Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ElyOYoZuaz1tOPUrN8Wv5AIlA6U.roa
File:                     ElyOYoZuaz1tOPUrN8Wv5AIlA6U.roa (raw, json)
Hash identifier:          jX9Hrk2fj2WPCvf9vVv7FT5KEKaQN6tkJBZ2ktOQJVk=
Subject key identifier:   12:5C:8E:62:86:6E:6B:3D:6D:38:F5:2B:37:C5:AF:E4:02:25:03:A5
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       0658A3CF
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ElyOYoZuaz1tOPUrN8Wv5AIlA6U.roa
Signing time:             Tue 19 Apr 2022 14:05:16 +0000
ROA not before:           Tue 19 Apr 2022 14:05:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59917
IP address blocks:        95.181.208.0/23 maxlen: 23
                          95.181.210.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106472399 (0x658a3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 19 14:05:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=125c8e62866e6b3d6d38f52b37c5afe4022503a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ff:96:74:23:bb:f8:81:9c:34:21:e6:ac:4e:
                    15:ee:0d:52:34:a8:90:a7:01:23:33:c7:22:16:33:
                    48:96:42:13:ec:a7:e9:fa:05:f1:50:9e:98:e5:74:
                    57:b9:a1:07:0b:ff:35:cd:76:7d:3a:f6:38:20:4e:
                    7f:06:5f:41:35:0f:7b:30:74:33:15:ee:cc:e0:3b:
                    a4:27:d8:ea:78:56:c5:d4:57:b1:29:1c:0a:b6:e6:
                    06:ec:1f:35:98:6a:df:12:b0:d6:5f:e8:9a:62:c6:
                    fa:18:9f:28:cb:55:b7:5d:b3:ff:ba:1b:53:cb:d3:
                    56:e7:34:8e:02:30:00:dd:a7:cc:e0:a4:0e:65:5b:
                    19:ce:ae:09:89:7b:92:bb:7e:7c:91:c4:4d:33:97:
                    76:81:0b:34:30:62:62:19:25:60:39:5b:4c:a7:35:
                    29:4e:6a:7d:fd:b8:64:ff:d1:8f:2b:1f:df:ca:ba:
                    30:b5:04:52:29:5a:31:19:e0:c8:20:9f:81:b1:8c:
                    44:02:67:3b:aa:63:e6:e0:35:01:ce:27:ab:9f:26:
                    22:96:b2:fa:4c:28:1c:a8:6b:eb:e6:f8:d0:d7:c8:
                    2d:76:33:b1:91:39:59:b4:b6:75:98:29:91:f0:b1:
                    c6:d9:87:dc:e0:59:b8:b1:03:e0:15:75:a7:79:33:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:8E:62:86:6E:6B:3D:6D:38:F5:2B:37:C5:AF:E4:02:25:03:A5
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ElyOYoZuaz1tOPUrN8Wv5AIlA6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.181.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:b2:be:a7:9f:8a:3b:3d:65:47:08:e9:3a:15:d2:9b:94:
         6f:c1:fb:37:a3:73:df:6d:a9:68:8f:e2:01:49:a9:11:03:c4:
         fe:d0:30:d5:4f:ae:66:d3:63:b1:b9:30:7e:72:c1:d8:1f:46:
         df:5e:2d:09:8b:21:eb:c8:6b:a8:6f:7c:e6:9e:c0:99:fb:54:
         8e:10:0f:57:c1:d3:36:9e:e3:54:83:d0:d7:45:c8:2c:0d:4f:
         cd:7e:34:25:6b:53:59:63:83:3d:a3:22:99:1a:46:94:04:10:
         aa:54:89:b0:ba:33:f9:42:d7:64:c8:bc:09:a7:b9:8e:89:19:
         00:b4:ea:85:0f:20:98:ce:97:6d:40:e6:12:39:63:68:08:be:
         6c:74:28:02:c1:ab:b5:03:6f:8f:96:79:66:47:0b:48:ad:ce:
         a0:09:cf:64:78:92:25:80:31:89:4d:f0:7a:52:5d:ab:fb:24:
         94:c4:07:e6:93:fd:5e:52:6e:4b:48:db:4b:44:ac:e0:47:fd:
         ca:4b:9c:62:33:7d:2d:aa:f7:36:63:0d:cf:a1:db:bc:ca:76:
         ce:1c:6f:64:c5:1e:37:de:6f:31:ab:3d:cd:da:6b:04:e4:04:
         cb:bc:02:27:99:6e:13:8a:a6:8a:db:25:30:1f:48:7c:67:ef:
         39:80:68:cd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBlijzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MB4XDTIyMDQx
OTE0MDUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI1YzhlNjI4NjZl
NmIzZDZkMzhmNTJiMzdjNWFmZTQwMjI1MDNhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPn/lnQju/iBnDQh5qxOFe4NUjSokKcBIzPHIhYzSJZCE+yn
6foF8VCemOV0V7mhBwv/Nc12fTr2OCBOfwZfQTUPezB0MxXuzOA7pCfY6nhWxdRX
sSkcCrbmBuwfNZhq3xKw1l/ommLG+hifKMtVt12z/7obU8vTVuc0jgIwAN2nzOCk
DmVbGc6uCYl7krt+fJHETTOXdoELNDBiYhklYDlbTKc1KU5qff24ZP/Rjysf38q6
MLUEUilaMRngyCCfgbGMRAJnO6pj5uA1Ac4nq58mIpay+kwoHKhr6+b40NfILXYz
sZE5WbS2dZgpkfCxxtmH3OBZuLED4BV1p3kzN9sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQSXI5ihm5rPW049Ss3xa/kAiUDpTAfBgNVHSMEGDAWgBSDOO9BssAQWpHM
u5yJM3+usSn/hDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6anZRYkxBRUZxUnpMdWNpVE5fcnJFcF80US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8x
L0VseU9Zb1p1YXoxdE9QVXJOOFd2NUFJbEE2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
NDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZx
UnpMdWNpVE5fcnJFcF80US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl+10DANBgkqhkiG9w0BAQsFAAOC
AQEAop2yvqefijs9ZUcI6ToV0puUb8H7N6Nz322paI/iAUmpEQPE/tAw1U+uZtNj
sbkwfnLB2B9G314tCYsh68hrqG985p7AmftUjhAPV8HTNp7jVIPQ10XILA1PzX40
JWtTWWODPaMimRpGlAQQqlSJsLoz+ULXZMi8Cae5jokZALTqhQ8gmM6XbUDmEjlj
aAi+bHQoAsGrtQNvj5Z5ZkcLSK3OoAnPZHiSJYAxiU3welJdq/sklMQH5pP9XlJu
S0jbS0Ss4Ef9ykucYjN9Lar3NmMNz6HbvMp2zhxvZMUeN95vMas9zdprBOQEy7wC
J5luE4qmitslMB9IfGfvOYBozQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org