Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3JzXmEMRI5xYBV73lMaPy0prE-s.roa
File:                     3JzXmEMRI5xYBV73lMaPy0prE-s.roa (raw, json)
Hash identifier:          6soiIv+L+9pnGb4ys1DJsiR4O0PlRWjvPh14iycd21k=
Subject key identifier:   DC:9C:D7:98:43:11:23:9C:58:05:5E:F7:94:C6:8F:CB:4A:6B:13:EB
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       08F4EAD0
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3JzXmEMRI5xYBV73lMaPy0prE-s.roa
Signing time:             Sat 01 Jan 2022 08:05:24 +0000
ROA not before:           Sat 01 Jan 2022 08:05:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209172
IP address blocks:        80.95.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150268624 (0x8f4ead0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc9cd7984311239c58055ef794c68fcb4a6b13eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:11:c9:52:00:d2:24:1b:44:62:82:c1:e9:
                    a8:59:a6:28:a5:af:d9:7f:00:8e:33:49:65:2f:aa:
                    6c:a0:21:57:92:e4:f7:90:9d:ba:ef:04:38:bb:9f:
                    c0:1e:a9:7a:7c:d5:c6:5c:5c:c7:ed:0f:ac:6f:70:
                    f8:29:52:76:58:bb:ae:71:36:e2:bb:b2:1d:9e:cf:
                    42:03:7f:2a:c9:b8:62:c1:17:8e:09:d3:f6:a2:82:
                    9a:a9:d3:73:e9:de:13:e3:f8:64:d7:2a:4b:ea:00:
                    27:6b:c5:4e:ae:90:e4:ff:d3:8a:c9:f8:52:69:47:
                    08:e4:04:c4:c7:6e:76:0b:0a:07:bb:4b:d5:e8:8c:
                    f4:30:1c:32:46:82:80:82:28:0c:24:f1:85:fe:5a:
                    0c:c9:11:24:30:d5:64:78:d1:c5:39:0a:e0:ea:54:
                    47:c2:2b:48:ca:b1:04:b5:0d:12:1a:f9:14:00:ec:
                    4e:c0:13:25:5f:4e:e2:c9:aa:20:8b:5c:34:f3:bd:
                    24:2b:d5:fb:92:e7:21:67:80:e7:71:9a:fb:95:2b:
                    57:ca:29:af:61:a0:9a:da:59:41:0c:a5:96:5d:71:
                    73:df:a5:e3:72:05:13:80:bf:b0:06:6e:c2:88:81:
                    16:fc:93:9f:51:10:c7:61:eb:8c:ee:a7:eb:e0:15:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9C:D7:98:43:11:23:9C:58:05:5E:F7:94:C6:8F:CB:4A:6B:13:EB
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3JzXmEMRI5xYBV73lMaPy0prE-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.95.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:d8:c6:62:cc:82:3b:d4:ff:7e:bf:4d:80:03:fc:e1:19:
         0d:20:a2:28:29:c6:64:16:8a:d3:1a:ca:d9:0c:ff:5f:13:6e:
         a5:bf:34:2d:c8:bf:ec:4b:22:ba:b2:e3:50:a3:21:19:03:c5:
         91:82:e5:d5:69:04:b0:07:cf:f2:0f:92:cf:59:47:e1:09:f6:
         3d:df:38:9a:c3:cc:22:da:c4:03:74:c5:33:96:d3:41:90:c0:
         d9:fe:2d:13:81:12:ba:f1:30:85:1c:ec:68:29:46:8c:1b:46:
         a2:e0:e9:0b:30:e9:b9:1c:91:2e:05:60:d1:ba:42:12:e4:51:
         8a:a6:80:af:12:25:16:09:c1:69:8e:ad:b7:9d:03:97:54:1d:
         94:c0:6d:1d:e5:8b:54:ee:e0:36:aa:c3:fb:2c:ed:81:34:2a:
         5c:08:ac:7f:6f:a7:70:27:3f:6d:ce:79:1f:f7:29:c7:ab:ae:
         ad:e4:a4:45:05:0b:d3:27:7c:c1:3a:d3:b9:bd:8f:5e:27:d2:
         62:27:98:8f:31:24:02:fe:c9:e7:2b:64:bf:9f:79:ea:05:06:
         b0:4f:7c:cf:34:23:3f:64:4e:97:c4:aa:6b:88:11:8d:00:a2:
         c4:1a:44:bc:8b:d4:47:9f:c6:78:01:d4:1e:a6:ba:73:5a:f3:
         d4:76:cc:da
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECPTq0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIyMDEw
MTA4MDUyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGM5Y2Q3OTg0MzEx
MjM5YzU4MDU1ZWY3OTRjNjhmY2I0YTZiMTNlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKapEclSANIkG0RigsHpqFmmKKWv2X8AjjNJZS+qbKAhV5Lk
95Cduu8EOLufwB6penzVxlxcx+0PrG9w+ClSdli7rnE24ruyHZ7PQgN/Ksm4YsEX
jgnT9qKCmqnTc+neE+P4ZNcqS+oAJ2vFTq6Q5P/Tisn4UmlHCOQExMdudgsKB7tL
1eiM9DAcMkaCgIIoDCTxhf5aDMkRJDDVZHjRxTkK4OpUR8IrSMqxBLUNEhr5FADs
TsATJV9O4smqIItcNPO9JCvV+5LnIWeA53Ga+5UrV8opr2GgmtpZQQylll1xc9+l
43IFE4C/sAZuwoiBFvyTn1EQx2HrjO6n6+AVEHUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTcnNeYQxEjnFgFXveUxo/LSmsT6zAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
LzNKelhtRU1SSTV4WUJWNzNsTWFQeTBwckUtcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBfFDANBgkqhkiG9w0BAQsFAAOC
AQEAb2zYxmLMgjvU/36/TYAD/OEZDSCiKCnGZBaK0xrK2Qz/XxNupb80Lci/7Esi
urLjUKMhGQPFkYLl1WkEsAfP8g+Sz1lH4Qn2Pd84msPMItrEA3TFM5bTQZDA2f4t
E4ESuvEwhRzsaClGjBtGouDpCzDpuRyRLgVg0bpCEuRRiqaArxIlFgnBaY6tt50D
l1QdlMBtHeWLVO7gNqrD+yztgTQqXAisf2+ncCc/bc55H/cpx6uureSkRQUL0yd8
wTrTub2PXifSYieYjzEkAv7J5ytkv5956gUGsE98zzQjP2ROl8Sqa4gRjQCixBpE
vIvUR5/GeAHUHqa6c1rz1HbM2g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org