Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/c48T9yHKWRrIIvW5D8SnknMZv2k.roa
File:                     c48T9yHKWRrIIvW5D8SnknMZv2k.roa (raw, json)
Hash identifier:          K5h7alhl7S24hvlGOfJaCT/FaFahXqM2p56APiwW16I=
Subject key identifier:   73:8F:13:F7:21:CA:59:1A:C8:22:F5:B9:0F:C4:A7:92:73:19:BF:69
Certificate issuer:       /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial:       0105B3
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/c48T9yHKWRrIIvW5D8SnknMZv2k.roa
Signing time:             Tue 26 Apr 2022 15:17:29 +0000
ROA not before:           Tue 26 Apr 2022 15:17:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        195.250.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66995 (0x105b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
        Validity
            Not Before: Apr 26 15:17:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=738f13f721ca591ac822f5b90fc4a7927319bf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:b2:e1:57:d8:87:77:34:0a:c2:98:e0:c4:
                    a7:70:37:d4:d1:0c:01:7a:40:b2:48:1e:32:ab:e6:
                    d7:0d:a4:60:54:2d:1d:dc:ec:bd:05:18:5a:43:6f:
                    b9:ea:88:a6:be:96:ea:d9:e8:40:3f:08:c6:03:a9:
                    d7:44:7b:3e:39:0c:40:35:bb:f1:66:b5:96:a4:c8:
                    0c:ca:61:a2:28:43:97:bd:fd:0e:1d:07:ab:dd:aa:
                    e4:a7:23:53:92:5c:fa:c3:27:66:17:3b:78:fd:cf:
                    d9:40:23:bf:13:43:b7:1f:b9:c7:3c:98:5c:5f:38:
                    04:ab:5a:72:53:1f:1e:0c:67:14:23:bd:91:8c:85:
                    92:f4:3b:1a:38:dc:05:b1:9c:0b:c5:99:46:e9:fc:
                    3d:b2:2e:fb:5d:90:58:30:82:ff:8d:85:fe:7b:76:
                    7f:9c:12:c3:50:d7:15:6a:70:06:9d:24:bf:61:14:
                    f3:ed:af:fc:78:7b:8f:8c:19:7f:ab:ef:3c:ff:9e:
                    1e:0f:90:36:0f:29:a5:3b:9b:cf:9e:2f:5d:22:15:
                    4d:1d:be:b1:63:8e:ad:8e:5c:33:68:5b:4f:0c:1f:
                    79:c6:5d:2a:71:1b:13:bc:4c:ac:01:cf:3f:37:55:
                    fa:6c:8c:41:a7:8a:41:78:a1:c6:10:2b:18:26:77:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8F:13:F7:21:CA:59:1A:C8:22:F5:B9:0F:C4:A7:92:73:19:BF:69
            X509v3 Authority Key Identifier:
                keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/c48T9yHKWRrIIvW5D8SnknMZv2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.250.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:31:54:23:e9:82:25:13:bd:61:c1:da:b0:85:ff:5d:4e:
         da:fc:f2:2a:48:d8:1f:6f:88:fe:73:62:86:f7:b9:90:2d:97:
         89:79:b0:69:a9:f5:dd:84:ef:f0:4d:61:d3:dc:68:f0:0c:8d:
         98:bc:32:43:73:e5:f3:9f:3e:95:d3:7f:20:c2:ef:05:f4:b7:
         ed:2f:12:26:fc:7a:2f:e3:f6:51:b5:fc:6a:60:32:7f:7b:c7:
         61:29:c7:ce:e3:a0:2f:63:57:35:02:9f:6c:0a:da:03:52:2b:
         a4:fa:15:e6:dc:d7:8e:58:9a:45:2a:62:7c:cf:2d:f2:ef:2f:
         ae:c7:0d:ee:bc:f7:a2:61:d3:ee:87:c1:3f:84:e7:0d:62:79:
         2f:cb:53:22:fa:81:1b:0f:0d:e7:87:d2:95:f6:8e:17:c1:3d:
         96:71:b7:78:5d:60:70:a3:c3:91:e1:1b:b0:91:0a:f8:b8:f3:
         cb:5c:c2:33:66:e7:d4:60:ed:35:d5:a2:dd:20:18:43:c5:a0:
         e7:68:2a:30:ce:cd:28:7c:8a:5a:e7:c9:48:79:24:af:ec:3b:
         1f:f1:fc:47:27:4a:bc:7e:25:54:f3:73:65:a2:f8:b8:7d:61:
         fd:22:0f:f8:5a:a3:06:15:fc:34:a1:f7:0c:58:ef:40:96:26:
         3c:71:0a:96
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAQWzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
YmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIzYmYxNTMwHhcNMjIwNDI2
MTUxNzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3MzhmMTNmNzIxY2E1
OTFhYzgyMmY1YjkwZmM0YTc5MjczMTliZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm1Wy4VfYh3c0CsKY4MSncDfU0QwBekCySB4yq+bXDaRgVC0d
3Oy9BRhaQ2+56oimvpbq2ehAPwjGA6nXRHs+OQxANbvxZrWWpMgMymGiKEOXvf0O
HQer3arkpyNTklz6wydmFzt4/c/ZQCO/E0O3H7nHPJhcXzgEq1pyUx8eDGcUI72R
jIWS9DsaONwFsZwLxZlG6fw9si77XZBYMIL/jYX+e3Z/nBLDUNcVanAGnSS/YRTz
7a/8eHuPjBl/q+88/54eD5A2DymlO5vPni9dIhVNHb6xY46tjlwzaFtPDB95xl0q
cRsTvEysAc8/N1X6bIxBp4pBeKHGECsYJnfa1QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHOPE/chylkayCL1uQ/Ep5JzGb9pMB8GA1UdIwQYMBaAFK696tTx0cjdqW0c
0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2LzEv
YzQ4VDl5SEtXUnJJSXZXNUQ4U25rbk1adjJrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8y
ZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJw
YlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/ouMA0GCSqGSIb3DQEBCwUAA4IB
AQBv6jFUI+mCJRO9YcHasIX/XU7a/PIqSNgfb4j+c2KG97mQLZeJebBpqfXdhO/w
TWHT3GjwDI2YvDJDc+Xznz6V038gwu8F9LftLxIm/Hov4/ZRtfxqYDJ/e8dhKcfO
46AvY1c1Ap9sCtoDUiuk+hXm3NeOWJpFKmJ8zy3y7y+uxw3uvPeiYdPuh8E/hOcN
Ynkvy1Mi+oEbDw3nh9KV9o4XwT2Wcbd4XWBwo8OR4RuwkQr4uPPLXMIzZufUYO01
1aLdIBhDxaDnaCowzs0ofIpa58lIeSSv7Dsf8fxHJ0q8fiVU83Nlovi4fWH9Ig/4
WqMGFfw0ofcMWO9AliY8cQqW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:55 2024 by rpki-client on console-fra.rpki-client.org