Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S-lcwwwpR2L6y9E5dnOyb-ZA0_U.roa
File:                     S-lcwwwpR2L6y9E5dnOyb-ZA0_U.roa (raw, json)
Hash identifier:          3PI6fgJ6uPpiXNk9uq/wgzzFFHDdv8pBW+5byFUONRM=
Subject key identifier:   4B:E9:5C:C3:0C:29:47:62:FA:CB:D1:39:76:73:B2:6F:E6:40:D3:F5
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       0184F702B6BB039657A53922635B82FA63FD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S-lcwwwpR2L6y9E5dnOyb-ZA0_U.roa
Signing time:             Fri 09 Dec 2022 13:11:00 +0000
ROA not before:           Fri 09 Dec 2022 13:11:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200673
IP address blocks:        78.135.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f7:02:b6:bb:03:96:57:a5:39:22:63:5b:82:fa:63:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Dec  9 13:11:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4be95cc30c294762facbd1397673b26fe640d3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:1b:ac:df:7e:c4:60:a3:6b:ac:a1:00:7c:
                    46:35:2d:91:22:b2:2d:e1:61:98:b7:a6:45:62:f6:
                    08:05:1e:ed:de:7f:8f:fa:29:a5:12:ad:38:67:c7:
                    68:2e:76:a3:89:38:5b:a9:c1:4d:7a:47:2c:ab:c0:
                    6a:b5:60:5b:ef:f3:21:9a:d7:a7:a7:37:de:e3:52:
                    e5:30:30:35:ed:23:9b:08:b7:91:59:4a:cd:25:fe:
                    4d:95:fe:27:bc:9f:77:f5:d3:bf:c6:60:b0:42:ce:
                    c0:f4:84:83:f7:6b:d5:17:39:eb:fb:74:66:7a:1e:
                    be:85:5e:84:2c:a1:da:2b:3f:59:88:75:be:15:a7:
                    f8:17:b3:60:d0:73:c2:ff:88:39:17:9b:86:02:76:
                    6f:8c:41:14:05:34:09:19:d7:88:28:91:a7:96:bc:
                    e9:9f:b2:84:f8:f4:9a:f2:8f:c0:09:4e:bd:4f:22:
                    f1:4f:27:05:95:73:31:1d:e4:95:ca:00:9b:e4:e4:
                    d1:e4:4f:2d:18:6b:d8:c4:39:dc:06:a2:75:78:80:
                    d2:c9:fb:9e:48:18:e7:84:79:ee:e6:11:00:fd:f8:
                    6d:a9:dc:f8:67:8b:03:22:ce:d6:17:76:ff:92:b3:
                    6b:72:da:22:5a:81:00:15:70:51:95:70:58:20:4b:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E9:5C:C3:0C:29:47:62:FA:CB:D1:39:76:73:B2:6F:E6:40:D3:F5
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S-lcwwwpR2L6y9E5dnOyb-ZA0_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.135.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:64:df:f3:e5:28:65:37:34:f5:5e:8b:28:99:85:5c:c8:db:
         ae:07:a8:b1:0e:50:28:e4:b5:e6:e1:60:4a:96:54:d8:89:4f:
         55:20:ab:6c:a9:a4:cb:24:df:5b:c1:94:50:74:e2:c9:8b:7e:
         a5:d4:78:66:6b:80:a4:ed:e7:d0:ad:47:a0:ff:43:9b:cb:43:
         29:d7:1e:d7:cd:2f:69:f6:16:65:28:f2:89:b5:ff:4a:cc:7b:
         02:64:10:21:28:36:a3:88:e3:8e:88:97:0c:ef:66:f9:c4:93:
         8a:e1:f6:64:45:5e:82:b2:38:a7:4e:06:86:03:84:95:4b:64:
         44:be:d9:db:31:d0:f2:05:81:a8:a2:85:57:55:8a:e6:01:ae:
         ad:e7:5d:f7:c6:e5:19:79:ab:53:ce:dc:16:c9:fb:df:5e:b9:
         f0:f3:7b:05:a7:f5:41:63:9e:80:50:61:d2:d3:0d:74:54:05:
         73:72:33:16:9c:15:8f:27:9e:23:60:26:a3:17:f5:22:5d:1c:
         77:38:86:97:98:cc:65:e9:70:ce:88:f7:d5:0d:7d:ef:05:27:
         05:fc:d8:ca:3f:c1:74:44:49:ba:f2:90:85:0d:54:11:05:36:
         a8:94:79:9b:07:ab:fb:63:45:c1:d5:90:ed:9a:6e:b5:5f:9c:
         24:98:4f:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYT3Ara7A5ZXpTkiY1uC+mP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjIxMjA5MTMxMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmU5NWNjMzBjMjk0NzYyZmFjYmQxMzk3NjczYjI2ZmU2NDBkM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoEbrN9+xGCja6yhAHxGNS2RIrIt
4WGYt6ZFYvYIBR7t3n+P+imlEq04Z8doLnajiThbqcFNekcsq8BqtWBb7/Mhmten
pzfe41LlMDA17SObCLeRWUrNJf5Nlf4nvJ939dO/xmCwQs7A9ISD92vVFznr+3Rm
eh6+hV6ELKHaKz9ZiHW+Faf4F7Ng0HPC/4g5F5uGAnZvjEEUBTQJGdeIKJGnlrzp
n7KE+PSa8o/ACU69TyLxTycFlXMxHeSVygCb5OTR5E8tGGvYxDncBqJ1eIDSyfue
SBjnhHnu5hEA/fhtqdz4Z4sDIs7WF3b/krNrctoiWoEAFXBRlXBYIEu/iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEvpXMMMKUdi+svROXZzsm/mQNP1MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvUy1sY3d3d3BSMkw2eTlFNWRuT3liLVpBMF9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodAMA0G
CSqGSIb3DQEBCwUAA4IBAQCYZN/z5ShlNzT1XosomYVcyNuuB6ixDlAo5LXm4WBK
llTYiU9VIKtsqaTLJN9bwZRQdOLJi36l1Hhma4Ck7efQrUeg/0Oby0Mp1x7XzS9p
9hZlKPKJtf9KzHsCZBAhKDajiOOOiJcM72b5xJOK4fZkRV6CsjinTgaGA4SVS2RE
vtnbMdDyBYGoooVXVYrmAa6t5133xuUZeatTztwWyfvfXrnw83sFp/VBY56AUGHS
0w10VAVzcjMWnBWPJ54jYCajF/UiXRx3OIaXmMxl6XDOiPfVDX3vBScF/NjKP8F0
REm68pCFDVQRBTaolHmbB6v7Y0XB1ZDtmm61X5wkmE9J
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org