Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/EPdeyAlrJ1l9_7C9jFqCfJoLq6o.roa
File:                     EPdeyAlrJ1l9_7C9jFqCfJoLq6o.roa (raw, json)
Hash identifier:          SjSlsYYN4YlD/+6xKw9KOtS808uo2Knib2odNrTz4Lk=
Subject key identifier:   10:F7:5E:C8:09:6B:27:59:7D:FF:B0:BD:8C:5A:82:7C:9A:0B:AB:AA
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       04DCEBBA
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/EPdeyAlrJ1l9_7C9jFqCfJoLq6o.roa
Signing time:             Wed 04 May 2022 12:43:49 +0000
ROA not before:           Wed 04 May 2022 12:43:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        92.53.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81587130 (0x4dcebba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: May  4 12:43:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10f75ec8096b27597dffb0bd8c5a827c9a0babaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:2c:d9:89:c4:17:19:3e:86:09:bd:6a:e4:
                    bb:be:a8:db:bd:48:d7:f5:7c:32:c0:90:e0:64:88:
                    e6:45:93:60:4b:d3:33:82:d0:9c:6c:50:9d:ee:4a:
                    6b:f9:2f:35:8d:3c:61:c8:a7:46:e7:1d:4e:c1:f7:
                    00:f8:79:a8:60:19:19:06:1a:ce:7a:d8:11:80:f3:
                    ae:b9:99:27:e2:3a:71:a5:72:e1:a3:c4:46:b8:11:
                    66:10:4c:f6:f9:13:b9:60:1e:54:f5:16:64:78:f3:
                    da:8e:6e:56:2b:e8:2d:65:8a:97:9d:a6:c1:e2:e0:
                    27:00:2c:45:ed:86:4a:57:e5:85:64:25:d0:8b:79:
                    01:97:db:9e:d1:16:e3:02:06:9b:2c:65:61:14:b6:
                    95:15:a3:d2:39:8a:5a:54:59:52:ac:e1:d4:13:97:
                    82:dd:cd:d3:86:55:ea:96:29:53:e6:a3:a6:91:8b:
                    9b:a2:15:50:a8:18:4e:cc:eb:99:e6:6f:49:07:0f:
                    08:7a:80:bb:d6:c3:b7:d4:2e:b2:b0:85:d1:f6:5e:
                    32:e8:ce:45:85:b4:22:a4:f2:27:da:90:a6:3c:82:
                    cb:e4:ed:9a:46:ea:27:23:1a:39:a5:1b:4d:9c:77:
                    c4:7c:c4:83:db:5d:13:d7:71:af:44:5d:a8:42:bc:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F7:5E:C8:09:6B:27:59:7D:FF:B0:BD:8C:5A:82:7C:9A:0B:AB:AA
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/EPdeyAlrJ1l9_7C9jFqCfJoLq6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d8:d8:c0:73:ca:3f:e3:d3:4f:98:ad:a6:e4:26:4b:69:6d:
         67:b3:b5:b2:56:63:30:8e:a5:98:d1:b1:a0:f2:da:c7:01:37:
         61:cc:a5:e3:26:96:4a:06:90:c5:19:5d:e6:dc:81:7a:58:78:
         c3:e7:c0:29:db:0d:9c:d1:f8:54:4e:bb:97:7d:f8:96:d7:97:
         f3:05:ea:d8:3a:75:a4:06:c4:ec:dc:6f:5f:f1:e2:07:37:f5:
         55:cb:9e:8a:8e:85:13:45:e3:13:4c:bb:8b:19:e4:99:77:f1:
         6a:2e:91:e5:ad:90:9f:40:33:39:f2:46:72:d6:15:a8:ee:c1:
         24:4e:88:94:15:76:c9:be:7f:cb:aa:41:30:4c:dd:97:4c:ba:
         ec:e6:d4:2f:9e:65:7f:80:7c:5c:0f:34:3e:da:27:1d:87:c3:
         28:ee:50:3f:64:81:d1:f6:29:53:8e:99:d5:69:5a:b1:da:e9:
         de:37:cd:8c:9d:d6:e6:53:65:07:20:02:48:b0:9c:a3:dc:25:
         04:31:f9:87:28:b4:f5:52:93:2e:8d:e9:a6:c0:51:48:42:31:
         be:27:da:36:5a:88:56:a0:fa:1c:d8:e4:46:60:fb:06:76:62:
         16:05:be:4a:f7:0c:73:4d:4f:66:1b:0a:b5:ce:8f:af:e6:60:
         9a:10:2e:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBNzrujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZTc3OWU1NjIzOGI2ZjJlYTA2OGVkZTRlMjBhZWYwMGM5MDQxMzJiMB4XDTIyMDUw
NDEyNDM0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBmNzVlYzgwOTZi
Mjc1OTdkZmZiMGJkOGM1YTgyN2M5YTBiYWJhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI05LNmJxBcZPoYJvWrku76o271I1/V8MsCQ4GSI5kWTYEvT
M4LQnGxQne5Ka/kvNY08YcinRucdTsH3APh5qGAZGQYaznrYEYDzrrmZJ+I6caVy
4aPERrgRZhBM9vkTuWAeVPUWZHjz2o5uVivoLWWKl52mweLgJwAsRe2GSlflhWQl
0It5AZfbntEW4wIGmyxlYRS2lRWj0jmKWlRZUqzh1BOXgt3N04ZV6pYpU+ajppGL
m6IVUKgYTszrmeZvSQcPCHqAu9bDt9QusrCF0fZeMujORYW0IqTyJ9qQpjyCy+Tt
mkbqJyMaOaUbTZx3xHzEg9tdE9dxr0RdqEK8HH0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQQ917ICWsnWX3/sL2MWoJ8mgurqjAfBgNVHSMEGDAWgBT+d55WI4tvLqBo
7eTiCu8AyQQTKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19uZWVWaU9MYnk2Z2FPM2s0Z3J2QU1rRUV5cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNGRlNTk4LTZiMDMtNGJlZi1hYjE0LTMzODk0OTEzZGNiNy8x
L0VQZGV5QWxySjFsOV83QzlqRnFDZkpvTHE2by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NGRlNTk4LTZiMDMtNGJlZi1hYjE0LTMzODk0OTEzZGNiNy8xL19uZWVWaU9MYnk2
Z2FPM2s0Z3J2QU1rRUV5cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlw1sDANBgkqhkiG9w0BAQsFAAOC
AQEAj9jYwHPKP+PTT5itpuQmS2ltZ7O1slZjMI6lmNGxoPLaxwE3Ycyl4yaWSgaQ
xRld5tyBelh4w+fAKdsNnNH4VE67l334lteX8wXq2Dp1pAbE7NxvX/HiBzf1Vcue
io6FE0XjE0y7ixnkmXfxai6R5a2Qn0AzOfJGctYVqO7BJE6IlBV2yb5/y6pBMEzd
l0y67ObUL55lf4B8XA80PtonHYfDKO5QP2SB0fYpU46Z1Wlasdrp3jfNjJ3W5lNl
ByACSLCco9wlBDH5hyi09VKTLo3ppsBRSEIxvifaNlqIVqD6HNjkRmD7BnZiFgW+
SvcMc01PZhsKtc6Pr+ZgmhAuQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org