Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/eJHaiMaVUyCwKja5_z9yV33e6nU.roa
File:                     eJHaiMaVUyCwKja5_z9yV33e6nU.roa (raw, json)
Hash identifier:          bc1qs1Txec+jf4/hjzrZsGdbUS20xNrCkyfcXzWcR/Y=
Subject key identifier:   78:91:DA:88:C6:95:53:20:B0:2A:36:B9:FF:3F:72:57:7D:DE:EA:75
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       0634BD79
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/eJHaiMaVUyCwKja5_z9yV33e6nU.roa
Signing time:             Sat 01 Jan 2022 10:01:24 +0000
ROA not before:           Sat 01 Jan 2022 10:01:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205056
IP address blocks:        2a02:7080:2000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104119673 (0x634bd79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: Jan  1 10:01:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7891da88c6955320b02a36b9ff3f72577ddeea75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:d9:5e:ec:7a:1c:48:0e:d2:cf:c5:51:da:
                    19:16:c9:93:4f:17:7b:e5:5a:57:37:91:13:c3:39:
                    06:d7:13:8d:e0:47:a7:ba:a7:3f:2d:2c:54:12:fe:
                    57:47:17:84:01:63:bc:bf:45:8f:0d:f3:a8:da:03:
                    ef:d5:cd:89:ec:eb:d1:30:02:b6:56:09:3e:cb:86:
                    23:6a:ff:45:8b:4a:36:fb:76:a8:be:14:28:b9:7a:
                    77:35:1a:aa:4d:04:40:9e:30:cd:69:9e:5e:8d:8e:
                    4b:e4:d1:b3:58:57:9d:69:aa:af:ca:b5:80:39:e6:
                    d0:fd:ed:91:ec:04:61:2e:38:78:96:11:38:e4:91:
                    92:83:22:e1:de:ac:98:2a:e0:ab:70:f2:fd:31:e1:
                    ab:ba:21:a9:f8:38:68:2f:07:06:4c:c9:48:fe:b6:
                    c8:c7:6c:56:4b:ef:ad:e3:a7:92:a6:3c:7e:f1:90:
                    d9:53:04:86:eb:0d:97:8b:64:00:68:c4:9e:ea:56:
                    20:e1:d6:5d:39:1b:88:84:1d:8c:48:3e:b9:02:fc:
                    83:aa:44:b7:89:9e:b0:df:a7:72:39:d9:cc:92:99:
                    99:5e:dd:bb:a5:f6:7d:ad:f8:fe:84:45:72:1a:e1:
                    2c:04:db:26:73:5e:ad:75:9c:eb:ce:f7:5f:c0:75:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:91:DA:88:C6:95:53:20:B0:2A:36:B9:FF:3F:72:57:7D:DE:EA:75
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/eJHaiMaVUyCwKja5_z9yV33e6nU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:7080:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:af:d9:37:42:aa:29:db:a8:94:d8:c5:fb:60:c3:cb:65:e5:
         52:74:82:7b:b4:cc:5d:49:cc:08:47:46:df:be:a7:90:2c:cb:
         78:b5:63:bf:4e:4b:39:42:1f:c7:bb:64:66:69:9b:77:d1:23:
         75:c1:3e:a7:a9:ee:df:64:95:f5:5c:bd:b2:3c:11:30:66:a5:
         49:1b:60:66:6b:6c:02:bd:67:e9:2f:3b:41:34:1f:b6:49:c6:
         b6:ae:c4:f8:76:ba:39:ce:83:0e:65:6a:5f:0b:6c:bf:54:65:
         e8:f3:d8:67:49:e7:40:c0:e2:75:65:05:7e:dd:33:63:8f:93:
         21:81:ea:9b:79:f0:2c:0f:01:4c:fa:51:6a:0e:b2:3d:a1:df:
         8b:97:7d:1b:ef:06:32:30:81:54:32:f0:ee:c2:e8:f1:33:06:
         64:31:0a:66:6f:26:2a:f0:6a:3d:8f:6e:41:3d:c1:8a:8d:d9:
         03:6b:8b:24:dd:4f:98:80:4c:ea:a0:58:68:09:0b:35:56:ba:
         0b:40:a2:2d:04:26:a9:7c:26:0d:45:4d:73:d6:68:fe:6e:2d:
         18:bd:3b:d1:7b:19:d5:0e:88:ee:ab:d1:2e:8d:be:f5:7c:49:
         fa:5c:7a:d2:61:3c:14:1c:10:44:39:cd:07:66:45:4a:e0:04:
         f8:b4:c4:70
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBjS9eTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZWNjMjI5ZTU2OTkxMDU4Mjg1NjRiNzg1MDlmM2I3MmYzMDkwYTIxMB4XDTIyMDEw
MTEwMDEyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzg5MWRhODhjNjk1
NTMyMGIwMmEzNmI5ZmYzZjcyNTc3ZGRlZWE3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK1A2V7sehxIDtLPxVHaGRbJk08Xe+VaVzeRE8M5BtcTjeBH
p7qnPy0sVBL+V0cXhAFjvL9Fjw3zqNoD79XNiezr0TACtlYJPsuGI2r/RYtKNvt2
qL4UKLl6dzUaqk0EQJ4wzWmeXo2OS+TRs1hXnWmqr8q1gDnm0P3tkewEYS44eJYR
OOSRkoMi4d6smCrgq3Dy/THhq7ohqfg4aC8HBkzJSP62yMdsVkvvreOnkqY8fvGQ
2VMEhusNl4tkAGjEnupWIOHWXTkbiIQdjEg+uQL8g6pEt4mesN+ncjnZzJKZmV7d
u6X2fa34/oRFchrhLATbJnNerXWc6873X8B1jf8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR4kdqIxpVTILAqNrn/P3JXfd7qdTAfBgNVHSMEGDAWgBSOzCKeVpkQWChW
S3hQnzty8wkKITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pzd2lubGFaRUZnb1ZrdDRVSjg3Y3ZNSkNpRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTUvMzA2MGJkLWZlYjItNDk4Ni1iOWUzLTNjOWViYzQ1NjYyMy8x
L2VKSGFpTWFWVXlDd0tqYTVfejl5VjMzZTZuVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUv
MzA2MGJkLWZlYjItNDk4Ni1iOWUzLTNjOWViYzQ1NjYyMy8xL2pzd2lubGFaRUZn
b1ZrdDRVSjg3Y3ZNSkNpRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoCcIAgADANBgkqhkiG9w0BAQsF
AAOCAQEAdK/ZN0KqKduolNjF+2DDy2XlUnSCe7TMXUnMCEdG376nkCzLeLVjv05L
OUIfx7tkZmmbd9EjdcE+p6nu32SV9Vy9sjwRMGalSRtgZmtsAr1n6S87QTQftknG
tq7E+Ha6Oc6DDmVqXwtsv1Rl6PPYZ0nnQMDidWUFft0zY4+TIYHqm3nwLA8BTPpR
ag6yPaHfi5d9G+8GMjCBVDLw7sLo8TMGZDEKZm8mKvBqPY9uQT3Bio3ZA2uLJN1P
mIBM6qBYaAkLNVa6C0CiLQQmqXwmDUVNc9Zo/m4tGL070XsZ1Q6I7qvRLo2+9XxJ
+lx60mE8FBwQRDnNB2ZFSuAE+LTEcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:47 2024 by rpki-client on console-fra.rpki-client.org