Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/zbDnTXnx7cRVwjwER3SctcmYTeE.roa
File:                     zbDnTXnx7cRVwjwER3SctcmYTeE.roa (raw, json)
Hash identifier:          Bn6p0E+Fi8nRR+1+Ey7iZQCIy2aj6VYXILmnziYzIOs=
Subject key identifier:   CD:B0:E7:4D:79:F1:ED:C4:55:C2:3C:04:47:74:9C:B5:C9:98:4D:E1
Certificate issuer:       /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial:       015B10
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/zbDnTXnx7cRVwjwER3SctcmYTeE.roa
Signing time:             Sun 30 Jan 2022 18:57:42 +0000
ROA not before:           Sun 30 Jan 2022 18:57:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59447
IP address blocks:        193.9.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88848 (0x15b10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
        Validity
            Not Before: Jan 30 18:57:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cdb0e74d79f1edc455c23c0447749cb5c9984de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:70:9b:8f:c3:7c:3f:5e:56:90:15:2a:52:
                    49:8d:c1:cf:7e:a3:2e:4c:92:5b:8f:98:cc:c8:f3:
                    82:87:5b:89:2d:71:bc:c2:dd:7a:cd:70:4f:99:91:
                    43:78:64:d0:c2:57:bc:98:54:be:7a:d3:c5:04:05:
                    c9:2a:5e:89:e4:87:7b:81:ce:0c:14:a0:b5:15:59:
                    3b:a0:8b:ec:56:80:ad:83:13:5a:3e:a7:ee:f5:cc:
                    dd:07:91:5f:16:81:aa:b8:e3:3b:6e:ee:bb:a4:af:
                    8f:2d:d8:70:7f:9a:ed:d1:7a:42:24:bb:27:97:df:
                    c0:63:26:d2:8f:d6:af:2f:79:b4:76:e5:57:fc:b5:
                    f4:68:01:94:5b:17:81:b4:c5:d1:0a:e6:13:bc:08:
                    a3:39:f0:ba:6c:18:9e:92:6b:8f:d6:a4:49:8f:9f:
                    6d:44:73:01:6f:c7:4d:67:be:fe:a9:70:b3:b0:51:
                    db:66:f6:ad:7b:4c:be:41:33:76:4b:9c:0d:24:d7:
                    da:1b:41:00:0f:de:ba:21:e4:9b:7d:4c:af:14:f8:
                    85:9b:86:6b:5f:9a:91:cc:4a:42:8b:bc:73:be:20:
                    e9:3a:e4:b7:e6:61:00:5c:bf:1c:2e:db:10:15:07:
                    cc:37:e3:ce:f7:9d:2e:72:0c:e0:77:7f:fc:f9:bc:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B0:E7:4D:79:F1:ED:C4:55:C2:3C:04:47:74:9C:B5:C9:98:4D:E1
            X509v3 Authority Key Identifier:
                keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/zbDnTXnx7cRVwjwER3SctcmYTeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:c6:71:8c:e5:46:ef:48:df:8f:7b:ac:60:b9:4d:28:3a:f4:
         bd:b6:eb:4e:fb:86:e0:f0:cd:5f:14:45:12:db:b1:0d:f0:be:
         0a:0f:00:d9:f8:70:8a:cc:8a:34:28:85:45:fa:18:62:37:cd:
         06:c9:fb:1e:c4:21:2e:2b:ef:5c:23:4e:01:01:86:86:54:f3:
         cc:39:98:dc:0d:b3:cd:e8:29:89:09:92:45:26:f0:c3:f7:65:
         10:04:d2:a6:9d:66:ee:77:6d:64:50:75:68:85:fd:57:39:72:
         8a:b9:17:fd:e5:da:92:6d:9f:65:b4:d6:c0:f3:c0:fd:34:1d:
         d7:e7:25:7b:94:bd:28:bf:ba:b1:8e:ab:53:af:54:02:c5:fa:
         db:46:bb:77:18:04:70:66:7e:37:06:b6:c6:f5:72:78:61:f3:
         a4:9d:f4:ad:5f:40:43:ab:99:2d:20:d5:10:6a:02:36:62:e5:
         84:c2:b1:86:2f:de:df:c5:aa:c9:0d:88:6a:86:85:6f:82:30:
         a8:b8:5d:fc:47:d4:c7:34:b8:0d:b1:dd:a7:d9:25:b7:78:4a:
         66:72:16:c8:bd:9e:95:0b:2a:f1:16:13:a4:6f:11:a1:cc:e3:
         99:56:60:d3:b4:d9:e0:fa:d1:b3:34:10:b7:6c:ee:89:6f:df:
         15:05:3f:b7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAVsQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc2
ZjJmMzQxY2Y5OGI5ZThiNDZlZGQzODlhNDgwNjRjN2JhZTZmOWEwHhcNMjIwMTMw
MTg1NzQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZGIwZTc0ZDc5ZjFl
ZGM0NTVjMjNjMDQ0Nzc0OWNiNWM5OTg0ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5IRwm4/DfD9eVpAVKlJJjcHPfqMuTJJbj5jMyPOCh1uJLXG8
wt16zXBPmZFDeGTQwle8mFS+etPFBAXJKl6J5Id7gc4MFKC1FVk7oIvsVoCtgxNa
Pqfu9czdB5FfFoGquOM7bu67pK+PLdhwf5rt0XpCJLsnl9/AYybSj9avL3m0duVX
/LX0aAGUWxeBtMXRCuYTvAijOfC6bBiekmuP1qRJj59tRHMBb8dNZ77+qXCzsFHb
Zvate0y+QTN2S5wNJNfaG0EAD966IeSbfUyvFPiFm4ZrX5qRzEpCi7xzviDpOuS3
5mEAXL8cLtsQFQfMN+PO950ucgzgd3/8+bwaUwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFM2w50158e3EVcI8BEd0nLXJmE3hMB8GA1UdIwQYMBaAFHby80HPmLnotG7d
OJpIBkx7rm+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZHZMelFjLVl1ZWkwYnQwNG1rZ0dUSHV1YjVvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80My8xZTMzNGQtOThiNS00N2I5LWI0ZmQtMjlmNzFlZTE3OTFkLzEv
emJEblRYbng3Y1JWd2p3RVIzU2N0Y21ZVGVFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8x
ZTMzNGQtOThiNS00N2I5LWI0ZmQtMjlmNzFlZTE3OTFkLzEvZHZMelFjLVl1ZWkw
YnQwNG1rZ0dUSHV1YjVvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQkwMA0GCSqGSIb3DQEBCwUAA4IB
AQAnxnGM5UbvSN+Pe6xguU0oOvS9tutO+4bg8M1fFEUS27EN8L4KDwDZ+HCKzIo0
KIVF+hhiN80GyfsexCEuK+9cI04BAYaGVPPMOZjcDbPN6CmJCZJFJvDD92UQBNKm
nWbud21kUHVohf1XOXKKuRf95dqSbZ9ltNbA88D9NB3X5yV7lL0ov7qxjqtTr1QC
xfrbRrt3GARwZn43BrbG9XJ4YfOknfStX0BDq5ktINUQagI2YuWEwrGGL97fxarJ
DYhqhoVvgjCouF38R9THNLgNsd2n2SW3eEpmchbIvZ6VCyrxFhOkbxGhzOOZVmDT
tNng+tGzNBC3bO6Jb98VBT+3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:10 2024 by rpki-client on console-fra.rpki-client.org