Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/aQuXzxgafdm5JWpOJpaDVCJbZao.roa
File:                     aQuXzxgafdm5JWpOJpaDVCJbZao.roa (raw, json)
Hash identifier:          hDZ43geCAPx6UH1UDCNrPt/VN6jwi2kiSMHsa+vM8/s=
Subject key identifier:   69:0B:97:CF:18:1A:7D:D9:B9:25:6A:4E:26:96:83:54:22:5B:65:AA
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       066697B0
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/aQuXzxgafdm5JWpOJpaDVCJbZao.roa
Signing time:             Tue 19 Apr 2022 14:14:23 +0000
ROA not before:           Tue 19 Apr 2022 14:14:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213133
IP address blocks:        93.179.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107386800 (0x66697b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 19 14:14:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=690b97cf181a7dd9b9256a4e26968354225b65aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:5a:79:e7:3f:04:02:b0:5e:82:65:67:8a:
                    2f:0b:2f:6c:e1:36:62:c4:63:93:eb:c6:31:a8:0c:
                    d2:7f:72:00:78:26:51:0f:95:07:0b:6e:d0:a5:2b:
                    ec:10:a9:36:d3:02:8d:50:66:0a:9d:66:ab:14:b2:
                    82:57:45:dc:80:cc:a3:80:7e:72:e8:c9:66:4c:f9:
                    3c:59:1a:dc:9e:44:0b:33:43:9c:74:2c:37:14:a2:
                    c0:e8:21:18:32:d0:c5:bf:be:3f:71:0b:25:c8:af:
                    07:23:3b:ad:3a:3f:7b:50:08:ac:8e:50:b6:a2:bf:
                    2b:6b:95:2c:b8:87:70:1b:9b:08:f0:1e:e8:80:a1:
                    12:58:80:62:d2:ae:33:68:a0:a4:d6:64:85:64:bc:
                    b0:87:e0:50:eb:df:66:80:8b:57:b5:7d:0d:6e:4d:
                    8d:ac:c7:de:83:0f:57:31:6e:af:3f:b4:43:00:72:
                    9b:f5:0e:8c:46:bd:4c:fa:aa:51:36:bc:dc:7a:3e:
                    7d:10:96:b8:ff:43:38:d9:a8:7a:c3:a7:16:52:02:
                    11:f0:59:7c:28:74:0a:17:c8:59:c8:14:75:d0:47:
                    31:af:8d:d5:e9:33:d7:6d:0f:4c:3b:38:b8:5b:18:
                    36:a0:61:f9:97:a7:84:d1:97:bb:22:3f:8b:4c:aa:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:97:CF:18:1A:7D:D9:B9:25:6A:4E:26:96:83:54:22:5B:65:AA
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/aQuXzxgafdm5JWpOJpaDVCJbZao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:3d:9f:30:53:63:8f:a2:3d:92:1b:26:3c:dc:1f:6a:e3:
         f9:6b:a0:49:76:8f:2b:d5:6d:fe:e6:d0:ac:b5:0c:c2:ab:57:
         21:c9:df:8e:07:4e:64:25:74:78:d0:38:52:9c:70:02:00:ac:
         7f:b8:7a:12:8a:c8:02:3c:32:02:2c:d5:b8:17:d7:48:7b:ee:
         b1:ef:fc:15:4f:c3:f9:50:de:7f:ee:56:2b:90:da:da:9d:49:
         be:8c:90:6f:24:e4:77:d0:b5:62:d2:91:41:3b:d0:3b:0e:71:
         a0:44:7e:2e:d5:51:6c:11:a9:b4:f2:fe:c4:13:6e:98:a1:37:
         2f:21:4a:db:b6:cb:29:24:a2:b3:8b:7d:76:2c:6e:77:36:5c:
         69:8e:2e:56:0d:ff:77:93:a1:01:e7:ef:a5:8e:d9:72:4d:05:
         aa:ec:ca:2b:11:cd:e9:d5:0d:68:4c:cd:08:46:76:c0:5a:ef:
         54:e7:ae:c0:57:ad:db:ef:5a:21:82:88:78:8f:df:1d:cd:f4:
         bd:14:05:8f:d5:dd:93:67:b5:a3:1c:8e:d3:5b:9f:c0:96:3b:
         58:dc:a4:6e:4b:d8:34:7d:90:83:0b:28:9a:3a:ab:2a:77:de:
         01:18:bc:4d:7d:fe:49:eb:7a:7c:4f:fb:04:52:73:2a:aa:01:
         58:5b:92:59
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBmaXsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MB4XDTIyMDQx
OTE0MTQyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjkwYjk3Y2YxODFh
N2RkOWI5MjU2YTRlMjY5NjgzNTQyMjViNjVhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKz5WnnnPwQCsF6CZWeKLwsvbOE2YsRjk+vGMagM0n9yAHgm
UQ+VBwtu0KUr7BCpNtMCjVBmCp1mqxSygldF3IDMo4B+cujJZkz5PFka3J5ECzND
nHQsNxSiwOghGDLQxb++P3ELJcivByM7rTo/e1AIrI5QtqK/K2uVLLiHcBubCPAe
6IChEliAYtKuM2igpNZkhWS8sIfgUOvfZoCLV7V9DW5NjazH3oMPVzFurz+0QwBy
m/UOjEa9TPqqUTa83Ho+fRCWuP9DONmoesOnFlICEfBZfCh0ChfIWcgUddBHMa+N
1ekz120PTDs4uFsYNqBh+ZenhNGXuyI/i0yqpUMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRpC5fPGBp92bklak4mloNUIltlqjAfBgNVHSMEGDAWgBSDOO9BssAQWpHM
u5yJM3+usSn/hDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6anZRYkxBRUZxUnpMdWNpVE5fcnJFcF80US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8x
L2FRdVh6eGdhZmRtNUpXcE9KcGFEVkNKYlphby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
NDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZx
UnpMdWNpVE5fcnJFcF80US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2zXzANBgkqhkiG9w0BAQsFAAOC
AQEAMuw9nzBTY4+iPZIbJjzcH2rj+WugSXaPK9Vt/ubQrLUMwqtXIcnfjgdOZCV0
eNA4UpxwAgCsf7h6EorIAjwyAizVuBfXSHvuse/8FU/D+VDef+5WK5Da2p1JvoyQ
byTkd9C1YtKRQTvQOw5xoER+LtVRbBGptPL+xBNumKE3LyFK27bLKSSis4t9dixu
dzZcaY4uVg3/d5OhAefvpY7Zck0FquzKKxHN6dUNaEzNCEZ2wFrvVOeuwFet2+9a
IYKIeI/fHc30vRQFj9Xdk2e1oxyO01ufwJY7WNykbkvYNH2QgwsomjqrKnfeARi8
TX3+Set6fE/7BFJzKqoBWFuSWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org