Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RoSId2n7wDZzGfIcn5qCpEJiIC8.roa
File:                     RoSId2n7wDZzGfIcn5qCpEJiIC8.roa (raw, json)
Hash identifier:          ISm1u0i2f0EawnuxZP6IywylB8oLpeZH0ll6hL3mXgQ=
Subject key identifier:   46:84:88:77:69:FB:C0:36:73:19:F2:1C:9F:9A:82:A4:42:62:20:2F
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       434230C9
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RoSId2n7wDZzGfIcn5qCpEJiIC8.roa
Signing time:             Mon 30 May 2022 07:28:10 +0000
ROA not before:           Mon 30 May 2022 07:28:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57392
IP address blocks:        93.113.24.0/24 maxlen: 24
                          93.114.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128411337 (0x434230c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May 30 07:28:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4684887769fbc0367319f21c9f9a82a44262202f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:47:8f:e7:77:91:ee:f8:ba:ec:f0:4c:79:
                    f1:cb:20:f8:92:4e:fc:7d:13:de:7d:08:51:3b:04:
                    f2:5a:b1:16:67:30:a3:76:46:c5:ab:aa:a2:4e:3b:
                    be:82:26:0d:28:df:5d:65:0f:cc:b2:6f:53:e3:9f:
                    e7:2c:86:3c:21:4a:21:f4:52:e7:fe:00:c6:6e:ee:
                    c7:1d:40:f9:4d:11:f5:d5:8a:6e:65:62:09:49:66:
                    ce:52:d9:70:df:f0:c9:53:dc:24:ae:0c:cc:9f:15:
                    60:fc:99:23:36:06:c7:a3:a8:5b:b0:40:47:37:f9:
                    b3:c6:d9:2e:05:48:dd:6e:59:0f:98:bf:c6:db:a0:
                    e7:2a:40:ab:22:41:78:a3:39:da:ef:48:9f:74:ba:
                    67:a7:b7:ad:75:99:08:fb:b9:08:5b:c9:3e:41:f9:
                    1a:f0:0b:b3:74:20:20:12:5a:55:95:bd:99:70:3a:
                    e5:52:1a:1c:28:10:dc:10:23:a9:3b:1b:5c:d9:e4:
                    f2:63:73:3b:ae:b7:6e:a0:29:fa:d0:56:b7:8f:48:
                    2f:25:fa:25:cf:d0:c8:22:a9:b1:d4:d9:59:7f:76:
                    2a:71:38:99:51:05:f2:d1:4c:72:a7:17:1e:94:76:
                    3f:18:05:1e:d1:c7:06:14:36:40:a5:4a:b0:96:b2:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:88:77:69:FB:C0:36:73:19:F2:1C:9F:9A:82:A4:42:62:20:2F
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RoSId2n7wDZzGfIcn5qCpEJiIC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.24.0/24
                  93.114.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:7f:c5:8e:78:14:53:6f:01:dc:ee:93:d3:33:6b:9e:46:9e:
         ed:06:c4:ce:a4:2d:7e:0e:ad:de:4f:b6:a3:22:45:53:bc:64:
         8d:21:5f:e4:9a:f7:96:7f:a1:36:26:f7:0f:f8:4f:f4:98:f1:
         68:53:2f:16:14:bb:59:5b:1c:08:95:08:a8:32:5d:a0:fb:de:
         06:b5:ca:9f:5d:31:69:23:f8:1d:53:b9:32:e7:47:9c:8b:01:
         4e:ee:36:58:6c:c0:16:61:df:c0:fd:01:33:1e:78:f8:59:c2:
         74:78:c9:3a:49:a1:2b:4e:21:82:b2:37:40:08:b6:7f:fe:80:
         cb:3f:64:1f:a9:b5:75:dc:e7:c0:2e:db:11:c7:eb:55:7f:f3:
         c3:ff:b6:c0:00:53:5b:43:f6:71:ff:58:94:9a:a3:44:8d:dc:
         8c:f1:a2:ea:9a:2a:54:11:a2:36:79:0f:1c:15:15:a0:c2:1b:
         68:a9:77:6e:ff:42:0b:d2:ea:4b:e0:63:14:f4:ee:e0:92:d3:
         e4:d9:2a:57:64:f2:19:cb:e9:a5:d9:e8:ad:53:fc:82:c3:d3:
         bd:36:4c:8e:bd:b9:90:8c:27:4e:d5:b0:d5:02:bf:5a:e6:31:
         fd:7e:de:46:a4:c3:fc:dc:9a:ba:6c:43:0a:9d:8f:06:48:dc:
         be:45:81:cd
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEQ0IwyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDUz
MDA3MjgxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDY4NDg4Nzc2OWZi
YzAzNjczMTlmMjFjOWY5YTgyYTQ0MjYyMjAyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANcuR4/nd5Hu+Lrs8Ex58csg+JJO/H0T3n0IUTsE8lqxFmcw
o3ZGxauqok47voImDSjfXWUPzLJvU+Of5yyGPCFKIfRS5/4Axm7uxx1A+U0R9dWK
bmViCUlmzlLZcN/wyVPcJK4MzJ8VYPyZIzYGx6OoW7BARzf5s8bZLgVI3W5ZD5i/
xtug5ypAqyJBeKM52u9In3S6Z6e3rXWZCPu5CFvJPkH5GvALs3QgIBJaVZW9mXA6
5VIaHCgQ3BAjqTsbXNnk8mNzO663bqAp+tBWt49ILyX6Jc/QyCKpsdTZWX92KnE4
mVEF8tFMcqcXHpR2PxgFHtHHBhQ2QKVKsJayz4sCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRGhIh3afvANnMZ8hyfmoKkQmIgLzAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS9Sb1NJZDJuN3dEWnpHZkljbjVxQ3BFSmlJQzgucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXEYAwQAXXIyMA0GCSqGSIb3
DQEBCwUAA4IBAQANf8WOeBRTbwHc7pPTM2ueRp7tBsTOpC1+Dq3eT7ajIkVTvGSN
IV/kmveWf6E2JvcP+E/0mPFoUy8WFLtZWxwIlQioMl2g+94GtcqfXTFpI/gdU7ky
50eciwFO7jZYbMAWYd/A/QEzHnj4WcJ0eMk6SaErTiGCsjdACLZ//oDLP2QfqbV1
3OfALtsRx+tVf/PD/7bAAFNbQ/Zx/1iUmqNEjdyM8aLqmipUEaI2eQ8cFRWgwhto
qXdu/0IL0upL4GMU9O7gktPk2SpXZPIZy+ml2eitU/yCw9O9NkyOvbmQjCdO1bDV
Ar9a5jH9ft5GpMP83Jq6bEMKnY8GSNy+RYHN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org