Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/30af9aLQ_h0qA4Hw-OFxyyu4vok.roa
File:                     30af9aLQ_h0qA4Hw-OFxyyu4vok.roa (raw, json)
Hash identifier:          YPf1blAXI3QF15gV/6RHJgaCsjcUbeICFIZ0AezB8jI=
Subject key identifier:   DF:46:9F:F5:A2:D0:FE:1D:2A:03:81:F0:F8:E1:71:CB:2B:B8:BE:89
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       062BD57D
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/30af9aLQ_h0qA4Hw-OFxyyu4vok.roa
Signing time:             Sat 01 Jan 2022 07:02:42 +0000
ROA not before:           Sat 01 Jan 2022 07:02:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62371
IP address blocks:        176.119.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103535997 (0x62bd57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: Jan  1 07:02:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df469ff5a2d0fe1d2a0381f0f8e171cb2bb8be89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:0d:b0:6f:47:b2:95:27:b5:29:fd:82:7d:
                    eb:49:8e:78:be:b9:61:78:9a:8e:da:fb:c5:f5:4c:
                    0d:b7:68:e1:d9:08:e5:72:34:ee:11:a8:7c:27:15:
                    e1:bf:fb:f2:f3:61:eb:b6:cd:6e:86:72:03:19:50:
                    44:5f:a4:6a:6e:61:b5:2a:fc:8b:33:bd:d0:fe:54:
                    d1:7d:bb:1a:69:7c:da:74:7b:3a:83:d4:ac:15:68:
                    f6:1b:c8:f0:ab:64:9d:17:5c:5c:e0:b8:b8:a4:fb:
                    b1:70:32:39:e4:12:16:0d:5e:17:e9:70:5d:a6:89:
                    4a:dd:86:db:4d:06:3d:76:3e:c0:b3:72:68:aa:8a:
                    3d:61:5e:24:0d:4d:d2:23:75:6a:ca:fd:1c:8c:7e:
                    5d:d4:1e:43:7b:96:fd:05:b3:71:46:3b:fd:0e:e7:
                    e5:02:54:99:6c:36:5c:ff:66:48:e6:c4:99:41:88:
                    50:8c:2b:ca:60:41:bd:ae:55:b8:0b:b4:18:03:98:
                    26:ff:7f:8f:ec:9c:22:22:9f:3f:ae:86:25:f4:8e:
                    7c:f0:c9:96:e5:13:d4:e0:01:5a:12:0c:d5:11:e9:
                    32:86:23:8d:6e:d8:5e:b4:2c:06:03:08:4f:a2:62:
                    59:54:c9:94:64:a0:9f:5b:d7:b2:80:7c:0b:7a:2b:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:9F:F5:A2:D0:FE:1D:2A:03:81:F0:F8:E1:71:CB:2B:B8:BE:89
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/30af9aLQ_h0qA4Hw-OFxyyu4vok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:ce:16:fd:a4:79:fe:7c:8c:9d:86:17:f7:84:f2:ac:c3:
         e5:dd:eb:a7:50:1a:e7:7d:c5:6b:c4:1e:51:90:e7:47:5d:d0:
         ec:ee:8c:60:61:37:0d:22:bc:96:b3:9c:e3:af:21:55:9f:b3:
         34:8b:f2:a9:74:f3:70:98:05:fb:41:f2:f6:44:32:ac:8c:b9:
         d5:fb:94:1a:15:1a:9c:67:89:08:45:83:20:b1:4f:36:b5:33:
         d3:87:7d:56:dc:92:e5:1d:b8:19:47:32:4d:4c:6a:7f:91:54:
         d4:33:4f:dd:cb:b6:0a:2d:a5:8e:c8:76:c5:90:94:a8:88:17:
         c3:60:2a:18:11:d3:97:a8:9b:fd:a2:b0:3d:77:c7:fd:07:51:
         9a:ed:58:2e:f6:1e:bc:cb:68:00:63:22:a9:49:d1:62:66:2a:
         27:11:1a:51:40:6b:72:1c:b0:10:be:d4:62:0d:f4:a9:9c:3c:
         15:9e:01:54:1c:8e:fd:c6:e1:cc:8f:f3:f1:0c:a5:cd:d1:f4:
         cb:cd:e3:4b:65:91:3e:3a:ff:68:ca:f8:38:24:13:df:59:22:
         80:f2:22:1e:03:14:cf:f0:ed:1b:45:54:95:02:be:23:c4:7b:
         3e:96:9c:b1:5f:6f:98:f3:de:b6:0d:fa:cc:84:6e:76:ae:26:
         be:aa:8c:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBivVfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YzE1YTAyN2I1ZWU0YjBlODUzN2E4ZjcxOThjZmE5ZWEwOTQ1YWU3MB4XDTIyMDEw
MTA3MDI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGY0NjlmZjVhMmQw
ZmUxZDJhMDM4MWYwZjhlMTcxY2IyYmI4YmU4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM1JDbBvR7KVJ7Up/YJ960mOeL65YXiajtr7xfVMDbdo4dkI
5XI07hGofCcV4b/78vNh67bNboZyAxlQRF+kam5htSr8izO90P5U0X27Gml82nR7
OoPUrBVo9hvI8KtknRdcXOC4uKT7sXAyOeQSFg1eF+lwXaaJSt2G200GPXY+wLNy
aKqKPWFeJA1N0iN1asr9HIx+XdQeQ3uW/QWzcUY7/Q7n5QJUmWw2XP9mSObEmUGI
UIwrymBBva5VuAu0GAOYJv9/j+ycIiKfP66GJfSOfPDJluUT1OABWhIM1RHpMoYj
jW7YXrQsBgMIT6JiWVTJlGSgn1vXsoB8C3orf3MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTfRp/1otD+HSoDgfD44XHLK7i+iTAfBgNVHSMEGDAWgBS8FaAnte5LDoU3
qPcZjPqeoJRa5zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZCV2dKN1h1U3c2Rk42ajNHWXo2bnFDVVd1Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvMjdjZDcxLTlkZjUtNGY1YS1hNzAxLTZkZmUyMzlhZTU0MS8x
LzMwYWY5YUxRX2gwcUE0SHctT0Z4eXl1NHZvay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
MjdjZDcxLTlkZjUtNGY1YS1hNzAxLTZkZmUyMzlhZTU0MS8xL3ZCV2dKN1h1U3c2
Rk42ajNHWXo2bnFDVVd1Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB3yDANBgkqhkiG9w0BAQsFAAOC
AQEAjn3OFv2kef58jJ2GF/eE8qzD5d3rp1Aa533Fa8QeUZDnR13Q7O6MYGE3DSK8
lrOc468hVZ+zNIvyqXTzcJgF+0Hy9kQyrIy51fuUGhUanGeJCEWDILFPNrUz04d9
VtyS5R24GUcyTUxqf5FU1DNP3cu2Ci2ljsh2xZCUqIgXw2AqGBHTl6ib/aKwPXfH
/QdRmu1YLvYevMtoAGMiqUnRYmYqJxEaUUBrchywEL7UYg30qZw8FZ4BVByO/cbh
zI/z8QylzdH0y83jS2WRPjr/aMr4OCQT31kigPIiHgMUz/DtG0VUlQK+I8R7Ppac
sV9vmPPetg36zIRudq4mvqqMOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:37 2024 by rpki-client on console-fra.rpki-client.org