Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/JGc8yV00lTZA1hf1RQVmi0vhv2I.roa
File:                     JGc8yV00lTZA1hf1RQVmi0vhv2I.roa (raw, json)
Hash identifier:          4Ekj3Wqp4D2FJPR/INww4Cgb0Os2yzLmTFj6OAZHwCM=
Subject key identifier:   24:67:3C:C9:5D:34:95:36:40:D6:17:F5:45:05:66:8B:4B:E1:BF:62
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       05AEF3D5
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/JGc8yV00lTZA1hf1RQVmi0vhv2I.roa
Signing time:             Sat 01 Jan 2022 07:57:12 +0000
ROA not before:           Sat 01 Jan 2022 07:57:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49981
IP address blocks:        91.226.31.0/24 maxlen: 24
                          2a06:d641::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95351765 (0x5aef3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Jan  1 07:57:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24673cc95d34953640d617f54505668b4be1bf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:00:a8:48:0e:23:01:e7:1f:ee:89:5f:66:
                    fb:61:5a:5b:73:13:50:0b:08:ad:d2:58:5a:85:9e:
                    06:d8:50:a6:0d:e8:0f:99:7f:ae:3d:8f:91:9a:24:
                    6d:2c:da:58:9e:17:6f:48:3d:6f:0a:d7:e9:30:96:
                    65:ca:48:fa:83:aa:69:d3:11:3d:44:8f:f3:59:bb:
                    ee:4e:ea:4f:49:dd:c6:7b:e4:c2:ad:b7:89:10:20:
                    ff:3a:8c:6b:c4:0a:54:41:37:c4:87:f4:03:d7:88:
                    7e:7a:04:4d:59:85:ca:b5:4c:dd:5e:4d:bb:c9:31:
                    b9:47:c1:67:ac:3f:f7:78:db:cc:4e:6d:7b:94:00:
                    7d:49:83:53:a3:ba:68:7e:56:8b:7c:8c:d3:c3:23:
                    30:37:4a:6c:c9:3f:b2:ed:1d:9f:a3:15:d2:fd:5f:
                    1b:e1:31:b7:95:4c:28:6e:04:42:b1:24:ec:97:78:
                    67:47:ee:91:24:2e:a3:24:94:df:06:85:98:49:6c:
                    e7:ad:01:be:11:a5:bb:a3:14:40:6b:9b:01:bf:2a:
                    b7:15:4b:0d:8a:43:0c:85:da:14:7f:85:eb:17:d9:
                    7c:58:78:77:48:24:92:27:c1:24:d4:fe:a0:69:6c:
                    c3:31:1e:f8:b2:38:61:4c:49:bb:fa:bb:b4:96:30:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:67:3C:C9:5D:34:95:36:40:D6:17:F5:45:05:66:8B:4B:E1:BF:62
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/JGc8yV00lTZA1hf1RQVmi0vhv2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.31.0/24
                IPv6:
                  2a06:d641::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:f9:8f:2b:86:18:02:2a:67:3f:23:37:aa:ec:65:c6:3c:
         e7:b1:ca:da:56:be:3e:2e:f9:ff:6d:e8:ec:a7:90:ef:87:e3:
         e5:ef:94:9e:c0:4f:18:78:c2:40:ed:a8:c5:9b:36:cb:14:7c:
         ae:57:3e:5a:6b:b9:54:f8:18:df:8e:d1:04:63:48:ac:ab:37:
         bb:b8:48:3a:1f:3f:1c:42:ef:6e:3b:c5:c8:42:bf:24:47:82:
         0b:5d:b3:0f:6f:97:ad:0a:c9:04:28:6e:3f:59:00:ee:93:f4:
         fb:05:a0:3c:1a:30:69:ab:78:1a:a4:de:f1:1a:28:36:46:c5:
         4f:15:85:60:e3:1e:2d:f0:8a:79:88:15:45:c0:7f:12:46:c2:
         8f:dd:e7:5d:93:8d:1e:50:41:84:7c:81:09:45:49:2f:34:8f:
         18:31:52:c2:d6:cd:14:fe:2b:fd:67:1e:b4:01:47:6a:a8:7a:
         c8:69:ab:4d:0d:42:ed:bc:94:3a:1f:a2:5b:e5:29:d1:03:eb:
         bd:e3:a2:c8:9b:ae:e4:d3:ae:41:9c:9c:24:88:00:3f:46:04:
         2b:02:56:7e:92:b7:99:03:e9:f6:97:38:ea:f9:f1:39:23:15:
         a5:19:fe:b5:96:02:63:a7:8d:e2:96:9d:b5:ed:9c:62:6b:22:
         d1:be:50:72
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBa7z1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2Q3NjE1OWJmZDllMzM3NTIzZWU5MzBmM2RmMTExZDZiYWU3MzA2MB4XDTIyMDEw
MTA3NTcxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQ2NzNjYzk1ZDM0
OTUzNjQwZDYxN2Y1NDUwNTY2OGI0YmUxYmY2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKXAKhIDiMB5x/uiV9m+2FaW3MTUAsIrdJYWoWeBthQpg3o
D5l/rj2PkZokbSzaWJ4Xb0g9bwrX6TCWZcpI+oOqadMRPUSP81m77k7qT0ndxnvk
wq23iRAg/zqMa8QKVEE3xIf0A9eIfnoETVmFyrVM3V5Nu8kxuUfBZ6w/93jbzE5t
e5QAfUmDU6O6aH5Wi3yM08MjMDdKbMk/su0dn6MV0v1fG+Ext5VMKG4EQrEk7Jd4
Z0fukSQuoySU3waFmEls560BvhGlu6MUQGubAb8qtxVLDYpDDIXaFH+F6xfZfFh4
d0gkkifBJNT+oGlswzEe+LI4YUxJu/q7tJYw0e8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQkZzzJXTSVNkDWF/VFBWaLS+G/YjAfBgNVHSMEGDAWgBTM12FZv9njN1I+
6TDz3xEda65zBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pOZGhXYl9aNHpkU1B1a3c4OThSSFd1dWN3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8x
L0pHYzh5VjAwbFRaQTFoZjFSUVZtaTB2aHYySS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
ZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8xL3pOZGhXYl9aNHpk
U1B1a3c4OThSSFd1dWN3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAFviHzANBAIAAjAHAwUAKgbWQTAN
BgkqhkiG9w0BAQsFAAOCAQEApPL5jyuGGAIqZz8jN6rsZcY857HK2la+Pi75/23o
7KeQ74fj5e+UnsBPGHjCQO2oxZs2yxR8rlc+Wmu5VPgY347RBGNIrKs3u7hIOh8/
HELvbjvFyEK/JEeCC12zD2+XrQrJBChuP1kA7pP0+wWgPBowaat4GqTe8RooNkbF
TxWFYOMeLfCKeYgVRcB/EkbCj93nXZONHlBBhHyBCUVJLzSPGDFSwtbNFP4r/Wce
tAFHaqh6yGmrTQ1C7byUOh+iW+Up0QPrveOiyJuu5NOuQZycJIgAP0YEKwJWfpK3
mQPp9pc46vnxOSMVpRn+tZYCY6eN4padte2cYmsi0b5Qcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org