Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/OgLDC9lLN4M2Jskd6bUtF8Q-wo8.roa
File:                     OgLDC9lLN4M2Jskd6bUtF8Q-wo8.roa (raw, json)
Hash identifier:          TgWtCfGeafyVAliHxRsas2BgqB/QdIAJSJJdztRbZvY=
Subject key identifier:   3A:02:C3:0B:D9:4B:37:83:36:26:C9:1D:E9:B5:2D:17:C4:3E:C2:8F
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       05DAA33C
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/OgLDC9lLN4M2Jskd6bUtF8Q-wo8.roa
Signing time:             Sat 01 Jan 2022 11:02:33 +0000
ROA not before:           Sat 01 Jan 2022 11:02:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        92.249.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98214716 (0x5daa33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Jan  1 11:02:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a02c30bd94b37833626c91de9b52d17c43ec28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:db:00:27:18:c4:4f:d1:4e:a0:96:07:c7:
                    a7:68:c6:f1:82:24:b0:83:54:bb:27:e7:61:a7:e8:
                    cd:f3:6d:fc:ff:f2:0e:ec:c4:a3:9a:72:a6:3e:1f:
                    6b:fc:21:f7:b8:69:2d:32:c2:8e:fc:8c:36:58:2f:
                    b9:72:cb:c6:ca:16:43:df:66:5b:22:d0:a0:0f:6f:
                    f4:5a:de:e9:d2:3d:7e:17:47:06:e7:dd:bc:81:83:
                    80:06:2d:6b:97:3e:3b:b3:54:55:51:a0:ae:4d:03:
                    be:5d:69:53:7b:b2:68:f4:3e:f5:b8:49:25:02:c3:
                    c4:fc:38:6c:d3:6a:54:e4:44:2c:9e:7a:0c:47:d7:
                    02:51:c9:3e:3f:74:2e:f0:82:e5:2b:40:60:22:a4:
                    4a:4f:07:00:18:f8:ea:91:af:1e:9b:7c:bf:45:23:
                    7b:db:db:25:73:5e:08:a6:45:0e:a6:29:00:64:34:
                    8f:b2:af:26:e9:33:ba:5a:32:34:a9:b5:fb:e0:28:
                    4c:dd:1b:af:95:f1:9d:09:2f:c7:0a:79:2a:d2:b7:
                    9e:a1:8d:59:ed:d4:c1:f6:ef:55:e7:d0:74:cc:76:
                    c6:17:b7:98:cd:9c:ce:e0:75:d7:30:37:f8:de:c2:
                    a3:80:28:10:89:18:42:e5:04:9c:9d:bf:c0:cf:1a:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:02:C3:0B:D9:4B:37:83:36:26:C9:1D:E9:B5:2D:17:C4:3E:C2:8F
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/OgLDC9lLN4M2Jskd6bUtF8Q-wo8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:e1:36:b7:85:81:6c:c7:91:3e:6a:d2:42:0a:00:d6:a7:
         76:47:d6:59:ad:6c:77:df:04:fb:1b:50:04:d2:58:d8:a6:ee:
         b3:da:27:48:5a:3f:0c:35:98:d9:d6:9b:ff:ac:2b:ab:9a:72:
         b5:7d:3f:d1:b1:78:4c:b3:a7:4c:5d:00:a9:08:96:40:bf:12:
         fc:37:ad:8c:db:56:bf:ab:cf:9c:62:b6:44:93:2b:e8:ca:e1:
         62:6d:ad:ed:fe:ff:1d:de:35:a4:67:50:10:6b:b2:5a:eb:ba:
         01:08:52:5a:91:89:5b:8d:74:3a:02:0c:46:93:16:0e:0e:7e:
         c7:af:ee:e6:ae:77:08:ca:6d:45:5b:6e:99:65:3d:8d:40:9b:
         93:0e:30:69:4a:68:bc:63:41:8e:d1:50:83:cb:e0:ea:26:b4:
         64:23:dd:cc:e9:4f:6b:55:37:2b:15:3a:d2:7a:0d:5d:88:a2:
         a6:f3:e5:8e:29:83:28:ef:24:69:1b:bb:cd:50:2d:87:76:95:
         e3:cc:1f:29:bf:c0:64:9f:21:cc:15:9c:d4:47:bd:21:f4:20:
         2d:19:3b:13:59:83:b4:7c:55:6e:4f:cd:f5:2d:b6:9b:27:23:
         86:fe:3f:09:0d:1a:5a:59:0d:3f:32:65:bd:6c:ad:38:1d:80:
         e9:54:db:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBdqjPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Y2Y5MTBmMzYyOTFjM2MyMjRkZGI1OTZkOTU2NTQzMTk3ZjE2M2RlMB4XDTIyMDEw
MTExMDIzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2EwMmMzMGJkOTRi
Mzc4MzM2MjZjOTFkZTliNTJkMTdjNDNlYzI4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMks2wAnGMRP0U6glgfHp2jG8YIksINUuyfnYafozfNt/P/y
DuzEo5pypj4fa/wh97hpLTLCjvyMNlgvuXLLxsoWQ99mWyLQoA9v9Fre6dI9fhdH
BufdvIGDgAYta5c+O7NUVVGgrk0Dvl1pU3uyaPQ+9bhJJQLDxPw4bNNqVORELJ56
DEfXAlHJPj90LvCC5StAYCKkSk8HABj46pGvHpt8v0Uje9vbJXNeCKZFDqYpAGQ0
j7KvJukzuloyNKm1++AoTN0br5XxnQkvxwp5KtK3nqGNWe3UwfbvVefQdMx2xhe3
mM2czuB11zA3+N7Co4AoEIkYQuUEnJ2/wM8anPECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ6AsML2Us3gzYmyR3ptS0XxD7CjzAfBgNVHSMEGDAWgBSs+RDzYpHDwiTd
tZbZVlQxl/Fj3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JQa1E4MktSdzhJazNiV1cyVlpVTVpmeFk5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvMWY1ZTA3LTMyYjYtNDExNC04YjBkLWQzYjU4ZjY5ODE0OC8x
L09nTERDOWxMTjRNMkpza2Q2YlV0RjhRLXdvOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
MWY1ZTA3LTMyYjYtNDExNC04YjBkLWQzYjU4ZjY5ODE0OC8xL3JQa1E4MktSdzhJ
azNiV1cyVlpVTVpmeFk5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFz5BTANBgkqhkiG9w0BAQsFAAOC
AQEAZWrhNreFgWzHkT5q0kIKANandkfWWa1sd98E+xtQBNJY2Kbus9onSFo/DDWY
2dab/6wrq5pytX0/0bF4TLOnTF0AqQiWQL8S/DetjNtWv6vPnGK2RJMr6MrhYm2t
7f7/Hd41pGdQEGuyWuu6AQhSWpGJW410OgIMRpMWDg5+x6/u5q53CMptRVtumWU9
jUCbkw4waUpovGNBjtFQg8vg6ia0ZCPdzOlPa1U3KxU60noNXYiipvPljimDKO8k
aRu7zVAth3aV48wfKb/AZJ8hzBWc1Ee9IfQgLRk7E1mDtHxVbk/N9S22mycjhv4/
CQ0aWlkNPzJlvWytOB2A6VTbLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org