Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/9a2IR_WBPKKkQIi51bq4hg54idM.roa
File:                     9a2IR_WBPKKkQIi51bq4hg54idM.roa (raw, json)
Hash identifier:          lgCYFDUiNm8fASd3jU0fT/cmd342//4HIFcO8qyRtVQ=
Subject key identifier:   F5:AD:88:47:F5:81:3C:A2:A4:40:88:B9:D5:BA:B8:86:0E:78:89:D3
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       37181493
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/9a2IR_WBPKKkQIi51bq4hg54idM.roa
Signing time:             Sat 01 Jan 2022 11:59:55 +0000
ROA not before:           Sat 01 Jan 2022 11:59:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1880
IP address blocks:        193.10.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924325011 (0x37181493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Jan  1 11:59:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5ad8847f5813ca2a44088b9d5bab8860e7889d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:bf:9a:88:b4:7e:d3:d0:f1:84:c4:c4:1e:
                    2c:4b:d1:be:52:c2:89:5f:88:56:ae:dd:f9:c8:22:
                    3c:dd:80:5d:bf:8d:3a:b1:1d:53:94:cf:af:71:11:
                    8b:5e:36:50:ab:ec:d5:ee:81:f5:71:8f:40:d0:a1:
                    37:55:eb:70:89:c1:1f:da:a2:de:be:a6:2f:50:b9:
                    69:03:5e:a9:5a:47:f6:01:89:9e:18:2b:03:e1:2b:
                    ed:f6:60:bd:b7:c8:bf:36:8e:00:d6:30:34:24:1a:
                    b7:06:d2:cd:01:d7:87:17:c3:f7:ea:49:6d:99:13:
                    84:06:58:6a:f9:b2:f5:2d:1f:95:84:61:41:50:1a:
                    ad:fb:5a:1e:f6:7d:2c:35:82:83:93:a6:e1:84:83:
                    8b:6a:8b:63:e6:1a:87:52:11:00:f1:cc:75:c8:46:
                    18:f1:54:93:d1:02:ea:6d:c7:02:7a:1f:aa:29:c6:
                    68:88:8e:f1:3d:85:01:a6:0d:5a:f7:7f:0e:fd:19:
                    bc:c9:79:39:7a:07:a8:18:51:16:76:c8:f7:86:0c:
                    76:8d:8a:cf:d3:7f:a6:3f:1a:ed:b9:7f:7c:e3:dc:
                    32:54:ab:d0:3d:2e:b9:c4:90:c6:c3:57:bf:29:af:
                    f6:81:be:9d:25:24:8f:a3:b0:49:2b:f1:ef:24:76:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:88:47:F5:81:3C:A2:A4:40:88:B9:D5:BA:B8:86:0E:78:89:D3
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/9a2IR_WBPKKkQIi51bq4hg54idM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.10.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:39:71:43:fd:6e:90:d7:99:88:71:3a:76:66:f6:de:72:57:
         37:d4:05:ee:14:34:e2:a9:84:23:c2:1d:00:99:f0:01:fd:ba:
         73:e8:8c:73:18:59:9b:b6:aa:9d:de:ad:d9:dc:c4:02:a5:68:
         29:37:4f:75:4e:11:c7:0d:23:68:07:ad:89:4a:74:23:5f:df:
         c5:a1:ab:52:ca:6b:6b:ca:d7:09:89:40:81:3a:28:c0:3c:ab:
         4c:80:80:3e:bd:d9:4d:f6:65:51:2e:56:25:fd:d8:bf:d8:52:
         d6:0a:4c:3e:b7:59:43:c2:ed:da:12:c5:9a:db:cc:61:2c:9a:
         80:8f:13:fe:19:40:c6:80:15:4b:11:6b:74:64:22:be:8a:1a:
         3f:2b:94:51:9d:4e:df:13:0c:b7:8b:96:f9:02:ee:dc:40:09:
         b5:01:f2:f4:47:39:8c:23:a9:be:8f:bb:46:7e:3d:05:00:da:
         24:7b:94:53:7f:75:7d:55:d2:da:58:ac:0a:64:5b:09:9f:cf:
         2c:fb:7c:1a:54:2c:54:95:a3:98:fc:01:53:e6:1d:c8:ed:0c:
         06:14:b4:02:4b:0b:70:3f:4b:c5:c6:33:76:16:89:aa:fe:58:
         53:dc:5c:be:5f:6e:52:57:97:57:df:31:cd:94:53:9b:79:12:
         82:72:d3:80
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENxgUkzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODAxZjIzY2U4MjFjMjY0ZDY3NzI3NTM2ZWMxODM1Mzc1OTRjNWYyMB4XDTIyMDEw
MTExNTk1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjVhZDg4NDdmNTgx
M2NhMmE0NDA4OGI5ZDViYWI4ODYwZTc4ODlkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2Gv5qItH7T0PGExMQeLEvRvlLCiV+IVq7d+cgiPN2AXb+N
OrEdU5TPr3ERi142UKvs1e6B9XGPQNChN1XrcInBH9qi3r6mL1C5aQNeqVpH9gGJ
nhgrA+Er7fZgvbfIvzaOANYwNCQatwbSzQHXhxfD9+pJbZkThAZYavmy9S0flYRh
QVAarftaHvZ9LDWCg5Om4YSDi2qLY+Yah1IRAPHMdchGGPFUk9EC6m3HAnofqinG
aIiO8T2FAaYNWvd/Dv0ZvMl5OXoHqBhRFnbI94YMdo2Kz9N/pj8a7bl/fOPcMlSr
0D0uucSQxsNXvymv9oG+nSUkj6OwSSvx7yR28Q0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT1rYhH9YE8oqRAiLnVuriGDniJ0zAfBgNVHSMEGDAWgBToAfI86CHCZNZ3
J1NuwYNTdZTF8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZBSHlQT2dod21UV2R5ZFRic0dEVTNXVXhmSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8x
LzlhMklSX1dCUEtLa1FJaTUxYnE0aGc1NGlkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
ZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8xLzZBSHlQT2dod21U
V2R5ZFRic0dEVTNXVXhmSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEKBzANBgkqhkiG9w0BAQsFAAOC
AQEAHzlxQ/1ukNeZiHE6dmb23nJXN9QF7hQ04qmEI8IdAJnwAf26c+iMcxhZm7aq
nd6t2dzEAqVoKTdPdU4Rxw0jaAetiUp0I1/fxaGrUspra8rXCYlAgToowDyrTICA
Pr3ZTfZlUS5WJf3Yv9hS1gpMPrdZQ8Lt2hLFmtvMYSyagI8T/hlAxoAVSxFrdGQi
vooaPyuUUZ1O3xMMt4uW+QLu3EAJtQHy9Ec5jCOpvo+7Rn49BQDaJHuUU391fVXS
2lisCmRbCZ/PLPt8GlQsVJWjmPwBU+YdyO0MBhS0AksLcD9LxcYzdhaJqv5YU9xc
vl9uUleXV98xzZRTm3kSgnLTgA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org