Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/B1rCjDM7ITKxf69qnuN4QkNKzbg.roa
File:                     B1rCjDM7ITKxf69qnuN4QkNKzbg.roa (raw, json)
Hash identifier:          HVz2VgGbAo6O5jhqsUb9xE5EDvHpkKsFx1wLoAhV5SY=
Subject key identifier:   07:5A:C2:8C:33:3B:21:32:B1:7F:AF:6A:9E:E3:78:42:43:4A:CD:B8
Certificate issuer:       /CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
Certificate serial:       EDF739
Authority key identifier: 7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/B1rCjDM7ITKxf69qnuN4QkNKzbg.roa
Signing time:             Sat 01 Jan 2022 05:56:51 +0000
ROA not before:           Sat 01 Jan 2022 05:56:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        188.93.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15595321 (0xedf739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
        Validity
            Not Before: Jan  1 05:56:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=075ac28c333b2132b17faf6a9ee37842434acdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:0f:e7:6d:ff:29:30:aa:30:a0:d5:5a:bf:
                    ca:4c:15:fb:77:de:f3:c6:26:f0:e7:ad:f4:16:2f:
                    8b:99:0d:a0:96:98:3b:1c:b0:3a:8d:be:12:2d:77:
                    e0:2d:df:fa:ba:12:8b:17:86:25:4e:c4:33:98:16:
                    89:e0:66:e5:43:b4:88:27:20:86:66:d1:e2:0e:0b:
                    c5:70:12:8f:1c:ea:c8:91:50:d9:03:63:7c:c7:ec:
                    08:ae:89:11:e8:71:c8:f7:ac:56:52:c9:67:cf:05:
                    5e:98:41:f1:49:55:5b:89:1a:98:05:bd:52:c4:e5:
                    fe:96:f1:3e:bd:12:b8:d6:c8:c9:d0:39:a1:2c:13:
                    ef:5a:f9:50:cc:24:d9:b8:c8:1a:3a:c4:88:4d:9c:
                    9c:e0:1b:4e:7e:36:b1:e7:c8:54:e3:ce:01:f8:e6:
                    f6:e2:f7:07:37:f0:f2:1d:36:3a:04:f6:67:0b:47:
                    3c:2d:46:8d:13:52:fd:f5:20:5d:1c:25:88:04:91:
                    25:e5:1e:67:a2:95:23:be:b2:13:64:3f:71:69:cd:
                    3e:a9:0d:06:80:1b:81:0c:03:e7:e4:3f:7c:6c:5e:
                    cd:ae:d5:6e:96:16:90:45:0d:16:6d:de:43:0a:33:
                    e6:85:b9:cb:53:b1:f0:35:3e:46:fd:f9:4d:92:22:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5A:C2:8C:33:3B:21:32:B1:7F:AF:6A:9E:E3:78:42:43:4A:CD:B8
            X509v3 Authority Key Identifier:
                keyid:7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/B1rCjDM7ITKxf69qnuN4QkNKzbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:09:2a:e6:6e:9c:8e:0c:d0:9c:95:5f:bc:90:77:f2:7a:7c:
         cd:85:2b:85:cb:43:f4:56:f2:bc:c0:65:8b:41:83:01:97:54:
         84:ce:50:39:36:ee:72:06:8a:06:f2:47:e2:b5:04:7f:01:74:
         a9:79:91:af:99:46:68:89:53:19:03:9b:27:30:0a:16:ab:ec:
         20:44:00:56:c6:d1:6a:76:0d:86:65:c1:3d:8c:b3:44:a6:36:
         67:ba:2f:4e:0b:e6:a5:b1:77:0f:48:2b:1f:45:b5:1a:af:0a:
         60:41:41:69:ba:61:71:b1:7c:cf:7f:0c:f5:1b:50:de:0c:1e:
         67:bf:a2:1a:05:34:7c:40:93:16:8d:28:dc:d2:93:bb:52:72:
         cf:c3:76:57:27:b4:ff:03:34:04:2b:45:fa:5a:b3:cf:f9:25:
         62:b5:e7:74:f3:9c:69:ff:37:72:fc:7c:bb:9b:5e:07:bb:23:
         63:3e:4b:25:64:7f:60:4f:ce:33:19:92:1b:2a:0c:c9:43:34:
         64:f5:be:d5:f6:21:b3:2f:c8:d6:e7:0c:ad:e8:2d:6d:83:d6:
         93:57:23:fb:f4:3f:70:51:0c:98:8a:a8:25:d6:16:ae:24:39:
         a4:a1:6b:2e:2f:0d:7a:3a:29:b1:b6:8d:a1:c0:df:72:ce:94:
         f0:72:4f:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAO33OTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZTBjY2VmNmJjMGU3YWFjZGRkMjBkYWY1OGE2MDA4ZTRhODAzNWE4MB4XDTIyMDEw
MTA1NTY1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDc1YWMyOGMzMzNi
MjEzMmIxN2ZhZjZhOWVlMzc4NDI0MzRhY2RiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXtD+dt/ykwqjCg1Vq/ykwV+3fe88Ym8Oet9BYvi5kNoJaY
OxywOo2+Ei134C3f+roSixeGJU7EM5gWieBm5UO0iCcghmbR4g4LxXASjxzqyJFQ
2QNjfMfsCK6JEehxyPesVlLJZ88FXphB8UlVW4kamAW9UsTl/pbxPr0SuNbIydA5
oSwT71r5UMwk2bjIGjrEiE2cnOAbTn42sefIVOPOAfjm9uL3Bzfw8h02OgT2ZwtH
PC1GjRNS/fUgXRwliASRJeUeZ6KVI76yE2Q/cWnNPqkNBoAbgQwD5+Q/fGxeza7V
bpYWkEUNFm3eQwoz5oW5y1Ox8DU+Rv35TZIilacCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQHWsKMMzshMrF/r2qe43hCQ0rNuDAfBgNVHSMEGDAWgBR+DM72vA56rN3S
Da9YpgCOSoA1qDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Znek85cndPZXF6ZDBnMnZXS1lBamtxQU5hZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMzlkODE4LTBhZTAtNGE0MS1iYzEwLWNjYTcwYjJhN2QzNC8x
L0IxckNqRE03SVRLeGY2OXFudU40UWtOS3piZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MzlkODE4LTBhZTAtNGE0MS1iYzEwLWNjYTcwYjJhN2QzNC8xL2Znek85cndPZXF6
ZDBnMnZXS1lBamtxQU5hZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALxddzANBgkqhkiG9w0BAQsFAAOC
AQEAQgkq5m6cjgzQnJVfvJB38np8zYUrhctD9FbyvMBli0GDAZdUhM5QOTbucgaK
BvJH4rUEfwF0qXmRr5lGaIlTGQObJzAKFqvsIEQAVsbRanYNhmXBPYyzRKY2Z7ov
TgvmpbF3D0grH0W1Gq8KYEFBabphcbF8z38M9RtQ3gweZ7+iGgU0fECTFo0o3NKT
u1Jyz8N2Vye0/wM0BCtF+lqzz/klYrXndPOcaf83cvx8u5teB7sjYz5LJWR/YE/O
MxmSGyoMyUM0ZPW+1fYhsy/I1ucMregtbYPWk1cj+/Q/cFEMmIqoJdYWriQ5pKFr
Li8NejopsbaNocDfcs6U8HJPHA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org