Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/Gc6J5u9-PzBLHlisvR1SuMLYm0Y.roa
File:                     Gc6J5u9-PzBLHlisvR1SuMLYm0Y.roa (raw, json)
Hash identifier:          Um6gJux7NNuVziPMXBGd0ebi2RNTsG3t7oPrdUumado=
Subject key identifier:   19:CE:89:E6:EF:7E:3F:30:4B:1E:58:AC:BD:1D:52:B8:C2:D8:9B:46
Certificate issuer:       /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial:       03925B2C
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/Gc6J5u9-PzBLHlisvR1SuMLYm0Y.roa
Signing time:             Wed 22 Jun 2022 15:25:33 +0000
ROA not before:           Wed 22 Jun 2022 15:25:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        193.162.44.0/24 maxlen: 32
                          2a10:f0c0::/29 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59923244 (0x3925b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
        Validity
            Not Before: Jun 22 15:25:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19ce89e6ef7e3f304b1e58acbd1d52b8c2d89b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:ae:3e:49:71:36:47:ae:36:25:a6:ad:9f:
                    98:2b:71:42:f5:a3:2d:f3:a2:23:47:fb:8c:4d:e1:
                    39:32:ce:62:6f:ad:a5:ce:bf:e2:21:03:d9:0d:b1:
                    f4:90:64:13:c2:34:2f:d9:69:95:04:56:0d:b1:c8:
                    36:36:2a:ca:f3:08:55:ca:4d:27:45:65:23:3d:d3:
                    50:ce:9f:ec:71:1f:7a:d4:4d:f3:44:87:b9:41:78:
                    f1:33:0e:80:27:bd:ff:47:eb:43:e9:83:2d:d1:4d:
                    83:44:a5:1c:5f:c9:8c:ed:ce:c5:90:5f:e1:b6:86:
                    53:75:e5:8b:a2:e7:e8:cb:da:64:57:34:2d:bd:e5:
                    9d:c5:6f:fb:5e:2a:5c:6e:9e:cd:2a:6f:74:51:8d:
                    63:6c:cc:e4:e9:9c:ec:6c:7f:14:72:42:eb:73:61:
                    ec:a3:a7:dc:2c:48:49:63:60:0e:f4:8c:28:0d:6f:
                    97:5a:2f:a0:1e:59:b0:7e:c3:89:bc:2a:38:62:0c:
                    99:16:29:68:14:66:22:4f:24:9c:9d:40:36:a1:de:
                    99:6c:9c:e1:33:a5:6a:e8:bd:d5:fe:7b:e8:94:1c:
                    e7:ae:a4:42:1d:cb:6c:ef:54:77:67:c3:21:b1:b6:
                    b8:f9:d9:62:46:75:44:52:ed:6f:4d:ec:d6:3f:37:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:89:E6:EF:7E:3F:30:4B:1E:58:AC:BD:1D:52:B8:C2:D8:9B:46
            X509v3 Authority Key Identifier:
                keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/Gc6J5u9-PzBLHlisvR1SuMLYm0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.44.0/24
                IPv6:
                  2a10:f0c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:9f:ff:78:48:3d:07:26:c1:34:57:2e:0b:13:c2:75:38:1c:
         57:b3:3b:37:8f:9a:2d:17:0b:8d:c1:1f:f8:eb:82:8c:ed:0f:
         b3:ac:6e:31:2e:09:ed:3d:59:55:38:ab:d3:b1:ed:f8:5f:19:
         85:39:7c:c9:20:57:00:a0:50:2e:4b:0b:9d:12:fc:2a:9e:89:
         7a:35:0b:a2:4f:c6:bc:66:4c:2c:b0:5f:09:95:f0:49:bc:53:
         a0:64:c2:1a:d0:7e:1c:31:aa:f3:f1:c3:7e:96:86:55:1d:ca:
         a8:ee:d7:aa:6b:eb:ca:fe:28:c1:38:97:e9:b0:ca:71:04:18:
         cb:dd:0c:f9:16:7a:c6:ed:9a:00:4c:5c:39:88:1a:34:f5:b4:
         e4:90:46:33:ea:11:5c:61:f4:da:d7:ff:da:70:c9:00:7c:ad:
         83:c5:25:d1:59:6c:f6:08:68:7a:e1:f2:8a:2b:77:65:d4:70:
         35:db:10:9f:f4:e5:92:37:4d:c1:96:8b:8c:98:3e:d9:5b:ce:
         33:25:74:98:cc:ac:ca:93:02:c7:d5:c0:cb:aa:61:da:a6:43:
         53:56:ad:fc:f2:62:a4:73:b9:84:35:ea:3b:6f:0b:a5:d1:c1:
         8c:b7:ca:e9:a6:87:62:7d:68:9c:f4:6c:25:cf:35:ea:37:50:
         69:b8:34:2c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEA5JbLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MDQwNzliYjcwNzBlZDBlZWVhM2ExYTQ2N2M3OTQ2MmJjYzU0NTVmMB4XDTIyMDYy
MjE1MjUzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTljZTg5ZTZlZjdl
M2YzMDRiMWU1OGFjYmQxZDUyYjhjMmQ4OWI0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAObLrj5JcTZHrjYlpq2fmCtxQvWjLfOiI0f7jE3hOTLOYm+t
pc6/4iED2Q2x9JBkE8I0L9lplQRWDbHINjYqyvMIVcpNJ0VlIz3TUM6f7HEfetRN
80SHuUF48TMOgCe9/0frQ+mDLdFNg0SlHF/JjO3OxZBf4baGU3Xli6Ln6MvaZFc0
Lb3lncVv+14qXG6ezSpvdFGNY2zM5Omc7Gx/FHJC63Nh7KOn3CxISWNgDvSMKA1v
l1ovoB5ZsH7DibwqOGIMmRYpaBRmIk8knJ1ANqHemWyc4TOlaui91f576JQc566k
Qh3LbO9Ud2fDIbG2uPnZYkZ1RFLtb03s1j831P8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQZzonm734/MEseWKy9HVK4wtibRjAfBgNVHSMEGDAWgBTQQHm7cHDtDu6j
oaRnx5RivMVFXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBFQjV1M0J3N1E3dW82R2taOGVVWXJ6RlJWOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvYTkzZGEwLWUxNTUtNDMyNC05YmE5LTYyMDk4ZDFlYzFlNi8x
L0djNko1dTktUHpCTEhsaXN2UjFTdU1MWW0wWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
YTkzZGEwLWUxNTUtNDMyNC05YmE5LTYyMDk4ZDFlYzFlNi8xLzBFQjV1M0J3N1E3
dW82R2taOGVVWXJ6RlJWOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMGiLDANBAIAAjAHAwUDKhDwwDAN
BgkqhkiG9w0BAQsFAAOCAQEAW5//eEg9BybBNFcuCxPCdTgcV7M7N4+aLRcLjcEf
+OuCjO0Ps6xuMS4J7T1ZVTir07Ht+F8ZhTl8ySBXAKBQLksLnRL8Kp6JejULok/G
vGZMLLBfCZXwSbxToGTCGtB+HDGq8/HDfpaGVR3KqO7Xqmvryv4owTiX6bDKcQQY
y90M+RZ6xu2aAExcOYgaNPW05JBGM+oRXGH02tf/2nDJAHytg8Ul0Vls9ghoeuHy
iit3ZdRwNdsQn/TlkjdNwZaLjJg+2VvOMyV0mMysypMCx9XAy6ph2qZDU1at/PJi
pHO5hDXqO28LpdHBjLfK6aaHYn1onPRsJc816jdQabg0LA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:18 2024 by rpki-client on console-ams.rpki-client.org