca:b6:ee:09:83:ed:9b:bb:
                    9d:99:04:a6:a7:e5:e0:0a:3b:33:e1:96:c2:3d:9c:
                    4f:df:5f:94:8c:24:b2:6a:a5:19:8c:1c:ae:5a:1e:
                    95:1f:dd:05:ba:f8:6e:83:c9:8b:12:c5:95:2d:e8:
                    e2:e8:1d:6a:98:7b:c1:e7:af:55:3c:3e:0b:2e:4e:
                    4f:50:d8:e3:42:12:c2:43:e4:cd:00:d8:02:36:58:
                    3b:58:d4:70:65:c5:78:ed:cf:b8:06:fb:ce:e9:8f:
                    44:fc:87:6f:5c:f0:ba:c6:91:90:41:04:e8:a7:e6:
                    27:5e:99:39:00:a2:28:2a:e6:ef:31:ac:1f:1b:b7:
                    6b:23:99:b2:4b:6a:c1:be:1c:58:c8:6f:0e:09:97:
                    71:03:57:10:94:d3:0d:5f:d4:3f:57:6d:c7:5e:de:
                    65:be:aa:61:d5:8b:61:ec:b1:75:d6:eb:78:6a:2e:
                    cd:8b:67:86:a5:6d:ff:00:c3:fa:ce:7a:3f:3b:58:
                    f7:c4:8e:3e:99:bf:72:93:bd:d1:57:99:0f:74:69:
                    2e:4f:6d:af:63:a1:34:7e:ab:1f:78:e8:63:c0:81:
                    a6:c8:2f:49:04:5f:7c:17:a6:84:ab:da:77:e1:e0:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:29:F2:C4:43:44:EE:00:68:B6:62:29:65:0F:C5:16:DB:95:BC:0D
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/DCnyxENE7gBotmIpZQ_FFtuVvA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:59:90:ee:a3:b0:a9:c6:7a:42:b4:17:30:ea:e7:bf:3c:5c:
         fd:d2:25:dc:b9:dc:c5:f1:36:8d:fb:df:50:c5:82:ef:f6:1c:
         fe:74:d3:bf:e1:b8:ab:8c:ca:05:46:e1:8a:4e:d6:50:a7:ba:
         53:25:6f:3f:61:fe:58:17:28:ef:c2:b8:14:8d:51:ea:32:92:
         41:ff:47:76:87:38:ac:ab:00:77:89:d4:cd:b4:ad:f9:51:7a:
         ed:d6:d8:92:be:46:59:2b:e1:f3:15:fa:f2:bc:97:71:45:7a:
         17:1b:3e:6c:e5:6c:75:13:8d:f2:aa:b7:d1:e4:3e:52:16:48:
         a2:2e:d7:df:79:2d:8b:79:a4:4a:d3:8f:24:85:16:40:9a:5e:
         83:69:99:02:b0:3a:ed:2b:40:e7:ea:5c:cf:8e:b4:6a:20:2b:
         94:0b:ac:e3:b8:6a:0b:37:74:24:48:6c:8f:9a:6a:f1:81:eb:
         79:bd:5c:4c:41:41:f9:3a:dd:65:96:41:50:cf:b8:cf:1b:e1:
         2d:e0:7f:47:45:c9:51:5a:2f:90:49:ff:37:e9:a2:5b:15:e4:
         86:4b:18:3d:1c:41:75:da:b3:16:c7:67:ec:21:0f:ee:45:48:
         ad:b8:3b:d7:6d:6d:f7:bc:e2:46:28:08:95:c2:3f:48:59:fc:
         af:3b:7e:f6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFoBpNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OGZjNmU0NTE4MWQ4MzlmZDEwZTRhOTAyNzYyZjI2YzlhNjQ2Nzk2MB4XDTIyMDEw
MTA1NTYwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGMyOWYyYzQ0MzQ0
ZWUwMDY4YjY2MjI5NjUwZmM1MTZkYjk1YmMwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJxAtaGiSGXLY30ekdONKSkxShK/psq27gmD7Zu7nZkEpqfl
4Ao7M+GWwj2cT99flIwksmqlGYwcrloelR/dBbr4boPJixLFlS3o4ugdaph7weev
VTw+Cy5OT1DY40ISwkPkzQDYAjZYO1jUcGXFeO3PuAb7zumPRPyHb1zwusaRkEEE
6KfmJ16ZOQCiKCrm7zGsHxu3ayOZsktqwb4cWMhvDgmXcQNXEJTTDV/UP1dtx17e
Zb6qYdWLYeyxddbreGouzYtnhqVt/wDD+s56PztY98SOPpm/cpO90VeZD3RpLk9t
r2OhNH6rH3joY8CBpsgvSQRffBemhKvad+HgAYsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQMKfLEQ0TuAGi2YillD8UW25W8DTAfBgNVHSMEGDAWgBTY/G5FGB2Dn9EO
SpAnYvJsmmRnljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJQeHVSUmdkZzVfUkRrcVFKMkx5Ykpwa1o1WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvNjIzNDNjLWVkYmUtNGE4YS04NGYyLTdlYjJlYjg1Yjg0YS8x
L0RDbnl4RU5FN2dCb3RtSXBaUV9GRnR1VnZBMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
NjIzNDNjLWVkYmUtNGE4YS04NGYyLTdlYjJlYjg1Yjg0YS8xLzJQeHVSUmdkZzVf
UkRrcVFKMkx5Ykpwa1o1WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBczzANBgkqhkiG9w0BAQsFAAOC
AQEAa1mQ7qOwqcZ6QrQXMOrnvzxc/dIl3LncxfE2jfvfUMWC7/Yc/nTTv+G4q4zK
BUbhik7WUKe6UyVvP2H+WBco78K4FI1R6jKSQf9Hdoc4rKsAd4nUzbSt+VF67dbY
kr5GWSvh8xX68ryXcUV6Fxs+bOVsdRON8qq30eQ+UhZIoi7X33kti3mkStOPJIUW
QJpeg2mZArA67StA5+pcz460aiArlAus47hqCzd0JEhsj5pq8YHreb1cTEFB+Trd
ZZZBUM+4zxvhLeB/R0XJUVovkEn/N+miWxXkhksYPRxBddqzFsdn7CEP7kVIrbg7
121t97ziRigIlcI/SFn8rzt+9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org