Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/7Vd5_-z5iSXmvdchr7Mjpm-C3AI.roa
File:                     7Vd5_-z5iSXmvdchr7Mjpm-C3AI.roa (raw, json)
Hash identifier:          Hi+aCcImGLZr69JUeKSvxusGO0BaHZJXm4tEGjAlLp0=
Subject key identifier:   ED:57:79:FF:EC:F9:89:25:E6:BD:D7:21:AF:B3:23:A6:6F:82:DC:02
Certificate issuer:       /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial:       06C36B4A
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/7Vd5_-z5iSXmvdchr7Mjpm-C3AI.roa
Signing time:             Sat 01 Jan 2022 12:03:16 +0000
ROA not before:           Sat 01 Jan 2022 12:03:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25540
IP address blocks:        91.226.18.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113470282 (0x6c36b4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
        Validity
            Not Before: Jan  1 12:03:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed5779ffecf98925e6bdd721afb323a66f82dc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:6c:b7:cf:a7:1c:a8:93:52:62:73:d3:aa:
                    80:73:ad:32:cc:b0:5d:72:84:8a:30:34:b6:c7:2d:
                    42:16:70:56:0e:fa:63:90:46:f5:e4:51:a7:ec:60:
                    08:01:61:39:a0:54:a5:b8:4c:fc:f4:b6:ce:a2:59:
                    da:6c:15:9d:ec:5c:11:5b:9f:b5:b8:da:3b:ce:b7:
                    7e:99:ef:2f:ff:a4:42:cc:31:ce:91:7d:79:d5:02:
                    c1:8f:6a:69:95:dd:bf:84:b4:b8:4f:ab:79:11:99:
                    34:aa:82:c0:3d:f3:a3:1e:28:10:91:17:11:07:ad:
                    86:58:ae:2b:a8:20:31:f8:85:b5:4a:84:0d:36:cf:
                    ef:3c:f7:3f:13:04:d8:0c:0f:4e:5c:04:95:97:1e:
                    40:4d:4d:0f:29:52:77:e5:24:a3:43:36:21:89:1a:
                    37:f3:24:c7:02:28:d0:d0:3f:3d:b6:b8:11:8e:80:
                    a6:b4:b6:d1:9c:10:99:3a:4b:87:e5:c2:ab:e4:e4:
                    cf:3a:1a:e1:2b:83:d8:60:3c:49:6a:2c:08:5a:f2:
                    0c:91:82:fc:6d:fc:8d:c0:2f:d4:3b:20:05:d7:80:
                    0f:e1:45:1d:94:51:b7:be:2f:ff:88:5c:c3:53:17:
                    ab:74:5d:fb:ff:ac:f6:2c:12:25:90:a5:91:93:56:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:57:79:FF:EC:F9:89:25:E6:BD:D7:21:AF:B3:23:A6:6F:82:DC:02
            X509v3 Authority Key Identifier:
                keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/7Vd5_-z5iSXmvdchr7Mjpm-C3AI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:47:63:e3:62:15:a9:5e:56:14:6b:d7:03:cf:54:f2:57:
         61:3b:9c:96:d5:c3:85:de:ce:f7:34:8a:9a:76:d9:8d:fc:66:
         7b:fe:35:7c:47:a3:99:36:86:45:a3:1e:56:10:61:83:07:82:
         af:dd:a6:28:27:ad:e4:f8:b4:e4:ce:7a:2f:6b:22:2e:49:ae:
         d4:4a:d6:93:68:21:8b:6b:4f:41:d5:ac:20:84:e7:94:09:e3:
         79:c7:09:8c:91:59:01:c9:97:da:11:ce:a8:3e:44:4f:8e:b8:
         8e:7e:ab:79:33:c5:52:6a:66:b5:84:9f:a4:eb:b7:90:9f:42:
         29:4a:cf:33:df:74:d5:ab:80:87:0e:60:1b:51:63:b3:6a:ca:
         1d:a6:39:4f:3d:9a:39:a8:56:76:47:75:f2:c7:8c:1b:02:ea:
         a5:4d:b0:b5:b9:96:2a:d5:06:0e:b4:af:f5:c0:33:c8:8c:1a:
         c9:5e:ec:08:ae:db:1e:85:04:9f:b7:dd:cf:4b:ed:1d:0c:3a:
         e7:13:7c:34:62:b5:8d:40:e3:21:4a:34:f6:57:28:3f:aa:b2:
         99:4a:0d:1d:bf:81:de:95:79:a1:27:64:ce:9f:de:e5:28:73:
         69:61:52:ff:1a:84:af:81:5c:ec:23:b7:3e:85:f8:4b:ca:40:
         a3:08:63:5c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBsNrSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OTdkYzZkOGRmNWQwODRlOTIzMDYzNDg4ZDM3ZDNhZTAxMTQ3NzdiMB4XDTIyMDEw
MTEyMDMxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQ1Nzc5ZmZlY2Y5
ODkyNWU2YmRkNzIxYWZiMzIzYTY2ZjgyZGMwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcwbLfPpxyok1Jic9OqgHOtMsywXXKEijA0tsctQhZwVg76
Y5BG9eRRp+xgCAFhOaBUpbhM/PS2zqJZ2mwVnexcEVuftbjaO863fpnvL/+kQswx
zpF9edUCwY9qaZXdv4S0uE+reRGZNKqCwD3zox4oEJEXEQethliuK6ggMfiFtUqE
DTbP7zz3PxME2AwPTlwElZceQE1NDylSd+Uko0M2IYkaN/MkxwIo0NA/Pba4EY6A
prS20ZwQmTpLh+XCq+Tkzzoa4SuD2GA8SWosCFryDJGC/G38jcAv1DsgBdeAD+FF
HZRRt74v/4hcw1MXq3Rd+/+s9iwSJZClkZNWbM0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTtV3n/7PmJJea91yGvsyOmb4LcAjAfBgNVHSMEGDAWgBTJfcbY310ITpIw
Y0iNN9OuARR3ezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lYM0cyTjlkQ0U2U01HTklqVGZUcmdFVWQzcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvMGY2OTIwLTI3NzAtNGNiZS1hNjRmLTJhNmJjMzgzMmEwYS8x
LzdWZDVfLXo1aVNYbXZkY2hyN01qcG0tQzNBSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
MGY2OTIwLTI3NzAtNGNiZS1hNjRmLTJhNmJjMzgzMmEwYS8xL3lYM0cyTjlkQ0U2
U01HTklqVGZUcmdFVWQzcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVviEjANBgkqhkiG9w0BAQsFAAOC
AQEAjgVHY+NiFaleVhRr1wPPVPJXYTucltXDhd7O9zSKmnbZjfxme/41fEejmTaG
RaMeVhBhgweCr92mKCet5Pi05M56L2siLkmu1ErWk2ghi2tPQdWsIITnlAnjeccJ
jJFZAcmX2hHOqD5ET464jn6reTPFUmpmtYSfpOu3kJ9CKUrPM9901auAhw5gG1Fj
s2rKHaY5Tz2aOahWdkd18seMGwLqpU2wtbmWKtUGDrSv9cAzyIwayV7sCK7bHoUE
n7fdz0vtHQw65xN8NGK1jUDjIUo09lcoP6qymUoNHb+B3pV5oSdkzp/e5ShzaWFS
/xqEr4Fc7CO3PoX4S8pAowhjXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:41 2024 by rpki-client on console-fra.rpki-client.org