Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JcinPBJSfZU8XPj7zwa57yCvPxI.roa
File:                     JcinPBJSfZU8XPj7zwa57yCvPxI.roa (raw, json)
Hash identifier:          3VZzRQg1KHUAZLnwRasVIfKpw7YC5dFq/oc3wfSLXIk=
Subject key identifier:   25:C8:A7:3C:12:52:7D:95:3C:5C:F8:FB:CF:06:B9:EF:20:AF:3F:12
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       43235944
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JcinPBJSfZU8XPj7zwa57yCvPxI.roa
Signing time:             Wed 25 May 2022 06:21:14 +0000
ROA not before:           Wed 25 May 2022 06:21:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61278
IP address blocks:        93.115.52.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126390084 (0x43235944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May 25 06:21:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=25c8a73c12527d953c5cf8fbcf06b9ef20af3f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:41:b4:1f:ae:e2:ae:5d:62:37:3f:1f:55:
                    88:90:f9:c1:20:59:61:e6:b3:b6:1a:25:2a:a0:be:
                    db:a6:c9:ca:b8:5f:df:88:5d:ba:eb:b6:90:7d:2b:
                    b3:db:91:71:f6:0c:44:1b:4f:34:9e:b5:69:bb:ca:
                    5f:db:ab:29:7a:79:cd:b7:41:6f:4c:e9:55:a5:04:
                    f7:64:96:16:e9:3e:61:8e:58:6e:ea:bc:5e:2f:1f:
                    05:2d:ba:4b:d1:a1:29:14:0e:86:de:59:97:55:12:
                    6f:31:7e:84:00:bb:a3:ac:dd:30:9d:b5:5c:bb:4f:
                    f5:46:d1:ec:63:09:16:bf:f4:b2:61:e5:b8:b6:43:
                    23:e3:da:34:13:a0:f1:74:f5:16:a8:d3:a7:c8:cf:
                    97:87:d0:35:dd:d0:db:ec:ca:7e:40:51:58:44:c2:
                    40:7b:64:43:6c:ba:f3:3b:be:52:65:1b:d3:b6:e7:
                    a1:d4:61:8c:9a:be:f4:98:67:b3:d9:9a:7f:e9:d4:
                    77:2e:c7:36:c2:97:3d:cf:c6:ee:5c:e6:9a:48:0a:
                    39:69:89:f0:59:d2:a0:aa:b5:0c:91:df:2b:be:27:
                    65:c7:bf:80:c6:16:0a:0a:9d:e7:5a:b5:eb:8d:83:
                    c0:9d:7c:e9:60:48:5f:f2:ef:a7:a8:cf:83:0f:de:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:A7:3C:12:52:7D:95:3C:5C:F8:FB:CF:06:B9:EF:20:AF:3F:12
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JcinPBJSfZU8XPj7zwa57yCvPxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:c5:b4:9a:bc:12:47:04:24:bd:48:0d:26:ed:d5:5c:27:fd:
         b9:c2:3f:f7:98:a5:79:d2:d0:14:05:b6:09:78:2c:a6:95:64:
         9b:14:1c:90:28:27:31:b4:3b:6c:d9:28:b6:1f:ed:dc:96:f8:
         d4:60:8c:40:5e:e5:d2:36:c3:03:b9:eb:b5:71:1f:5e:fe:5c:
         3e:31:e4:4e:73:3e:42:1d:04:8b:99:af:45:11:9c:27:17:36:
         86:95:84:99:9e:23:38:e9:6c:17:dc:2d:6d:3f:36:83:99:b4:
         6d:1e:c5:58:af:89:0b:66:7d:b7:2b:fb:6d:27:c0:50:27:6d:
         f0:ab:ce:ef:af:db:c9:b1:88:59:86:d0:d0:8d:18:55:99:62:
         7c:45:6a:eb:a7:ea:10:b3:4a:51:46:ed:37:2b:52:6a:1b:34:
         64:0e:0b:f0:95:09:a2:ea:49:b9:f0:85:63:3d:02:c7:22:31:
         ea:3e:1e:63:ce:f0:f8:51:b7:00:0d:60:36:2f:9d:22:46:27:
         4f:61:d0:d6:4d:1d:2d:76:f7:26:e9:57:29:78:52:81:cd:e9:
         4c:1e:a5:61:f6:f6:a9:bc:12:59:7a:26:ed:ec:80:f6:40:2c:
         54:c3:1a:0f:36:06:a5:6c:97:9b:d6:7d:f0:ae:49:2d:8e:85:
         ed:a3:32:aa
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEQyNZRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDUy
NTA2MjExNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjVjOGE3M2MxMjUy
N2Q5NTNjNWNmOGZiY2YwNmI5ZWYyMGFmM2YxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIv4QbQfruKuXWI3Px9ViJD5wSBZYeaztholKqC+26bJyrhf
34hduuu2kH0rs9uRcfYMRBtPNJ61abvKX9urKXp5zbdBb0zpVaUE92SWFuk+YY5Y
buq8Xi8fBS26S9GhKRQOht5Zl1USbzF+hAC7o6zdMJ21XLtP9UbR7GMJFr/0smHl
uLZDI+PaNBOg8XT1FqjTp8jPl4fQNd3Q2+zKfkBRWETCQHtkQ2y68zu+UmUb07bn
odRhjJq+9Jhns9maf+nUdy7HNsKXPc/G7lzmmkgKOWmJ8FnSoKq1DJHfK74nZce/
gMYWCgqd51q1642DwJ186WBIX/Lvp6jPgw/eSccCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQlyKc8ElJ9lTxc+PvPBrnvIK8/EjAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS9KY2luUEJKU2ZaVThYUGo3endhNTd5Q3ZQeEkucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXM0MA0GCSqGSIb3DQEBCwUA
A4IBAQDtxbSavBJHBCS9SA0m7dVcJ/25wj/3mKV50tAUBbYJeCymlWSbFByQKCcx
tDts2Si2H+3clvjUYIxAXuXSNsMDueu1cR9e/lw+MeROcz5CHQSLma9FEZwnFzaG
lYSZniM46WwX3C1tPzaDmbRtHsVYr4kLZn23K/ttJ8BQJ23wq87vr9vJsYhZhtDQ
jRhVmWJ8RWrrp+oQs0pRRu03K1JqGzRkDgvwlQmi6km58IVjPQLHIjHqPh5jzvD4
UbcADWA2L50iRidPYdDWTR0tdvcm6VcpeFKBzelMHqVh9vapvBJZeibt7ID2QCxU
wxoPNgalbJeb1n3wrkktjoXtozKq
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:16 2025 by rpki-client