Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JoWRxf94Ng01HNqmplDS-Zwy_Pk.roa
File:                     JoWRxf94Ng01HNqmplDS-Zwy_Pk.roa (raw, json)
Hash identifier:          B8UMx5PGHIoDXdUuWAPay9N3f6HCbWuvVK5Xl8vSRUQ=
Subject key identifier:   26:85:91:C5:FF:78:36:0D:35:1C:DA:A6:A6:50:D2:F9:9C:32:FC:F9
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27FD8675
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JoWRxf94Ng01HNqmplDS-Zwy_Pk.roa
Signing time:             Sat 01 Jan 2022 16:09:19 +0000
ROA not before:           Sat 01 Jan 2022 16:09:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61276
IP address blocks:        93.171.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670926453 (0x27fd8675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=268591c5ff78360d351cdaa6a650d2f99c32fcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:2b:3d:5c:64:84:ab:00:dc:3e:00:71:e0:
                    f0:0f:7c:95:34:d9:c1:e2:3a:4b:97:e2:07:4e:17:
                    02:02:19:93:b3:a8:1f:38:a4:ac:20:fc:ab:5e:f0:
                    92:c0:f0:74:5f:5f:f0:82:11:41:f9:93:d7:a2:1a:
                    75:2d:6b:92:4f:0b:e1:84:fb:42:08:b3:db:e7:6c:
                    6b:19:48:3d:c6:cf:21:0a:ba:c6:d5:86:99:cf:75:
                    49:0a:38:b2:07:7b:35:ac:e9:3b:ce:27:b3:b6:6f:
                    9b:7e:89:38:a1:30:bc:b9:9c:e8:db:17:a1:ba:5f:
                    a5:7a:3a:dc:39:7f:81:a7:02:ee:52:b5:12:06:bb:
                    7e:1d:d3:3c:0d:7e:2e:5c:f3:09:b3:0f:07:49:4b:
                    53:91:a0:61:df:52:73:8b:51:4b:9b:a2:44:e3:4c:
                    4d:2f:0c:35:9d:be:5d:22:2a:69:d1:4b:03:6c:63:
                    9b:35:0b:3a:d8:5b:0d:12:72:73:d2:57:be:ec:7a:
                    ba:f5:52:27:6a:c5:7f:61:0f:e6:03:45:2f:fc:02:
                    6b:45:ab:ad:35:45:bb:0e:17:7d:7f:d8:bc:45:1f:
                    a0:f3:81:9a:b7:8c:b4:b5:e7:16:9c:b8:2a:c4:e1:
                    0a:18:54:b1:92:9f:74:e4:22:7c:08:75:9b:4f:9c:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:85:91:C5:FF:78:36:0D:35:1C:DA:A6:A6:50:D2:F9:9C:32:FC:F9
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JoWRxf94Ng01HNqmplDS-Zwy_Pk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:3b:36:c7:62:19:e1:48:70:02:a2:7c:d3:db:d0:bc:91:02:
         76:0b:a4:2b:6e:75:56:2b:80:41:a8:eb:88:50:a5:eb:9a:25:
         56:1b:92:b7:0a:af:96:9d:f6:ca:a4:8f:0b:52:43:42:1a:dc:
         7c:0f:cf:e9:2c:49:db:6b:1e:ef:e9:36:2c:46:11:5e:6c:ee:
         3e:40:a0:3b:1e:b3:51:46:69:68:a7:0c:34:23:d0:01:71:e4:
         e8:14:91:47:1d:c3:de:bf:9e:a4:64:3c:b1:a5:39:0e:64:08:
         92:c3:32:1a:d7:d2:12:0a:3a:9f:fe:7c:0e:fb:30:65:89:76:
         97:29:b3:02:32:dd:c3:97:09:e1:12:d8:10:80:c6:5c:fb:10:
         9a:36:a0:d9:30:33:de:a2:c3:c9:cb:85:2e:a5:19:1b:e3:e4:
         a4:41:69:61:f6:82:ad:f7:08:02:7b:84:69:cd:3e:47:78:2a:
         05:a5:4a:a6:97:5e:3d:d8:ff:e9:36:2e:d7:64:e0:46:51:e3:
         2a:46:f0:03:5b:a0:f3:a6:64:22:5e:46:1d:cc:89:f6:68:44:
         f6:e3:3a:00:b0:27:10:4d:96:6d:96:2f:0f:d5:79:03:6a:0f:
         19:a0:f8:ff:cb:32:b7:ef:c9:af:c4:5d:1d:c7:03:82:d4:46:
         06:82:fc:34
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ/2GdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjY4NTkxYzVmZjc4
MzYwZDM1MWNkYWE2YTY1MGQyZjk5YzMyZmNmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkbKz1cZISrANw+AHHg8A98lTTZweI6S5fiB04XAgIZk7Oo
HzikrCD8q17wksDwdF9f8IIRQfmT16IadS1rkk8L4YT7Qgiz2+dsaxlIPcbPIQq6
xtWGmc91SQo4sgd7NazpO84ns7Zvm36JOKEwvLmc6NsXobpfpXo63Dl/gacC7lK1
Ega7fh3TPA1+LlzzCbMPB0lLU5GgYd9Sc4tRS5uiRONMTS8MNZ2+XSIqadFLA2xj
mzULOthbDRJyc9JXvux6uvVSJ2rFf2EP5gNFL/wCa0WrrTVFuw4XfX/YvEUfoPOB
mreMtLXnFpy4KsThChhUsZKfdOQifAh1m0+ccqcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmhZHF/3g2DTUc2qamUNL5nDL8+TAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0pvV1J4Zjk0TmcwMUhOcW1wbERTLVp3eV9Qay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2rzjANBgkqhkiG9w0BAQsFAAOC
AQEADjs2x2IZ4UhwAqJ809vQvJECdgukK251ViuAQajriFCl65olVhuStwqvlp32
yqSPC1JDQhrcfA/P6SxJ22se7+k2LEYRXmzuPkCgOx6zUUZpaKcMNCPQAXHk6BSR
Rx3D3r+epGQ8saU5DmQIksMyGtfSEgo6n/58DvswZYl2lymzAjLdw5cJ4RLYEIDG
XPsQmjag2TAz3qLDycuFLqUZG+PkpEFpYfaCrfcIAnuEac0+R3gqBaVKppdePdj/
6TYu12TgRlHjKkbwA1ug86ZkIl5GHcyJ9mhE9uM6ALAnEE2WbZYvD9V5A2oPGaD4
/8syt+/Jr8RdHccDgtRGBoL8NA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:24 2023 by rpki-client on console-ams.rpki-client.org