Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/V-ye6UabZluSLAPDtcithtQeyq8.roa
File:                     V-ye6UabZluSLAPDtcithtQeyq8.roa (raw, json)
Hash identifier:          b4nwdR8N6evirYTY7LkO0KMfFWvUIMSw8Rk9z8L3hxk=
Subject key identifier:   57:EC:9E:E9:46:9B:66:5B:92:2C:03:C3:B5:C8:AD:86:D4:1E:CA:AF
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       0182FE9DFB947057F2BBF3348985153882ED
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/V-ye6UabZluSLAPDtcithtQeyq8.roa
Signing time:             Fri 02 Sep 2022 14:32:22 +0000
ROA not before:           Fri 02 Sep 2022 14:32:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16243
IP address blocks:        94.103.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:fe:9d:fb:94:70:57:f2:bb:f3:34:89:85:15:38:82:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Sep  2 14:32:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57ec9ee9469b665b922c03c3b5c8ad86d41ecaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:e6:48:0b:c9:e0:4a:20:2a:b5:39:38:7d:
                    2c:30:0f:09:4e:5e:2b:f8:d7:10:6d:bc:45:9f:a1:
                    ea:79:ff:e4:4f:37:a1:de:29:b8:15:45:64:8b:a5:
                    05:20:fa:06:1f:6f:66:5d:32:16:a2:df:09:05:1d:
                    43:0c:7d:f7:ad:0b:04:1a:57:25:e9:a2:20:b3:fb:
                    b3:a2:9b:ac:0e:e2:d1:46:03:72:59:1e:de:0d:a0:
                    1c:c5:05:cd:97:bc:41:5e:46:32:38:60:7c:db:dd:
                    a0:78:45:27:5e:4c:55:c0:1f:d1:fb:35:56:9f:69:
                    01:ad:84:2c:2e:33:a2:b1:45:63:cc:77:f5:b4:29:
                    7b:c1:2e:2a:70:5b:b8:67:c8:f9:e6:a8:4d:81:9f:
                    3b:da:47:6d:74:ac:9a:6e:66:b3:4c:7a:88:44:19:
                    ff:af:90:d9:db:73:41:eb:71:50:6c:63:02:5e:06:
                    17:45:3a:e0:04:ed:e0:d6:11:0c:0e:9d:67:7c:3c:
                    48:0c:b0:c1:16:cf:17:91:81:d6:c4:84:64:cd:12:
                    ec:49:32:57:4c:16:ba:90:94:75:77:39:cc:28:00:
                    99:3b:8b:a5:0b:f2:19:c2:7c:6c:8b:cd:31:f7:76:
                    a6:e1:ac:43:4a:0a:f7:65:9f:2c:af:70:b8:68:95:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:9E:E9:46:9B:66:5B:92:2C:03:C3:B5:C8:AD:86:D4:1E:CA:AF
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/V-ye6UabZluSLAPDtcithtQeyq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:ed:63:b6:32:a6:29:86:b3:33:0a:d3:bf:32:67:3e:1a:2f:
         fa:1b:d2:a9:93:64:87:95:e1:c1:aa:cc:fa:16:61:33:7b:e1:
         b3:e6:de:0c:f6:85:de:06:3b:94:5d:52:82:19:2b:31:13:33:
         97:99:25:4e:f3:ea:9e:3e:7f:ca:5f:42:c5:08:ad:ac:df:c6:
         ec:1f:cf:c3:f6:78:f4:e0:83:3b:2a:e7:75:03:02:d2:27:89:
         77:31:c5:d4:b3:31:e6:4f:74:04:10:f4:95:66:8c:1c:67:14:
         4b:23:6b:68:6c:3c:e3:e6:81:d3:2d:95:fa:00:89:5b:d6:ff:
         6f:78:04:b6:16:9c:0b:3f:f7:13:e6:fc:07:e6:c8:8f:06:a9:
         44:e4:c1:54:87:f5:d2:1b:34:92:82:43:82:bb:c0:dc:44:86:
         eb:dd:08:17:7f:67:28:24:16:46:ec:9f:5a:ac:d4:40:3c:38:
         e4:aa:a7:6c:16:fa:3b:95:00:f0:e7:16:65:f3:80:b1:da:11:
         e1:d5:8c:a4:fa:e9:e2:54:1c:26:3c:f2:4b:7a:ba:dc:cc:35:
         35:94:ab:af:58:50:f4:5f:c2:b7:6f:7b:9e:9d:c0:ac:ad:8b:
         5e:63:38:1b:3f:6f:63:7e:53:fc:bd:6c:29:82:c6:b5:b2:ca:
         9a:dc:2b:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL+nfuUcFfyu/M0iYUVOILtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGZlOTcxYjNlMzZiMTZhOTJiZTg1ZjU5OTg1YmU0NTk2
OGI4NjQwHhcNMjIwOTAyMTQzMjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2VjOWVlOTQ2OWI2NjViOTIyYzAzYzNiNWM4YWQ4NmQ0MWVjYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSbmSAvJ4EogKrU5OH0sMA8JTl4r
+NcQbbxFn6Hqef/kTzeh3im4FUVki6UFIPoGH29mXTIWot8JBR1DDH33rQsEGlcl
6aIgs/uzopusDuLRRgNyWR7eDaAcxQXNl7xBXkYyOGB8292geEUnXkxVwB/R+zVW
n2kBrYQsLjOisUVjzHf1tCl7wS4qcFu4Z8j55qhNgZ872kdtdKyabmazTHqIRBn/
r5DZ23NB63FQbGMCXgYXRTrgBO3g1hEMDp1nfDxIDLDBFs8XkYHWxIRkzRLsSTJX
TBa6kJR1dznMKACZO4ulC/IZwnxsi80x93am4axDSgr3ZZ8sr3C4aJVbJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFfsnulGm2ZbkiwDw7XIrYbUHsqvMB8GA1UdIwQY
MBaAFDMP6XGz42sWqSvoX1mYW+RZaLhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWIt
MTFlOWU5ZjAxMzQzLzEvVi15ZTZVYWJabHVTTEFQRHRjaXRodFFleXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWItMTFlOWU5ZjAxMzQz
LzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmcRMA0G
CSqGSIb3DQEBCwUAA4IBAQDY7WO2MqYphrMzCtO/Mmc+Gi/6G9Kpk2SHleHBqsz6
FmEze+Gz5t4M9oXeBjuUXVKCGSsxEzOXmSVO8+qePn/KX0LFCK2s38bsH8/D9nj0
4IM7Kud1AwLSJ4l3McXUszHmT3QEEPSVZowcZxRLI2tobDzj5oHTLZX6AIlb1v9v
eAS2FpwLP/cT5vwH5siPBqlE5MFUh/XSGzSSgkOCu8DcRIbr3QgXf2coJBZG7J9a
rNRAPDjkqqdsFvo7lQDw5xZl84Cx2hHh1Yyk+uniVBwmPPJLerrczDU1lKuvWFD0
X8K3b3uencCsrYteYzgbP29jflP8vWwpgsa1ssqa3CtR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org