Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/8MgFCocln_HD40B42kxMhjZ_Gr0.roa
File:                     8MgFCocln_HD40B42kxMhjZ_Gr0.roa (raw, json)
Hash identifier:          eXpN/ZroiIcIbZp0EWYF8usFg6GI8j/Zeb/GN5uFGGs=
Subject key identifier:   F0:C8:05:0A:87:25:9F:F1:C3:E3:40:78:DA:4C:4C:86:36:7F:1A:BD
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       0183E4CB607FE3BF935219C4222839737F05
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/8MgFCocln_HD40B42kxMhjZ_Gr0.roa
Signing time:             Mon 17 Oct 2022 07:14:36 +0000
ROA not before:           Mon 17 Oct 2022 07:14:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        92.53.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e4:cb:60:7f:e3:bf:93:52:19:c4:22:28:39:73:7f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Oct 17 07:14:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0c8050a87259ff1c3e34078da4c4c86367f1abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:1f:e8:60:00:5d:77:24:dd:ce:4c:5a:74:
                    a5:f4:00:ce:b6:1a:3b:ca:30:75:34:b2:9b:af:b6:
                    e2:8f:d1:11:56:78:c8:f6:5d:3e:8a:02:26:c9:69:
                    37:0e:6f:fe:5e:49:73:4d:0d:7f:f8:78:e3:c2:2c:
                    93:f6:2f:1c:82:f8:d9:17:66:24:6c:d7:f2:b6:a8:
                    31:59:a6:46:e7:81:67:b2:a1:df:71:f5:6c:30:a2:
                    7c:17:63:ca:2b:c3:a2:d8:db:5e:b5:57:ae:d5:b4:
                    c0:f5:43:17:b6:c7:c3:36:27:95:8a:60:a7:fc:07:
                    6b:78:ae:db:d8:ec:03:1c:91:db:f9:13:cb:95:9c:
                    03:b7:0e:64:93:59:28:f0:bb:19:9c:10:aa:a6:0f:
                    94:eb:7d:ed:ef:3e:d5:a0:00:53:ce:90:5d:b2:32:
                    3f:a3:3a:8c:ea:bf:bd:45:02:3b:43:e9:4e:ce:d3:
                    f5:fc:d9:97:03:56:bb:b0:0c:77:e3:7b:13:49:d8:
                    6e:2c:e9:a7:23:e8:64:e5:e9:7b:68:38:ca:2f:55:
                    b9:02:5b:70:9a:33:5e:b2:a2:6f:a7:16:13:26:12:
                    a5:2a:6a:de:e8:3b:79:45:74:95:46:f2:ca:4b:25:
                    f9:2a:c1:e6:cc:a1:9b:c5:05:d6:72:d5:6c:d9:95:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C8:05:0A:87:25:9F:F1:C3:E3:40:78:DA:4C:4C:86:36:7F:1A:BD
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/8MgFCocln_HD40B42kxMhjZ_Gr0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:fc:45:71:18:ad:05:5c:74:8c:f9:f0:aa:55:c7:8a:31:3d:
         42:b3:76:40:3e:e3:1b:d0:53:b8:14:2c:f7:c2:d2:d8:8e:d0:
         e2:e5:da:36:4c:46:a2:16:a9:6d:85:74:5d:f8:7c:0b:50:66:
         a5:bb:d2:b6:b9:8a:e7:36:60:48:4c:a4:20:c1:34:8c:c9:43:
         95:5d:a9:01:07:59:3c:5c:6c:40:2b:29:5c:00:d9:7a:dc:65:
         df:e0:85:1a:b6:26:14:33:31:47:89:84:e4:7a:82:00:55:ff:
         8d:62:a6:bc:81:1a:68:98:c9:90:bb:3b:4b:29:62:e0:f0:ac:
         77:14:69:24:6f:e6:87:bb:79:80:99:32:f8:60:f5:e4:b0:26:
         03:00:9f:c6:8a:2d:c1:ad:bb:16:58:44:0f:1f:cc:34:1a:54:
         5b:f3:61:76:33:78:09:3d:40:ac:a7:6c:86:85:d6:a9:99:2e:
         1c:4b:be:96:cb:59:1d:a8:4d:3a:6f:04:63:da:d0:f5:2d:a7:
         ea:ae:a9:10:0e:4b:77:47:f1:a6:48:6d:9e:2c:61:63:c8:1f:
         d3:4d:cb:60:51:84:df:b5:76:39:e8:bb:5c:d7:42:62:52:41:
         91:41:99:db:2b:1a:75:7f:77:da:a7:a9:e9:ef:33:5e:73:6d:
         bd:5c:6b:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPky2B/47+TUhnEIig5c38FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjIxMDE3MDcxNDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGM4MDUwYTg3MjU5ZmYxYzNlMzQwNzhkYTRjNGM4NjM2N2YxYWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSYf6GAAXXck3c5MWnSl9ADOtho7
yjB1NLKbr7bij9ERVnjI9l0+igImyWk3Dm/+XklzTQ1/+HjjwiyT9i8cgvjZF2Yk
bNfytqgxWaZG54FnsqHfcfVsMKJ8F2PKK8Oi2NtetVeu1bTA9UMXtsfDNieVimCn
/AdreK7b2OwDHJHb+RPLlZwDtw5kk1ko8LsZnBCqpg+U633t7z7VoABTzpBdsjI/
ozqM6r+9RQI7Q+lOztP1/NmXA1a7sAx343sTSdhuLOmnI+hk5el7aDjKL1W5Altw
mjNesqJvpxYTJhKlKmre6Dt5RXSVRvLKSyX5KsHmzKGbxQXWctVs2ZXUQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPDIBQqHJZ/xw+NAeNpMTIY2fxq9MB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvOE1nRkNvY2xuX0hENDBCNDJreE1oalpfR3IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDW0MA0G
CSqGSIb3DQEBCwUAA4IBAQCG/EVxGK0FXHSM+fCqVceKMT1Cs3ZAPuMb0FO4FCz3
wtLYjtDi5do2TEaiFqlthXRd+HwLUGalu9K2uYrnNmBITKQgwTSMyUOVXakBB1k8
XGxAKylcANl63GXf4IUatiYUMzFHiYTkeoIAVf+NYqa8gRpomMmQuztLKWLg8Kx3
FGkkb+aHu3mAmTL4YPXksCYDAJ/Gii3BrbsWWEQPH8w0GlRb82F2M3gJPUCsp2yG
hdapmS4cS76Wy1kdqE06bwRj2tD1LafqrqkQDkt3R/GmSG2eLGFjyB/TTctgUYTf
tXY56Ltc10JiUkGRQZnbKxp1f3fap6np7zNec229XGta
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org