Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/jC8bgLXjODwmVigtlggw0Oyv6NY.roa
File:                     jC8bgLXjODwmVigtlggw0Oyv6NY.roa (raw, json)
Hash identifier:          cQZTLZp5MTNeRnFLkWkh5dIEmHctGzmBHEHtrGjr6eE=
Subject key identifier:   8C:2F:1B:80:B5:E3:38:3C:26:56:28:2D:96:08:30:D0:EC:AF:E8:D6
Certificate issuer:       /CN=26c1e9efb4a1a693661a1e780374a715a0255e3c
Certificate serial:       0DD5BD19
Authority key identifier: 26:C1:E9:EF:B4:A1:A6:93:66:1A:1E:78:03:74:A7:15:A0:25:5E:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsHp77ShppNmGh54A3SnFaAlXjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/jC8bgLXjODwmVigtlggw0Oyv6NY.roa
Signing time:             Sat 01 Jan 2022 01:55:12 +0000
ROA not before:           Sat 01 Jan 2022 01:55:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51595
IP address blocks:        194.0.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232111385 (0xdd5bd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c1e9efb4a1a693661a1e780374a715a0255e3c
        Validity
            Not Before: Jan  1 01:55:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c2f1b80b5e3383c2656282d960830d0ecafe8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:cf:5a:1f:39:56:63:0e:ec:0a:ad:f6:63:
                    aa:27:f3:3f:99:eb:33:79:66:dc:8e:1e:96:7b:55:
                    bc:ba:79:b4:56:19:96:00:ec:ab:ff:3d:fa:24:92:
                    61:e8:92:b9:2e:ce:cb:4a:d9:9a:48:9a:7a:e1:b2:
                    f8:c2:a9:11:7c:c8:f5:f8:64:83:1d:57:8c:2b:0d:
                    99:32:1d:78:f0:20:91:22:96:0f:b7:19:42:5c:70:
                    2e:50:84:0d:0c:60:65:bb:5f:10:91:48:3a:5b:b1:
                    81:c9:76:44:0f:fc:a2:5e:d2:d4:31:a8:65:a5:bb:
                    4c:76:a4:46:0c:86:2f:29:4d:e4:c2:93:1b:43:f1:
                    24:ed:95:6a:74:d7:e1:98:17:51:ab:ca:98:50:33:
                    68:68:71:4b:55:14:ae:cf:db:44:1e:2b:d9:42:a1:
                    cd:04:70:e0:75:fc:e6:44:8b:ed:b9:67:a4:96:fa:
                    87:9c:e8:85:84:2c:25:90:b6:f2:04:c2:f8:59:34:
                    d7:38:cb:37:3a:f4:6b:5c:a6:82:d6:fe:f0:ce:76:
                    db:51:b3:8d:b8:46:9e:4f:52:05:1a:e8:08:ad:83:
                    d1:0a:45:4b:c5:5c:b2:3d:ab:06:8f:54:2c:95:6a:
                    9d:fb:66:0f:b7:d4:c5:cb:4a:33:d4:de:5f:e3:2e:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:1B:80:B5:E3:38:3C:26:56:28:2D:96:08:30:D0:EC:AF:E8:D6
            X509v3 Authority Key Identifier:
                keyid:26:C1:E9:EF:B4:A1:A6:93:66:1A:1E:78:03:74:A7:15:A0:25:5E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsHp77ShppNmGh54A3SnFaAlXjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/jC8bgLXjODwmVigtlggw0Oyv6NY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/JsHp77ShppNmGh54A3SnFaAlXjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:cd:cf:7c:a5:5b:1b:16:90:c5:b4:68:4b:8d:b5:49:d8:
         6a:0f:54:f9:70:d0:76:f9:25:2a:f6:c6:4f:65:fc:65:0a:28:
         f0:01:28:1e:ab:26:b2:ef:7a:92:9d:75:66:1d:4b:19:5f:f9:
         aa:c9:40:5d:0d:97:8f:2c:af:98:19:80:3e:29:ad:c1:f9:cb:
         75:30:0a:02:af:1c:a4:64:2f:10:c2:09:72:8c:8a:0f:e5:7b:
         43:0d:b4:00:4e:d5:43:ce:92:bf:c1:5a:b7:fa:7e:48:0c:c4:
         d2:c9:1d:78:c2:38:1c:b3:fe:85:60:61:8b:fd:f7:02:9a:43:
         b5:0e:4a:1d:03:86:ac:20:10:06:ab:17:73:98:08:e2:6d:8d:
         05:55:c4:ad:ec:c8:c5:62:49:d5:96:81:65:3c:56:e7:60:0d:
         f0:a1:b0:1e:d9:39:24:79:32:4c:78:42:9a:a5:7d:ac:f4:2a:
         79:dc:3b:ef:a2:30:ff:d3:2b:60:cd:02:e5:d4:a2:ec:13:22:
         3d:53:cb:9c:65:4c:1d:88:e8:3c:fa:d4:e0:2e:2e:03:4f:47:
         65:1e:2c:ec:b6:fe:3f:4a:c7:7a:08:71:d3:5c:ac:24:95:a9:
         10:22:dd:c5:57:30:64:7e:f3:84:1f:1a:65:c4:54:6c:1f:22:
         8d:6e:3d:98
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDdW9GTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NmMxZTllZmI0YTFhNjkzNjYxYTFlNzgwMzc0YTcxNWEwMjU1ZTNjMB4XDTIyMDEw
MTAxNTUxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGMyZjFiODBiNWUz
MzgzYzI2NTYyODJkOTYwODMwZDBlY2FmZThkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRvz1ofOVZjDuwKrfZjqifzP5nrM3lm3I4elntVvLp5tFYZ
lgDsq/89+iSSYeiSuS7Oy0rZmkiaeuGy+MKpEXzI9fhkgx1XjCsNmTIdePAgkSKW
D7cZQlxwLlCEDQxgZbtfEJFIOluxgcl2RA/8ol7S1DGoZaW7THakRgyGLylN5MKT
G0PxJO2VanTX4ZgXUavKmFAzaGhxS1UUrs/bRB4r2UKhzQRw4HX85kSL7blnpJb6
h5zohYQsJZC28gTC+Fk01zjLNzr0a1ymgtb+8M5221GzjbhGnk9SBRroCK2D0QpF
S8Vcsj2rBo9ULJVqnftmD7fUxctKM9TeX+MuKFMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSMLxuAteM4PCZWKC2WCDDQ7K/o1jAfBgNVHSMEGDAWgBQmwenvtKGmk2Ya
HngDdKcVoCVePDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pzSHA3N1NocHBObUdoNTRBM1NuRmFBbFhqdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZWRhMjg3LWZjNjgtNGE5NS1hMjk2LTQzZmE2N2FhOWM4MC8x
L2pDOGJnTFhqT0R3bVZpZ3RsZ2d3ME95djZOWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZWRhMjg3LWZjNjgtNGE5NS1hMjk2LTQzZmE2N2FhOWM4MC8xL0pzSHA3N1NocHBO
bUdoNTRBM1NuRmFBbFhqdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIAmzANBgkqhkiG9w0BAQsFAAOC
AQEAov7Nz3ylWxsWkMW0aEuNtUnYag9U+XDQdvklKvbGT2X8ZQoo8AEoHqsmsu96
kp11Zh1LGV/5qslAXQ2XjyyvmBmAPimtwfnLdTAKAq8cpGQvEMIJcoyKD+V7Qw20
AE7VQ86Sv8Fat/p+SAzE0skdeMI4HLP+hWBhi/33AppDtQ5KHQOGrCAQBqsXc5gI
4m2NBVXErezIxWJJ1ZaBZTxW52AN8KGwHtk5JHkyTHhCmqV9rPQqedw776Iw/9Mr
YM0C5dSi7BMiPVPLnGVMHYjoPPrU4C4uA09HZR4s7Lb+P0rHeghx01ysJJWpECLd
xVcwZH7zhB8aZcRUbB8ijW49mA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:07 2024 by rpki-client on console-ams.rpki-client.org