Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/WY5dqQ58-weudLEaI5khg_z94YM.roa
File:                     WY5dqQ58-weudLEaI5khg_z94YM.roa (raw, json)
Hash identifier:          +/rgOizG39J99Oz7coUPX7ivL1WkkXmlHK28d9H+JFQ=
Subject key identifier:   59:8E:5D:A9:0E:7C:FB:07:AE:74:B1:1A:23:99:21:83:FC:FD:E1:83
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       0ACDEF39
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/WY5dqQ58-weudLEaI5khg_z94YM.roa
Signing time:             Sat 01 Jan 2022 03:02:38 +0000
ROA not before:           Sat 01 Jan 2022 03:02:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211863
IP address blocks:        93.190.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181268281 (0xacdef39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 03:02:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=598e5da90e7cfb07ae74b11a23992183fcfde183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:c9:a5:c5:4c:ff:57:19:f2:ad:c3:98:e7:
                    fa:e0:d9:30:6b:c8:ce:44:34:67:fc:92:0b:b5:22:
                    3b:fb:7c:41:77:4b:8b:87:52:a0:53:d7:33:14:02:
                    d8:6b:e1:9c:e3:aa:da:84:cc:c2:d0:40:dc:f3:62:
                    b8:96:c8:3b:fb:52:f4:a4:41:f2:dd:f4:2c:bf:42:
                    b8:58:85:69:45:54:cc:f6:f7:4c:54:5d:02:cb:28:
                    7b:66:ab:0d:80:31:20:9a:fc:1e:10:22:ea:91:ea:
                    85:c3:88:57:e9:af:af:9b:0c:87:b2:c7:98:aa:33:
                    49:15:16:96:d3:f9:8d:a8:c6:1c:ff:7c:b0:9b:a9:
                    06:16:4f:a6:8b:47:13:29:d9:68:3d:5b:50:84:1b:
                    b4:85:9b:2b:de:b4:ad:fe:33:e3:6f:b4:3f:65:5f:
                    7f:af:c6:fa:04:db:72:16:46:7f:48:e9:86:71:af:
                    13:77:e5:1f:d4:de:0d:e8:80:90:25:4e:fc:c1:03:
                    01:f9:24:be:86:74:46:ac:bf:b7:94:f4:3b:50:b0:
                    c7:84:ba:f8:99:d9:21:4a:63:5c:00:b9:9b:a7:40:
                    bc:b3:11:61:c6:e6:fc:89:c6:ee:dd:14:5e:fa:8a:
                    3a:21:ea:c4:ad:f8:7e:31:04:55:9b:a0:42:55:f1:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:5D:A9:0E:7C:FB:07:AE:74:B1:1A:23:99:21:83:FC:FD:E1:83
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/WY5dqQ58-weudLEaI5khg_z94YM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:e2:df:b5:85:22:68:7c:fb:5b:8c:49:e9:f4:40:2e:49:0e:
         97:92:e8:b3:00:7e:6e:39:da:e0:75:9a:79:0f:23:2f:06:fe:
         f8:d7:d9:3d:1b:f5:bd:21:19:cd:f3:60:e5:ee:a7:b8:d9:18:
         e5:2a:18:4c:6f:ab:4c:29:34:68:ea:74:05:46:07:de:79:53:
         2e:dc:de:ae:5b:63:f5:1c:68:bf:cf:14:ea:43:c7:3d:0a:a8:
         32:f1:4b:f0:eb:38:cf:cc:06:46:99:cb:a7:63:27:e3:dd:87:
         e9:8c:ae:37:37:23:13:10:03:6f:35:20:a5:cb:a2:29:d9:f5:
         98:e3:a5:8f:1d:3e:36:95:11:b5:6b:4c:9b:69:cd:3a:fc:4b:
         00:2f:a0:dc:54:f4:12:b8:b7:04:97:a3:74:eb:56:77:3a:21:
         2a:dc:39:c6:19:78:83:06:b4:c5:c1:ad:41:48:b2:52:0e:51:
         8c:3b:32:09:01:6f:06:7c:c8:76:71:0b:c9:8d:41:6d:d0:90:
         d6:3f:21:8e:54:1e:c9:21:13:6d:d5:16:1c:7e:bc:6c:37:d1:
         62:09:ac:26:5e:25:33:d4:29:70:7b:73:36:fa:7a:b4:8c:2f:
         16:dd:e8:09:d0:f9:4c:3c:25:92:2a:fc:e6:10:4e:da:33:d9:
         e5:d8:e4:b0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECs3vOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjE2YzQxOTUxNTJlZmZlZGJmN2IzYWZlZTJhYTcyZTE5MDkwZTRkMB4XDTIyMDEw
MTAzMDIzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTk4ZTVkYTkwZTdj
ZmIwN2FlNzRiMTFhMjM5OTIxODNmY2ZkZTE4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJDcyaXFTP9XGfKtw5jn+uDZMGvIzkQ0Z/ySC7UiO/t8QXdL
i4dSoFPXMxQC2GvhnOOq2oTMwtBA3PNiuJbIO/tS9KRB8t30LL9CuFiFaUVUzPb3
TFRdAssoe2arDYAxIJr8HhAi6pHqhcOIV+mvr5sMh7LHmKozSRUWltP5jajGHP98
sJupBhZPpotHEynZaD1bUIQbtIWbK960rf4z42+0P2Vff6/G+gTbchZGf0jphnGv
E3flH9TeDeiAkCVO/MEDAfkkvoZ0Rqy/t5T0O1Cwx4S6+JnZIUpjXAC5m6dAvLMR
Ycbm/InG7t0UXvqKOiHqxK34fjEEVZugQlXxFmcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRZjl2pDnz7B650sRojmSGD/P3hgzAfBgNVHSMEGDAWgBTGFsQZUVLv/tv3
s6/uKqcuGQkOTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hoYkVHVkZTN183Yjk3T3Y3aXFuTGhrSkRrMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvYWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8x
L1dZNWRxUTU4LXdldWRMRWFJNWtoZ196OTRZTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
YWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8xL3hoYkVHVkZTN183
Yjk3T3Y3aXFuTGhrSkRrMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2+DjANBgkqhkiG9w0BAQsFAAOC
AQEAl+LftYUiaHz7W4xJ6fRALkkOl5LoswB+bjna4HWaeQ8jLwb++NfZPRv1vSEZ
zfNg5e6nuNkY5SoYTG+rTCk0aOp0BUYH3nlTLtzerltj9Rxov88U6kPHPQqoMvFL
8Os4z8wGRpnLp2Mn492H6YyuNzcjExADbzUgpcuiKdn1mOOljx0+NpURtWtMm2nN
OvxLAC+g3FT0Eri3BJejdOtWdzohKtw5xhl4gwa0xcGtQUiyUg5RjDsyCQFvBnzI
dnELyY1BbdCQ1j8hjlQeySETbdUWHH68bDfRYgmsJl4lM9QpcHtzNvp6tIwvFt3o
CdD5TDwlkir85hBO2jPZ5djksA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org