Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/N9R3237Wcrsl0dqZVUlHil7n9H4.roa
File:                     N9R3237Wcrsl0dqZVUlHil7n9H4.roa (raw, json)
Hash identifier:          D0MuTbGr81UABZhYZBFREhJ5P6CaJuiypuiNQVxTRFM=
Subject key identifier:   37:D4:77:DB:7E:D6:72:BB:25:D1:DA:99:55:49:47:8A:5E:E7:F4:7E
Certificate issuer:       /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial:       0181F93466E94A3B3AB06B1B1F8EC9D11B7D
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/N9R3237Wcrsl0dqZVUlHil7n9H4.roa
Signing time:             Wed 13 Jul 2022 20:16:09 +0000
ROA not before:           Wed 13 Jul 2022 20:16:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61223
IP address blocks:        193.222.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f9:34:66:e9:4a:3b:3a:b0:6b:1b:1f:8e:c9:d1:1b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
        Validity
            Not Before: Jul 13 20:16:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37d477db7ed672bb25d1da995549478a5ee7f47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:46:a4:54:fd:cf:4a:be:d1:93:8a:d6:5c:
                    f6:f6:33:01:bf:47:fd:3c:ba:06:59:9e:2e:ff:03:
                    4a:26:41:63:be:34:fc:9b:fa:35:f9:49:35:c3:4e:
                    5f:73:41:4c:f1:44:05:a9:af:2d:b8:0d:02:3d:e0:
                    39:ac:7c:93:bc:b2:bc:32:d9:65:73:98:8c:52:6a:
                    0e:0a:f5:7e:64:86:f1:ee:2e:7d:de:a0:13:02:9b:
                    a0:27:a0:9d:f5:17:79:d6:98:6c:ed:a3:40:5e:ee:
                    c6:59:ae:61:3c:47:b6:ce:b0:33:2a:4d:09:88:50:
                    6f:80:ec:0c:ba:46:5b:97:cc:ad:94:a6:2c:4a:c1:
                    7e:ce:e9:8f:32:af:8f:47:51:10:e9:38:5b:9b:35:
                    b0:87:7e:c8:ac:20:f7:5a:14:26:6f:3a:c7:a6:23:
                    60:bb:cf:6b:bf:ed:97:27:e5:73:77:60:19:05:da:
                    d1:4a:a7:7d:b3:14:19:50:53:a5:e5:84:70:1f:f8:
                    04:8b:3e:a7:e5:9e:d1:6f:e9:53:e9:de:5c:cf:a1:
                    67:cb:17:23:e4:d6:13:2a:86:8b:3a:d5:04:b7:4e:
                    dc:d0:a4:b1:bc:ff:a5:d1:5a:c8:df:91:a1:30:27:
                    4b:30:42:73:4c:f5:7a:3c:3b:79:59:ac:b8:3f:11:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:77:DB:7E:D6:72:BB:25:D1:DA:99:55:49:47:8A:5E:E7:F4:7E
            X509v3 Authority Key Identifier:
                keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/N9R3237Wcrsl0dqZVUlHil7n9H4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f0:43:cc:f3:ea:b7:d6:ab:4e:f4:b6:f1:ae:1d:1a:51:01:
         9f:31:4f:d5:83:96:b5:b1:2d:c0:f6:f4:8f:7f:72:12:5e:5e:
         c0:b4:1f:12:f5:d4:68:36:44:18:e0:ce:0e:72:2b:ea:bb:69:
         4b:1c:9b:39:77:a9:d8:a7:c6:d3:2b:a0:2e:fe:ae:c7:be:22:
         83:5a:89:cd:56:b3:01:a9:e3:31:58:48:e5:1e:a4:67:80:89:
         f8:51:29:8e:2b:0a:01:2b:12:c5:08:33:0c:ef:d7:0a:27:d1:
         71:78:ae:f4:7c:0e:1c:04:cf:71:38:9c:34:cb:4c:d1:6d:7d:
         37:8c:e8:4b:15:8c:a1:e7:59:27:2c:95:52:be:d2:20:96:60:
         b4:11:fb:c3:ed:13:78:ce:b8:92:f7:d5:b6:79:af:71:f7:70:
         fc:58:ad:a2:f1:2f:52:c5:41:dd:e1:df:f8:2f:7c:c3:43:3e:
         2b:9d:d8:a8:78:8a:36:38:10:27:cb:d0:56:0d:84:4c:2d:00:
         7f:3d:fe:bc:18:54:cf:8d:46:f5:b8:be:93:da:a4:1f:b1:1a:
         45:41:d8:eb:68:dd:dc:ae:f1:32:40:fc:50:aa:2a:c7:a8:23:
         cf:f7:48:4d:70:e2:65:d6:97:9e:d0:a1:6a:9d:c6:57:24:1d:
         06:b8:77:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH5NGbpSjs6sGsbH47J0Rt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYWJkY2M0OWY3ZDkwMzNiNTI5MDQ2NzlmM2M5Yjc4M2Q4
YzEzNTgwHhcNMjIwNzEzMjAxNjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Q0NzdkYjdlZDY3MmJiMjVkMWRhOTk1NTQ5NDc4YTVlZTdmNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj9GpFT9z0q+0ZOK1lz29jMBv0f9
PLoGWZ4u/wNKJkFjvjT8m/o1+Uk1w05fc0FM8UQFqa8tuA0CPeA5rHyTvLK8Mtll
c5iMUmoOCvV+ZIbx7i593qATApugJ6Cd9Rd51phs7aNAXu7GWa5hPEe2zrAzKk0J
iFBvgOwMukZbl8ytlKYsSsF+zumPMq+PR1EQ6ThbmzWwh37IrCD3WhQmbzrHpiNg
u89rv+2XJ+Vzd2AZBdrRSqd9sxQZUFOl5YRwH/gEiz6n5Z7Rb+lT6d5cz6Fnyxcj
5NYTKoaLOtUEt07c0KSxvP+l0VrI35GhMCdLMEJzTPV6PDt5Way4PxG5QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfUd9t+1nK7JdHamVVJR4pe5/R+MB8GA1UdIwQY
MBaAFMOr3MSffZAztSkEZ588m3g9jBNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZ2Y3hKOTlrRE8xS1FSbm56eWJlRDJNRTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NzI4ODMtZmViNC00MTRmLTlkMDAt
NGQ5MTI3ZmJhM2FkLzEvTjlSMzIzN1djcnNsMGRxWlZVbEhpbDduOUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82NzI4ODMtZmViNC00MTRmLTlkMDAtNGQ5MTI3ZmJhM2Fk
LzEvdzZ2Y3hKOTlrRE8xS1FSbm56eWJlRDJNRTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd4+MA0G
CSqGSIb3DQEBCwUAA4IBAQCX8EPM8+q31qtO9Lbxrh0aUQGfMU/Vg5a1sS3A9vSP
f3ISXl7AtB8S9dRoNkQY4M4Ocivqu2lLHJs5d6nYp8bTK6Au/q7HviKDWonNVrMB
qeMxWEjlHqRngIn4USmOKwoBKxLFCDMM79cKJ9FxeK70fA4cBM9xOJw0y0zRbX03
jOhLFYyh51knLJVSvtIglmC0EfvD7RN4zriS99W2ea9x93D8WK2i8S9SxUHd4d/4
L3zDQz4rndioeIo2OBAny9BWDYRMLQB/Pf68GFTPjUb1uL6T2qQfsRpFQdjraN3c
rvEyQPxQqirHqCPP90hNcOJl1pee0KFqncZXJB0GuHcP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:27 2024 by rpki-client on console-fra.rpki-client.org