Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/T3X_CE_VHsKFxUnb8MCfk9QNNe8.roa
File:                     T3X_CE_VHsKFxUnb8MCfk9QNNe8.roa (raw, json)
Hash identifier:          fiScwXIVvaiII/XCvSQd/jt2NtUhAaKsaeQ1utbQ4hc=
Subject key identifier:   4F:75:FF:08:4F:D5:1E:C2:85:C5:49:DB:F0:C0:9F:93:D4:0D:35:EF
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       02285781
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/T3X_CE_VHsKFxUnb8MCfk9QNNe8.roa
Signing time:             Sat 12 Feb 2022 06:34:29 +0000
ROA not before:           Sat 12 Feb 2022 06:34:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        91.192.106.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36198273 (0x2285781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Feb 12 06:34:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f75ff084fd51ec285c549dbf0c09f93d40d35ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:a2:15:b0:90:6c:f0:68:9d:63:dd:5a:d8:
                    62:75:e6:d3:ff:4b:bb:e8:d7:97:04:28:7e:72:41:
                    de:6c:dd:93:a2:ee:f8:46:cf:46:a6:6f:7b:a6:bc:
                    32:a5:8b:32:a5:7d:6e:16:a4:6b:f7:4d:e6:fd:8b:
                    34:68:f6:7b:da:90:4c:cb:9e:59:97:53:64:e1:00:
                    1c:29:9b:a8:9a:16:f5:81:f3:1f:e0:da:f7:c9:bf:
                    84:56:a9:8f:74:39:51:e8:14:e8:78:9a:76:36:9d:
                    de:0c:a3:6b:b7:e5:5a:3a:a1:af:16:03:99:bd:ad:
                    e6:be:28:98:c6:33:21:2c:e2:53:4e:34:79:6c:c4:
                    42:2c:3a:2e:6e:c0:24:54:f3:77:33:9f:aa:26:8c:
                    45:f2:a5:4d:eb:df:83:a7:e7:8a:76:a2:1a:ce:a9:
                    f1:98:c4:fc:c4:18:cd:b6:a4:c1:ff:2a:91:b7:a5:
                    04:78:6a:fb:fd:ee:e3:62:52:c0:d1:ea:d4:59:c1:
                    a4:86:bc:ba:e2:e7:3d:a5:26:ae:d2:06:10:15:f1:
                    ea:38:65:f8:4b:38:9c:3a:39:84:bb:1f:cd:a4:56:
                    72:46:59:ca:f1:22:88:40:e9:c9:c7:40:56:74:8f:
                    8f:f6:ee:fe:7a:d6:e3:5d:55:9c:ec:1e:6d:6d:1e:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:FF:08:4F:D5:1E:C2:85:C5:49:DB:F0:C0:9F:93:D4:0D:35:EF
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/T3X_CE_VHsKFxUnb8MCfk9QNNe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:cd:d3:00:9b:f2:53:f6:3e:71:a3:29:12:e3:64:72:d6:57:
         8c:74:65:d5:9e:91:ae:3e:1c:e0:b9:0b:c6:60:f1:3f:6e:4c:
         c2:62:6c:38:d6:53:0a:0d:97:fc:be:e7:8a:c3:16:d5:f2:bf:
         e9:81:1e:92:8f:eb:7b:9a:a6:da:a8:9e:68:9e:cf:1c:95:e3:
         70:f5:74:f3:4d:ef:f7:6f:0f:5a:25:a4:31:a9:62:68:43:23:
         a4:19:7b:a4:c7:22:ce:5d:3e:80:d3:39:25:d3:b3:ee:41:32:
         ec:fe:a0:f0:49:52:26:a7:9d:e1:20:50:ba:ae:f5:59:58:60:
         ac:49:b4:03:90:04:76:c6:12:70:67:b5:57:49:1f:ca:c1:d2:
         99:f6:23:27:fc:95:af:24:22:ba:5b:cb:d6:18:21:76:36:fc:
         32:f1:40:45:f2:89:cd:92:25:41:2e:d7:53:6f:dc:8b:78:09:
         40:bc:18:1f:4d:41:db:00:c2:41:96:ab:7a:d2:d7:57:4d:42:
         87:ad:2a:f9:49:22:71:16:f4:cb:d2:5f:ac:f2:12:94:fa:07:
         a3:45:40:91:ed:33:ec:19:c5:f0:4c:a7:0a:c6:70:e7:0a:47:
         4e:69:cc:07:9b:3f:08:3c:ec:05:62:b1:e1:42:55:3e:c1:12:
         2a:c5:e5:58
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAihXgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZTk0NjFjMjExYmYzNTUxYzU1MDdjOTMwYjQyMDRjNmVjNDNiMzIyMB4XDTIyMDIx
MjA2MzQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGY3NWZmMDg0ZmQ1
MWVjMjg1YzU0OWRiZjBjMDlmOTNkNDBkMzVlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWfohWwkGzwaJ1j3VrYYnXm0/9Lu+jXlwQofnJB3mzdk6Lu
+EbPRqZve6a8MqWLMqV9bhaka/dN5v2LNGj2e9qQTMueWZdTZOEAHCmbqJoW9YHz
H+Da98m/hFapj3Q5UegU6Hiadjad3gyja7flWjqhrxYDmb2t5r4omMYzISziU040
eWzEQiw6Lm7AJFTzdzOfqiaMRfKlTevfg6fninaiGs6p8ZjE/MQYzbakwf8qkbel
BHhq+/3u42JSwNHq1FnBpIa8uuLnPaUmrtIGEBXx6jhl+Es4nDo5hLsfzaRWckZZ
yvEiiEDpycdAVnSPj/bu/nrW411VnOwebW0e8L0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRPdf8IT9UewoXFSdvwwJ+T1A017zAfBgNVHSMEGDAWgBTelGHCEb81UcVQ
fJMLQgTG7EOzIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNwUmh3aEdfTlZIRlVIeVRDMElFeHV4RHN5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvOTE4M2Q0LTA3NzktNDljNC05NmY3LTgyMDJhNDY3ZDc1My8x
L1QzWF9DRV9WSHNLRnhVbmI4TUNmazlRTk5lOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
OTE4M2Q0LTA3NzktNDljNC05NmY3LTgyMDJhNDY3ZDc1My8xLzNwUmh3aEdfTlZI
RlVIeVRDMElFeHV4RHN5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvAajANBgkqhkiG9w0BAQsFAAOC
AQEABs3TAJvyU/Y+caMpEuNkctZXjHRl1Z6Rrj4c4LkLxmDxP25MwmJsONZTCg2X
/L7nisMW1fK/6YEeko/re5qm2qieaJ7PHJXjcPV0803v928PWiWkMaliaEMjpBl7
pMcizl0+gNM5JdOz7kEy7P6g8ElSJqed4SBQuq71WVhgrEm0A5AEdsYScGe1V0kf
ysHSmfYjJ/yVryQiulvL1hghdjb8MvFARfKJzZIlQS7XU2/ci3gJQLwYH01B2wDC
QZaretLXV01Ch60q+UkicRb0y9JfrPISlPoHo0VAke0z7BnF8EynCsZw5wpHTmnM
B5s/CDzsBWKx4UJVPsESKsXlWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org