Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/_kT9hbBsYVGVTlDwxfv7AQ3Zqsc.roa
File:                     _kT9hbBsYVGVTlDwxfv7AQ3Zqsc.roa (raw, json)
Hash identifier:          /+dkYWsatMCO/mhWVWkRBFQtTPvSva+y9Lse2dUTnx0=
Subject key identifier:   FE:44:FD:85:B0:6C:61:51:95:4E:50:F0:C5:FB:FB:01:0D:D9:AA:C7
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       075C40AD
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/_kT9hbBsYVGVTlDwxfv7AQ3Zqsc.roa
Signing time:             Wed 08 Jun 2022 06:45:02 +0000
ROA not before:           Wed 08 Jun 2022 06:45:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142111
IP address blocks:        193.228.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123486381 (0x75c40ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Jun  8 06:45:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe44fd85b06c6151954e50f0c5fbfb010dd9aac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:09:f8:e8:cd:19:37:44:ff:4a:e9:68:56:
                    e6:39:da:a4:10:67:af:a5:ca:8d:69:d0:6f:2b:6b:
                    06:b8:15:54:51:d1:f4:43:fd:a5:7d:fd:4f:c6:b3:
                    22:fe:06:fe:7d:8b:68:31:4e:c7:fa:6d:e8:26:8c:
                    b9:a0:bb:c8:8e:a8:5b:26:01:da:c6:b4:25:e0:82:
                    55:28:f6:50:96:2e:2f:cd:d4:c0:08:41:d9:5d:6a:
                    05:30:8b:15:76:0a:5d:da:7b:a8:fb:20:70:94:a5:
                    83:38:ae:4a:28:7f:57:73:10:5e:6a:6c:01:8f:08:
                    de:59:94:d0:a7:4c:18:cd:33:07:46:69:c9:e6:26:
                    be:d6:dd:d8:b2:20:55:ae:b6:c1:04:8a:3b:2b:d0:
                    6d:ab:83:87:80:2a:ee:9f:28:00:63:94:51:c7:00:
                    7e:44:23:5e:fc:fb:fe:91:14:0e:c9:6c:0e:ef:32:
                    de:57:cd:29:53:78:17:2f:6f:19:05:e2:a1:cb:14:
                    8c:17:4d:97:06:eb:01:d5:68:1d:d8:8b:2b:fb:20:
                    3e:55:15:1b:a2:76:44:a3:f0:bd:22:87:1c:0c:a5:
                    75:4d:7b:1d:4a:08:9c:a3:c6:35:4b:3f:62:e2:2a:
                    e6:68:2c:c0:f7:50:71:55:f7:76:c9:66:cb:f9:1a:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:44:FD:85:B0:6C:61:51:95:4E:50:F0:C5:FB:FB:01:0D:D9:AA:C7
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/_kT9hbBsYVGVTlDwxfv7AQ3Zqsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ee:ce:66:84:02:8c:19:f3:a3:eb:57:dd:08:da:7a:03:d6:
         93:de:7c:5c:6a:a5:f9:a9:a3:74:4c:74:83:53:21:8d:22:0c:
         3d:82:a8:3f:9f:ac:7e:ca:4e:67:2a:da:14:e3:49:6d:f9:5b:
         c6:42:fd:c0:d9:34:be:55:1b:fd:e0:07:fd:26:14:ad:e2:77:
         24:36:e6:2f:51:7e:16:b3:fa:f2:4c:3c:cf:09:0d:00:0f:7a:
         09:ce:d6:c4:9a:fe:68:c6:d7:74:04:a9:bd:03:82:58:3e:35:
         a2:5e:8f:66:f8:e6:fa:ba:49:c3:97:73:a1:b4:22:e4:d6:c4:
         9d:6d:3b:fd:e3:a6:3c:e2:7e:ff:eb:66:74:f9:e5:56:e1:80:
         69:65:3d:fe:d1:6f:71:a4:cb:31:66:66:1e:73:7a:63:04:11:
         e4:46:ae:a1:89:68:7e:ed:df:b3:ce:bf:32:25:35:77:91:d3:
         7c:51:69:ea:f2:14:46:f0:b8:15:d0:2a:66:00:25:b5:f0:69:
         f0:f9:b9:ae:14:99:94:19:b7:dc:28:89:fc:5f:69:b7:c0:12:
         4c:9c:00:02:b8:45:48:05:a9:5e:7e:5b:03:0c:03:30:9e:73:
         35:92:8c:41:fe:93:4b:12:3e:a3:3f:2c:42:4c:a0:20:f1:98:
         ab:bb:e8:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB1xArTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZWUwNTNjYjljYjRmNDFjMWU0NzczZTdmMTZlODRiYjU3NTIyMDMzMB4XDTIyMDYw
ODA2NDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmU0NGZkODViMDZj
NjE1MTk1NGU1MGYwYzVmYmZiMDEwZGQ5YWFjNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM6ICfjozRk3RP9K6WhW5jnapBBnr6XKjWnQbytrBrgVVFHR
9EP9pX39T8azIv4G/n2LaDFOx/pt6CaMuaC7yI6oWyYB2sa0JeCCVSj2UJYuL83U
wAhB2V1qBTCLFXYKXdp7qPsgcJSlgziuSih/V3MQXmpsAY8I3lmU0KdMGM0zB0Zp
yeYmvtbd2LIgVa62wQSKOyvQbauDh4Aq7p8oAGOUUccAfkQjXvz7/pEUDslsDu8y
3lfNKVN4Fy9vGQXiocsUjBdNlwbrAdVoHdiLK/sgPlUVG6J2RKPwvSKHHAyldU17
HUoInKPGNUs/YuIq5mgswPdQcVX3dslmy/ka1fECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT+RP2FsGxhUZVOUPDF+/sBDdmqxzAfBgNVHSMEGDAWgBR+4FPLnLT0HB5H
c+fxboS7V1IgMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Z1QlR5NXkwOUJ3ZVIzUG44VzZFdTFkU0lETS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMDYwMGE0LTE0NjQtNGE3Yy1hZjU2LTE4ZTg2ZjBiMWQ4MS8x
L19rVDloYkJzWVZHVlRsRHd4ZnY3QVEzWnFzYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MDYwMGE0LTE0NjQtNGE3Yy1hZjU2LTE4ZTg2ZjBiMWQ4MS8xL2Z1QlR5NXkwOUJ3
ZVIzUG44VzZFdTFkU0lETS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHkqTANBgkqhkiG9w0BAQsFAAOC
AQEAbu7OZoQCjBnzo+tX3QjaegPWk958XGql+amjdEx0g1MhjSIMPYKoP5+sfspO
ZyraFONJbflbxkL9wNk0vlUb/eAH/SYUreJ3JDbmL1F+FrP68kw8zwkNAA96Cc7W
xJr+aMbXdASpvQOCWD41ol6PZvjm+rpJw5dzobQi5NbEnW07/eOmPOJ+/+tmdPnl
VuGAaWU9/tFvcaTLMWZmHnN6YwQR5EauoYlofu3fs86/MiU1d5HTfFFp6vIURvC4
FdAqZgAltfBp8Pm5rhSZlBm33CiJ/F9pt8ASTJwAArhFSAWpXn5bAwwDMJ5zNZKM
Qf6TSxI+oz8sQkygIPGYq7vocQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org