Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_ZGVG2uni4kfhJQVvhLCTYOuxyU.roa
File:                     _ZGVG2uni4kfhJQVvhLCTYOuxyU.roa (raw, json)
Hash identifier:          SMy12j4rPHtE6vHiiDqUsyx9jAyaP6vwRcoQV2rMgO4=
Subject key identifier:   FD:91:95:1B:6B:A7:8B:89:1F:84:94:15:BE:12:C2:4D:83:AE:C7:25
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       0AC5CFB3
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_ZGVG2uni4kfhJQVvhLCTYOuxyU.roa
Signing time:             Sat 01 Jan 2022 14:55:41 +0000
ROA not before:           Sat 01 Jan 2022 14:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        109.71.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180735923 (0xac5cfb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Jan  1 14:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd91951b6ba78b891f849415be12c24d83aec725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:1b:65:36:1f:56:41:ef:3b:a6:35:b3:de:
                    05:e1:ee:74:4e:e8:94:a1:ea:08:4b:97:1c:f6:35:
                    ee:5b:af:4e:ed:3b:5a:8b:6d:48:37:9a:18:53:91:
                    3e:82:dd:85:44:8e:16:17:f7:19:58:bb:1c:88:51:
                    1a:e8:d1:a4:c6:bd:a7:b5:75:06:96:9b:df:58:59:
                    34:72:eb:ac:d8:14:1c:4d:b9:fc:6e:b6:6e:27:68:
                    ec:d2:ea:23:d8:29:6e:69:35:9d:ec:a6:2e:58:d4:
                    5c:e7:4e:c0:24:f5:2e:b6:83:d6:63:19:a6:66:fa:
                    44:4e:80:36:8a:18:bb:7c:7c:36:20:2f:02:4e:c4:
                    67:50:c2:15:3a:a0:86:50:92:d0:9e:17:3a:e4:ac:
                    2e:86:08:f4:78:61:fc:c4:ec:1a:ce:94:da:a3:97:
                    e8:65:13:af:4f:0d:72:6c:9f:5c:84:de:0f:79:3d:
                    d8:9c:94:e6:19:76:25:5e:11:2a:52:3e:bc:dc:dc:
                    ba:67:4d:89:cb:ab:09:a6:3f:5e:5b:e8:55:4f:35:
                    06:fc:19:f1:b9:55:bd:dc:55:1e:42:e6:22:79:8b:
                    64:88:2f:4e:64:38:ad:da:e9:c9:c8:92:c5:f6:db:
                    4e:3e:f9:fb:29:98:1b:6c:c7:69:56:37:fb:d7:77:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:91:95:1B:6B:A7:8B:89:1F:84:94:15:BE:12:C2:4D:83:AE:C7:25
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_ZGVG2uni4kfhJQVvhLCTYOuxyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.71.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:ba:3f:a6:18:65:3d:a5:5d:81:dc:2c:32:b1:01:77:8f:
         aa:80:4e:56:e8:75:9d:1d:0d:10:73:76:af:94:16:91:a1:15:
         dc:34:22:00:bc:f6:5e:7e:ae:50:24:d2:80:e5:f6:ab:8b:bf:
         44:c8:c8:b7:2f:f9:18:48:4e:d8:a0:54:44:5f:ca:4f:86:ea:
         16:a6:20:ee:02:95:e1:b9:be:db:76:1c:d3:82:c3:8c:c6:6c:
         32:4a:16:1c:c1:46:0b:51:00:f8:1a:82:26:42:82:ef:ce:8e:
         86:a4:e5:0a:c5:7a:61:88:1f:4c:f3:c1:c9:9c:3d:f6:5c:52:
         01:55:2d:7f:95:1e:b0:fb:5b:87:50:57:6f:78:b5:3e:69:5e:
         94:72:c9:46:f0:d5:87:7f:88:47:93:a4:6d:71:c9:54:8b:18:
         82:30:6b:6a:1a:3b:66:a6:a1:c5:4b:06:b5:30:65:55:0b:26:
         b7:d0:f2:93:4b:01:58:c7:b8:15:91:01:11:9e:bc:df:f7:22:
         2a:96:d7:d4:23:f3:51:5d:a8:aa:43:36:b9:f6:8c:0b:42:75:
         30:b1:b1:d1:6a:4a:eb:24:c5:69:76:cb:03:15:06:af:87:62:
         15:56:97:6b:2b:33:37:2d:e3:34:bb:d7:f6:f0:38:ce:a4:8d:
         3c:e6:30:22
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECsXPszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZDZkYTgyZGJjN2Q3ZTI4MThmOTY2ODBiNjZlZmNlZGIxMDg3OTQ3MB4XDTIyMDEw
MTE0NTU0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmQ5MTk1MWI2YmE3
OGI4OTFmODQ5NDE1YmUxMmMyNGQ4M2FlYzcyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANnkG2U2H1ZB7zumNbPeBeHudE7olKHqCEuXHPY17luvTu07
WottSDeaGFORPoLdhUSOFhf3GVi7HIhRGujRpMa9p7V1Bpab31hZNHLrrNgUHE25
/G62bido7NLqI9gpbmk1neymLljUXOdOwCT1LraD1mMZpmb6RE6ANooYu3x8NiAv
Ak7EZ1DCFTqghlCS0J4XOuSsLoYI9Hhh/MTsGs6U2qOX6GUTr08NcmyfXITeD3k9
2JyU5hl2JV4RKlI+vNzcumdNicurCaY/XlvoVU81BvwZ8blVvdxVHkLmInmLZIgv
TmQ4rdrpyciSxfbbTj75+ymYG2zHaVY3+9d34kECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT9kZUba6eLiR+ElBW+EsJNg67HJTAfBgNVHSMEGDAWgBTtbagtvH1+KBj5
ZoC2bvztsQh5RzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdXMm9MYng5ZmlnWS1XYUF0bTc4N2JFSWVVYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvMzU0OWZiLWUzYTMtNDEyNC1iM2IwLTU5OTU3Nzg3YjAxNS8x
L19aR1ZHMnVuaTRrZmhKUVZ2aExDVFlPdXh5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
MzU0OWZiLWUzYTMtNDEyNC1iM2IwLTU5OTU3Nzg3YjAxNS8xLzdXMm9MYng5Zmln
WS1XYUF0bTc4N2JFSWVVYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1HGDANBgkqhkiG9w0BAQsFAAOC
AQEAP0i6P6YYZT2lXYHcLDKxAXePqoBOVuh1nR0NEHN2r5QWkaEV3DQiALz2Xn6u
UCTSgOX2q4u/RMjIty/5GEhO2KBURF/KT4bqFqYg7gKV4bm+23Yc04LDjMZsMkoW
HMFGC1EA+BqCJkKC786OhqTlCsV6YYgfTPPByZw99lxSAVUtf5UesPtbh1BXb3i1
PmlelHLJRvDVh3+IR5OkbXHJVIsYgjBraho7ZqahxUsGtTBlVQsmt9Dyk0sBWMe4
FZEBEZ683/ciKpbX1CPzUV2oqkM2ufaMC0J1MLGx0WpK6yTFaXbLAxUGr4diFVaX
ayszNy3jNLvX9vA4zqSNPOYwIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:51 2024 by rpki-client on console-ams.rpki-client.org