Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/GpAoyVx4rA9vSEchhRNRPDHkLXA.roa
File:                     GpAoyVx4rA9vSEchhRNRPDHkLXA.roa (raw, json)
Hash identifier:          IQO8N5lNUryhS5B9ENJn8MG4Va36KTEEgoFFBvrPnak=
Subject key identifier:   1A:90:28:C9:5C:78:AC:0F:6F:48:47:21:85:13:51:3C:31:E4:2D:70
Certificate issuer:       /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial:       03AC5CA0
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/GpAoyVx4rA9vSEchhRNRPDHkLXA.roa
Signing time:             Sat 01 Jan 2022 03:00:49 +0000
ROA not before:           Sat 01 Jan 2022 03:00:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212464
IP address blocks:        2001:67c:2be0::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61627552 (0x3ac5ca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
        Validity
            Not Before: Jan  1 03:00:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a9028c95c78ac0f6f4847218513513c31e42d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:d2:41:87:bd:78:eb:ca:c1:67:08:a6:25:
                    7d:73:10:dc:f9:4d:63:81:59:f0:89:d7:00:25:a5:
                    21:d0:83:dd:f0:31:b2:04:a8:0f:5b:06:2a:67:ae:
                    00:98:f7:bd:c4:8a:2a:1f:ff:95:ce:1b:ae:60:97:
                    53:65:1f:0f:99:1b:65:23:36:c1:e4:1f:26:73:cc:
                    a0:4d:c9:ba:c7:41:a2:5b:9a:a9:f0:4a:05:7b:48:
                    76:1b:23:f1:84:7d:1a:63:ba:0c:b4:d0:7c:58:70:
                    ac:0d:72:af:4f:10:f7:9e:76:54:3d:47:e9:e2:27:
                    61:91:bb:ff:5d:ac:ca:2c:39:f0:32:47:7e:f5:00:
                    f6:bc:f1:1f:4f:be:59:57:76:73:41:46:f8:69:8f:
                    93:ec:29:39:3c:44:1e:9e:3e:23:8a:c2:dd:c1:49:
                    4b:50:45:cb:74:ec:57:6e:8f:00:0a:59:b4:58:0e:
                    ca:02:0d:20:4b:f7:07:3d:e9:f9:a8:72:f9:38:87:
                    ca:a3:8f:e3:f7:0f:78:98:dc:a9:11:ac:ad:4a:99:
                    0a:4f:28:e9:64:5d:f8:fa:fd:57:b6:05:99:59:d8:
                    0b:51:b7:74:f7:52:ee:44:55:d6:92:1c:4b:b3:42:
                    29:24:c1:03:16:bb:b4:28:ea:6f:47:6a:04:7e:a7:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:90:28:C9:5C:78:AC:0F:6F:48:47:21:85:13:51:3C:31:E4:2D:70
            X509v3 Authority Key Identifier:
                keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/GpAoyVx4rA9vSEchhRNRPDHkLXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2be0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:8b:74:0c:88:09:80:ca:ef:7a:1f:04:bf:b0:05:da:06:d8:
         de:9b:93:6c:c8:9c:91:cf:e2:ef:aa:35:6a:27:b8:42:eb:a3:
         01:56:09:9e:71:50:d4:df:9e:a6:58:c4:4f:b9:09:a1:73:28:
         f5:b0:96:e6:c1:da:bb:91:4a:f8:27:b3:ad:db:bb:8f:e9:01:
         aa:80:71:26:70:d0:cf:ed:7f:f8:d1:fa:94:c5:5e:a0:c4:a6:
         12:a3:ce:0f:20:c6:1f:28:e3:97:88:13:52:b2:bd:75:42:dc:
         71:62:84:53:c1:13:57:5f:93:4a:42:02:d0:26:12:d0:b9:50:
         f8:ba:91:28:77:80:e8:bc:76:46:9c:04:ed:f9:69:84:14:51:
         53:a4:7d:fe:6d:94:69:e6:2a:21:f5:40:61:61:7c:55:05:7a:
         5b:8e:87:09:60:e2:95:7b:93:fc:cf:3a:a8:ed:10:50:5f:28:
         fa:73:e9:8e:46:c5:95:88:83:14:bf:31:bb:61:53:d4:35:af:
         b1:10:13:a5:46:1f:7e:f2:bf:84:ef:45:9a:c3:a8:5c:c7:f2:
         01:83:29:a5:e7:88:d5:08:9e:a2:93:76:04:d2:76:3f:ee:99:
         cb:89:7c:7f:6a:b5:6b:5f:df:f2:d6:84:50:60:54:f2:72:0a:
         c9:01:90:97
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEA6xcoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZGQwOTgxN2RmZWE0YzY2Yzk0MThmOWYzOTA2ZjFkMGUwN2NjOWQ0MB4XDTIyMDEw
MTAzMDA0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWE5MDI4Yzk1Yzc4
YWMwZjZmNDg0NzIxODUxMzUxM2MzMWU0MmQ3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMgl0kGHvXjrysFnCKYlfXMQ3PlNY4FZ8InXACWlIdCD3fAx
sgSoD1sGKmeuAJj3vcSKKh//lc4brmCXU2UfD5kbZSM2weQfJnPMoE3JusdBolua
qfBKBXtIdhsj8YR9GmO6DLTQfFhwrA1yr08Q9552VD1H6eInYZG7/12syiw58DJH
fvUA9rzxH0++WVd2c0FG+GmPk+wpOTxEHp4+I4rC3cFJS1BFy3TsV26PAApZtFgO
ygINIEv3Bz3p+ahy+TiHyqOP4/cPeJjcqRGsrUqZCk8o6WRd+Pr9V7YFmVnYC1G3
dPdS7kRV1pIcS7NCKSTBAxa7tCjqb0dqBH6n77cCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQakCjJXHisD29IRyGFE1E8MeQtcDAfBgNVHSMEGDAWgBSN0JgX3+pMZslB
j585BvHQ4HzJ1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pkQ1lGOV9xVEdiSlFZLWZPUWJ4ME9COHlkUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvOTMzN2VjLWI0ZGUtNDQ5YS1iNjA3LWVhOWNiNTI3YWU3MS8x
L0dwQW95Vng0ckE5dlNFY2hoUk5SUERIa0xYQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
OTMzN2VjLWI0ZGUtNDQ5YS1iNjA3LWVhOWNiNTI3YWU3MS8xL2pkQ1lGOV9xVEdi
SlFZLWZPUWJ4ME9COHlkUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwr4DANBgkqhkiG9w0BAQsF
AAOCAQEAuYt0DIgJgMrveh8Ev7AF2gbY3puTbMickc/i76o1aie4QuujAVYJnnFQ
1N+epljET7kJoXMo9bCW5sHau5FK+Cezrdu7j+kBqoBxJnDQz+1/+NH6lMVeoMSm
EqPODyDGHyjjl4gTUrK9dULccWKEU8ETV1+TSkIC0CYS0LlQ+LqRKHeA6Lx2RpwE
7flphBRRU6R9/m2UaeYqIfVAYWF8VQV6W46HCWDilXuT/M86qO0QUF8o+nPpjkbF
lYiDFL8xu2FT1DWvsRATpUYffvK/hO9FmsOoXMfyAYMppeeI1QieopN2BNJ2P+6Z
y4l8f2q1a1/f8taEUGBU8nIKyQGQlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:32 2024 by rpki-client on console-ams.rpki-client.org