Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/_4274La19xalPWmLD4OeVeJbzuY.roa
File:                     _4274La19xalPWmLD4OeVeJbzuY.roa (raw, json)
Hash identifier:          bxk0BFHn0ju/qsBGhOcHB5iQbC4wNrycrTYu9vm/07I=
Subject key identifier:   FF:8D:BB:E0:B6:B5:F7:16:A5:3D:69:8B:0F:83:9E:55:E2:5B:CE:E6
Certificate issuer:       /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial:       06EE711D
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/_4274La19xalPWmLD4OeVeJbzuY.roa
Signing time:             Sat 01 Jan 2022 12:02:04 +0000
ROA not before:           Sat 01 Jan 2022 12:02:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41155
IP address blocks:        194.0.193.0/24 maxlen: 24
                          194.0.221.0/24 maxlen: 24
                          194.0.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116289821 (0x6ee711d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
        Validity
            Not Before: Jan  1 12:02:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff8dbbe0b6b5f716a53d698b0f839e55e25bcee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fa:f8:73:bb:57:a5:78:7e:74:a2:c0:95:9f:
                    42:d8:f1:42:f1:23:62:4c:c7:1b:c9:ef:94:3d:38:
                    ad:65:e0:d4:09:e2:98:0d:ae:59:88:e3:56:80:7e:
                    a1:ae:95:6e:7b:7a:1e:6c:d3:46:9c:f6:f0:7a:5b:
                    d0:95:40:63:e1:d9:c5:ab:a4:cf:26:1d:ec:be:5f:
                    ab:89:ae:10:14:04:1d:4e:d9:da:b1:58:f4:98:8e:
                    c7:05:bf:23:a5:eb:fd:25:9c:c5:78:fa:d0:a5:9a:
                    80:1d:90:44:e6:e1:85:44:b1:cd:94:0f:df:06:d2:
                    35:5b:d8:65:1c:51:49:fe:80:b4:0d:02:4b:5b:bf:
                    49:f6:23:ab:c2:af:85:a8:b0:f8:99:0f:89:14:29:
                    d6:0d:9e:50:83:6c:5e:98:14:f1:c8:e2:6d:e5:33:
                    46:fc:46:b8:c9:86:9a:18:07:73:ec:c0:0c:50:28:
                    d5:6b:fd:88:c7:ac:65:fb:0d:da:c4:7a:d4:59:2e:
                    01:91:7c:24:3a:aa:1c:07:53:da:74:43:7e:46:b4:
                    81:bb:f1:e9:dc:7e:13:59:c9:ff:1a:a9:4a:94:53:
                    1c:7a:d1:4f:d8:e9:f7:f1:86:26:b3:af:27:20:a2:
                    c5:ad:50:d7:9f:c9:f6:d0:11:d0:07:e7:65:ec:ea:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8D:BB:E0:B6:B5:F7:16:A5:3D:69:8B:0F:83:9E:55:E2:5B:CE:E6
            X509v3 Authority Key Identifier:
                keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/_4274La19xalPWmLD4OeVeJbzuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.193.0/24
                  194.0.221.0/24
                  194.0.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:78:cf:6b:69:7e:ad:bf:06:f6:1a:63:04:82:ce:41:65:
         de:0f:61:b6:1e:08:d7:ca:42:8c:f2:11:59:1c:5d:dc:d5:25:
         5b:38:61:76:6c:ac:44:97:0a:ac:fb:a0:6c:1b:a5:90:eb:f3:
         a1:62:47:5e:23:fd:e4:b2:7a:6e:49:2b:68:a1:63:33:5d:1b:
         50:38:93:49:ae:ad:58:37:96:b4:7e:f0:7e:78:02:a7:ec:fe:
         3b:27:74:d6:26:2a:ec:c3:84:9c:96:ea:fb:c4:c1:e5:c0:02:
         ab:5f:cb:22:8d:35:4d:a3:13:0e:49:f7:a9:c9:a0:24:5d:47:
         71:b2:b7:9c:b1:6a:b3:11:78:3d:59:c0:85:ad:97:19:91:9d:
         d6:ca:e4:30:4f:f3:4d:b2:19:e8:e1:e5:ef:02:1e:a8:4a:aa:
         c0:84:0c:b9:f4:92:8a:7f:d3:e9:ed:83:b0:ef:cc:26:85:18:
         42:fe:3e:a2:26:66:79:d0:47:e6:0d:1a:a4:7c:bd:24:08:9f:
         ee:d2:19:27:fb:5e:9c:0c:e9:9c:99:18:06:ff:11:c4:a0:a0:
         8d:fd:8a:17:4e:23:3b:77:31:e6:c3:05:a3:40:69:b8:6c:79:
         b2:31:f0:0f:57:0a:79:c6:28:d0:d6:9a:f7:3d:9a:e3:a4:ce:
         15:bf:27:91
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBu5xHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmIxMzA4YzZhOTc3ZDVjYjkwM2JmMjVhOTYzMDhiMGU4Y2UzYjQ2MB4XDTIyMDEw
MTEyMDIwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmY4ZGJiZTBiNmI1
ZjcxNmE1M2Q2OThiMGY4MzllNTVlMjViY2VlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPP6+HO7V6V4fnSiwJWfQtjxQvEjYkzHG8nvlD04rWXg1Ani
mA2uWYjjVoB+oa6Vbnt6HmzTRpz28Hpb0JVAY+HZxaukzyYd7L5fq4muEBQEHU7Z
2rFY9JiOxwW/I6Xr/SWcxXj60KWagB2QRObhhUSxzZQP3wbSNVvYZRxRSf6AtA0C
S1u/SfYjq8Kvhaiw+JkPiRQp1g2eUINsXpgU8cjibeUzRvxGuMmGmhgHc+zADFAo
1Wv9iMesZfsN2sR61FkuAZF8JDqqHAdT2nRDfka0gbvx6dx+E1nJ/xqpSpRTHHrR
T9jp9/GGJrOvJyCixa1Q15/J9tAR0AfnZezqu1MCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBT/jbvgtrX3FqU9aYsPg55V4lvO5jAfBgNVHSMEGDAWgBSLsTCMapd9XLkD
vyWpYwiw6M47RjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k3RXdqR3FYZlZ5NUE3OGxxV01Jc09qT08wWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvNzc2NjgxLWI1ZWUtNDMwZi04NjkzLTEwMWFiZDczOTFhNi8x
L180Mjc0TGExOXhhbFBXbUxENE9lVmVKYnp1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
Nzc2NjgxLWI1ZWUtNDMwZi04NjkzLTEwMWFiZDczOTFhNi8xL2k3RXdqR3FYZlZ5
NUE3OGxxV01Jc09qT08wWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMIAwQMEAMIA3QMEAMIA3zANBgkq
hkiG9w0BAQsFAAOCAQEAg8B4z2tpfq2/BvYaYwSCzkFl3g9hth4I18pCjPIRWRxd
3NUlWzhhdmysRJcKrPugbBulkOvzoWJHXiP95LJ6bkkraKFjM10bUDiTSa6tWDeW
tH7wfngCp+z+Oyd01iYq7MOEnJbq+8TB5cACq1/LIo01TaMTDkn3qcmgJF1HcbK3
nLFqsxF4PVnAha2XGZGd1srkME/zTbIZ6OHl7wIeqEqqwIQMufSSin/T6e2DsO/M
JoUYQv4+oiZmedBH5g0apHy9JAif7tIZJ/tenAzpnJkYBv8RxKCgjf2KF04jO3cx
5sMFo0BpuGx5sjHwD1cKecYo0Naa9z2a46TOFb8nkQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org