Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/llzJaq87wdPsm0eEdxov9XunKtw.roa
File:                     llzJaq87wdPsm0eEdxov9XunKtw.roa (raw, json)
Hash identifier:          U0JD9u+Vdg2uCJgr4fmLVLif1AC7Tdp8mKL8/azaJ3Y=
Subject key identifier:   96:5C:C9:6A:AF:3B:C1:D3:EC:9B:47:84:77:1A:2F:F5:7B:A7:2A:DC
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       2B119FEB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/llzJaq87wdPsm0eEdxov9XunKtw.roa
Signing time:             Sat 01 Jan 2022 13:58:08 +0000
ROA not before:           Sat 01 Jan 2022 13:58:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203613
IP address blocks:        193.192.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722575339 (0x2b119feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 13:58:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=965cc96aaf3bc1d3ec9b4784771a2ff57ba72adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:14:c5:94:d4:7e:25:56:2d:15:d9:e2:55:
                    0d:9a:f3:cb:04:1c:25:43:71:a9:a4:3b:79:24:c7:
                    9c:3d:39:1f:a3:67:53:cf:b4:05:cf:31:92:44:3b:
                    14:0d:12:f4:c2:56:0f:cb:e5:26:e1:32:2f:d7:1a:
                    bd:ac:fc:3b:53:80:b9:b0:c8:27:d7:50:8a:80:64:
                    30:33:c9:5b:a5:ef:01:2f:be:53:4c:ae:23:2c:05:
                    d3:fe:72:bf:5b:57:6d:c8:5b:76:80:44:91:f3:66:
                    3d:83:d7:a0:24:f3:2c:fc:d3:f6:37:1a:72:f3:50:
                    97:da:b5:3c:32:f4:08:b6:af:f7:a6:45:7a:8e:a4:
                    42:2e:b8:c9:fd:44:17:d4:a9:2b:00:65:be:52:42:
                    96:01:b3:d4:a2:ff:c5:7e:2e:fd:7f:41:7d:46:7d:
                    9a:8f:3f:53:8d:d0:cb:28:c4:54:c1:7b:ca:4f:87:
                    a7:7f:30:f2:49:e0:42:9f:56:1c:ba:48:cd:65:f1:
                    09:3c:0d:1b:e9:b6:a8:9c:08:91:8b:c3:bc:74:75:
                    5e:fb:b0:86:9d:9d:ae:7b:dc:31:18:9a:47:58:a8:
                    a4:3c:1c:95:20:85:58:a6:32:08:b5:8e:c7:ab:9e:
                    1f:f1:04:1e:e5:f5:52:eb:08:4a:5e:aa:12:f1:48:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5C:C9:6A:AF:3B:C1:D3:EC:9B:47:84:77:1A:2F:F5:7B:A7:2A:DC
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/llzJaq87wdPsm0eEdxov9XunKtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:ec:95:00:b6:d7:34:0b:da:49:9b:51:a2:1a:1b:b4:57:
         80:40:c8:2f:93:2a:3e:af:a6:3e:fa:29:0f:f2:b8:23:2c:12:
         50:09:e1:68:83:ec:9e:06:47:29:19:bd:5a:55:32:15:b7:c0:
         d1:31:02:68:66:4f:4c:d1:57:7e:57:53:7f:14:f4:73:c5:cc:
         b0:bb:71:90:8e:bf:75:e3:69:f7:ed:4b:e8:c2:0b:74:05:ca:
         1b:a9:7c:8b:df:f5:15:49:38:1c:4d:10:7e:a4:08:ab:2e:df:
         82:51:73:77:95:4b:60:27:e1:33:cd:be:10:28:ab:95:a8:f9:
         59:4b:3b:b6:46:b5:66:55:46:ef:a1:b2:35:a0:25:9d:6d:51:
         9a:12:61:96:8d:95:33:84:ba:23:4b:83:d0:86:c4:95:6e:40:
         05:59:70:d6:26:c2:29:ef:d1:8c:fc:7b:df:32:0e:41:16:02:
         93:69:96:43:36:83:ca:da:77:98:33:23:94:e4:24:46:6b:9c:
         b8:f0:aa:d4:46:f2:80:0d:d5:6e:d8:90:a5:99:28:dd:a2:42:
         66:e5:16:c8:f6:e8:8f:fe:c3:22:31:73:c5:8c:36:7f:50:aa:
         02:bf:d2:88:90:56:42:17:38:db:a3:e4:c4:8f:e5:42:a4:3e:
         27:34:ce:d4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKxGf6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTgwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTY1Y2M5NmFhZjNi
YzFkM2VjOWI0Nzg0NzcxYTJmZjU3YmE3MmFkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJo9FMWU1H4lVi0V2eJVDZrzywQcJUNxqaQ7eSTHnD05H6Nn
U8+0Bc8xkkQ7FA0S9MJWD8vlJuEyL9cavaz8O1OAubDIJ9dQioBkMDPJW6XvAS++
U0yuIywF0/5yv1tXbchbdoBEkfNmPYPXoCTzLPzT9jcacvNQl9q1PDL0CLav96ZF
eo6kQi64yf1EF9SpKwBlvlJClgGz1KL/xX4u/X9BfUZ9mo8/U43QyyjEVMF7yk+H
p38w8kngQp9WHLpIzWXxCTwNG+m2qJwIkYvDvHR1Xvuwhp2drnvcMRiaR1iopDwc
lSCFWKYyCLWOx6ueH/EEHuX1UusISl6qEvFIKssCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSWXMlqrzvB0+ybR4R3Gi/1e6cq3DAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L2xsekphcTg3d2RQc20wZUVkeG92OVh1bkt0dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHAuTANBgkqhkiG9w0BAQsFAAOC
AQEAg+fslQC21zQL2kmbUaIaG7RXgEDIL5MqPq+mPvopD/K4IywSUAnhaIPsngZH
KRm9WlUyFbfA0TECaGZPTNFXfldTfxT0c8XMsLtxkI6/deNp9+1L6MILdAXKG6l8
i9/1FUk4HE0QfqQIqy7fglFzd5VLYCfhM82+ECirlaj5WUs7tka1ZlVG76GyNaAl
nW1RmhJhlo2VM4S6I0uD0IbElW5ABVlw1ibCKe/RjPx73zIOQRYCk2mWQzaDytp3
mDMjlOQkRmucuPCq1EbygA3VbtiQpZko3aJCZuUWyPboj/7DIjFzxYw2f1CqAr/S
iJBWQhc426PkxI/lQqQ+JzTO1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org