Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/ZhdI4y7P9xuJZpUKqaGNgIZW9VE.roa
File:                     ZhdI4y7P9xuJZpUKqaGNgIZW9VE.roa (raw, json)
Hash identifier:          iFRBbKyFstYgRmJgq1NVQzHrv1+oS57a5bW1jcUmano=
Subject key identifier:   66:17:48:E3:2E:CF:F7:1B:89:66:95:0A:A9:A1:8D:80:86:56:F5:51
Certificate issuer:       /CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
Certificate serial:       0181FB9D2EECFB83E9C52DB38C9D912BD290
Authority key identifier: E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/ZhdI4y7P9xuJZpUKqaGNgIZW9VE.roa
Signing time:             Thu 14 Jul 2022 07:29:51 +0000
ROA not before:           Thu 14 Jul 2022 07:29:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        91.227.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fb:9d:2e:ec:fb:83:e9:c5:2d:b3:8c:9d:91:2b:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
        Validity
            Not Before: Jul 14 07:29:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=661748e32ecff71b8966950aa9a18d808656f551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:82:9b:86:03:ae:9c:94:7c:a4:09:82:1e:
                    89:f3:ec:18:9a:06:bc:71:74:d9:ca:35:63:3d:f2:
                    78:88:9d:3c:85:16:59:b1:c4:93:96:ed:3e:ab:31:
                    af:e6:c0:61:99:06:3b:76:32:83:bb:13:06:c8:16:
                    2e:37:ce:f3:ba:d4:fa:05:5e:fe:4a:c2:42:93:29:
                    25:dd:94:35:28:3e:15:5d:6a:ea:d3:d9:dd:15:5e:
                    d2:39:5d:ea:cd:a8:1b:c1:0f:96:fd:ce:a0:b0:02:
                    1f:69:f9:e4:39:c2:58:93:3d:42:2c:be:d0:28:2e:
                    85:fa:53:25:f8:62:30:a2:3f:19:48:39:c4:c7:ce:
                    dd:6a:f5:2e:99:b9:b9:65:9d:a2:7e:7f:2a:33:81:
                    02:ae:ac:46:02:48:76:ee:85:9f:60:1e:74:7d:fe:
                    ef:63:5f:58:32:71:69:f7:4e:df:df:99:51:44:41:
                    4c:68:92:14:b1:a7:a4:91:68:5b:38:22:75:24:ed:
                    0f:80:d8:01:26:97:39:05:80:92:d2:68:27:a2:df:
                    eb:1f:90:1f:75:7f:69:0a:7b:7d:ed:0e:21:d4:dc:
                    0b:41:cb:75:2b:91:fe:f9:47:68:2d:55:00:b9:c6:
                    51:d8:5d:a0:a5:73:94:3b:40:36:bc:fc:a9:15:eb:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:48:E3:2E:CF:F7:1B:89:66:95:0A:A9:A1:8D:80:86:56:F5:51
            X509v3 Authority Key Identifier:
                keyid:E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/ZhdI4y7P9xuJZpUKqaGNgIZW9VE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/6WxjtJSw0IpVqqGAX2INuNrSVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:38:ff:a8:ff:28:8e:10:af:3f:de:0b:4b:97:61:a9:48:30:
         2f:d6:22:a7:ed:e2:85:e0:41:e0:9d:70:0e:10:75:28:a5:2a:
         61:04:ba:0a:c0:1a:98:5e:72:48:25:4f:f8:e9:9c:6e:48:3b:
         3d:c0:c6:f1:fd:51:25:bf:0e:bd:7a:6d:a5:cc:13:eb:04:b4:
         ee:d6:b1:92:19:c6:cb:15:f8:a4:9e:41:94:82:0b:95:58:7f:
         27:18:5a:07:44:b2:cf:07:eb:d0:87:79:38:81:0c:cb:5a:ad:
         e7:01:04:eb:f7:ee:b9:ac:14:56:28:50:a5:30:43:54:64:d6:
         4d:1e:97:2c:4a:d6:e6:77:c8:4e:01:89:fa:93:57:85:05:90:
         39:59:4c:33:de:8f:6c:0b:b5:c4:5c:3b:5b:6e:c7:62:cb:48:
         62:7a:93:e4:91:9c:3e:a3:6b:09:a8:76:8e:27:a2:6c:94:c0:
         33:d8:ef:13:e8:47:04:d4:8d:ce:23:73:a0:8a:24:d6:78:cb:
         35:5e:09:71:06:4a:e5:2b:1e:9e:c6:06:6d:3b:03:3c:46:c7:
         db:23:58:3b:c1:62:ba:ff:fb:4c:74:86:8c:a1:be:cf:32:b5:
         54:42:50:f0:9c:41:35:7c:be:58:48:13:c8:7c:9d:d9:67:b9:
         54:25:d7:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH7nS7s+4PpxS2zjJ2RK9KQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmM2M2I0OTRiMGQwOGE1NWFhYTE4MDVmNjIwZGI4ZGFk
MjU1N2YwHhcNMjIwNzE0MDcyOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjE3NDhlMzJlY2ZmNzFiODk2Njk1MGFhOWExOGQ4MDg2NTZmNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPWCm4YDrpyUfKQJgh6J8+wYmga8
cXTZyjVjPfJ4iJ08hRZZscSTlu0+qzGv5sBhmQY7djKDuxMGyBYuN87zutT6BV7+
SsJCkykl3ZQ1KD4VXWrq09ndFV7SOV3qzagbwQ+W/c6gsAIfafnkOcJYkz1CLL7Q
KC6F+lMl+GIwoj8ZSDnEx87davUumbm5ZZ2ifn8qM4ECrqxGAkh27oWfYB50ff7v
Y19YMnFp907f35lRREFMaJIUsaekkWhbOCJ1JO0PgNgBJpc5BYCS0mgnot/rH5Af
dX9pCnt97Q4h1NwLQct1K5H++UdoLVUAucZR2F2gpXOUO0A2vPypFeuhnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYXSOMuz/cbiWaVCqmhjYCGVvVRMB8GA1UdIwQY
MBaAFOlsY7SUsNCKVaqhgF9iDbja0lV/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNld4anRKU3cwSXBWcXFHQVgySU51TnJTVlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zNDJmMzktY2RiMC00ZDUwLTljNzIt
M2EzODYyMTE4YTBmLzEvWmhkSTR5N1A5eHVKWnBVS3FhR05nSVpXOVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zNDJmMzktY2RiMC00ZDUwLTljNzItM2EzODYyMTE4YTBm
LzEvNld4anRKU3cwSXBWcXFHQVgySU51TnJTVlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+O4MA0G
CSqGSIb3DQEBCwUAA4IBAQA2OP+o/yiOEK8/3gtLl2GpSDAv1iKn7eKF4EHgnXAO
EHUopSphBLoKwBqYXnJIJU/46ZxuSDs9wMbx/VElvw69em2lzBPrBLTu1rGSGcbL
FfiknkGUgguVWH8nGFoHRLLPB+vQh3k4gQzLWq3nAQTr9+65rBRWKFClMENUZNZN
HpcsStbmd8hOAYn6k1eFBZA5WUwz3o9sC7XEXDtbbsdiy0hiepPkkZw+o2sJqHaO
J6JslMAz2O8T6EcE1I3OI3OgiiTWeMs1XglxBkrlKx6exgZtOwM8RsfbI1g7wWK6
//tMdIaMob7PMrVUQlDwnEE1fL5YSBPIfJ3ZZ7lUJddT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-fra.rpki-client.org