Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/4rsJW_vz9JvY2gdNHbLdhSbAiIg.roa
File:                     4rsJW_vz9JvY2gdNHbLdhSbAiIg.roa (raw, json)
Hash identifier:          MqyiHDQ1oOn9xeefDgujDWNk7pl0kQpdz2qWQWpkWN8=
Subject key identifier:   E2:BB:09:5B:FB:F3:F4:9B:D8:DA:07:4D:1D:B2:DD:85:26:C0:88:88
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       1478E745
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/4rsJW_vz9JvY2gdNHbLdhSbAiIg.roa
Signing time:             Sat 01 Jan 2022 06:54:32 +0000
ROA not before:           Sat 01 Jan 2022 06:54:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61985
IP address blocks:        93.159.218.0/23 maxlen: 23
                          93.159.216.0/22 maxlen: 22
                          93.159.216.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343467845 (0x1478e745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Jan  1 06:54:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2bb095bfbf3f49bd8da074d1db2dd8526c08888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b8:5b:7b:ec:14:e1:08:0c:db:90:98:84:71:
                    22:4d:14:78:e2:46:6e:98:4f:6e:ad:7a:87:81:58:
                    22:91:e4:0c:07:79:c2:8f:69:c0:bc:0b:86:5e:b6:
                    3b:79:1d:0c:dc:bb:44:e7:5e:e6:90:57:78:80:9d:
                    62:65:8d:b0:11:d7:b0:bc:31:9f:12:e3:e0:20:00:
                    5f:5f:97:5d:8e:02:3d:10:3b:dc:46:06:63:5d:03:
                    8f:22:b1:2c:e8:4e:dc:84:8d:01:f6:f8:c7:7c:08:
                    c2:c0:4c:e6:30:0f:93:27:53:9e:54:c8:50:c2:c0:
                    d7:0e:cd:b8:bb:44:12:42:f6:04:70:9e:5f:a2:26:
                    b2:46:7e:3d:ea:ee:15:cc:09:d0:92:2d:bd:8d:f1:
                    60:49:9c:b4:9d:c7:31:6d:ae:69:88:03:be:a1:78:
                    00:ac:10:62:b4:05:0e:58:3d:3f:16:7a:02:ce:39:
                    8f:b5:46:e3:17:9d:04:05:38:38:76:6b:13:5f:e2:
                    6c:e7:61:6d:63:fd:b2:2a:f5:1c:3b:73:b1:6f:bf:
                    bd:df:44:82:19:3e:f3:2d:c4:87:b3:6a:f8:1a:e4:
                    c1:e5:1a:65:9e:b8:fd:3b:8e:ed:3c:59:11:02:b3:
                    10:ad:c4:04:a8:17:64:3c:27:47:17:16:30:31:d8:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BB:09:5B:FB:F3:F4:9B:D8:DA:07:4D:1D:B2:DD:85:26:C0:88:88
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/4rsJW_vz9JvY2gdNHbLdhSbAiIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:d4:47:8d:18:e5:1d:7c:93:2f:23:00:b6:3c:25:0f:85:
         93:cc:72:26:54:46:4e:a0:16:0e:2e:36:14:b8:86:d7:f5:36:
         dc:55:6f:8e:10:6c:28:a3:d4:fc:97:ab:cb:05:6c:29:b6:b4:
         aa:d5:4b:28:64:7c:7d:09:c9:61:7b:a8:37:4f:82:6c:92:b6:
         3a:3b:a1:e8:93:68:76:e5:89:b9:1a:45:22:6f:3c:15:f7:c0:
         6e:e4:eb:c8:af:72:72:aa:df:50:2a:82:2e:dd:61:02:cd:6d:
         0e:eb:23:55:4b:76:8b:88:8c:94:31:55:ea:64:a5:84:a5:73:
         1e:61:93:c2:b2:a4:a2:2b:d5:19:da:13:07:0d:73:40:7a:34:
         b0:af:9b:46:9f:8a:2e:07:df:a6:00:3f:bf:42:cf:9e:1f:db:
         c5:8d:49:d0:9a:1e:10:13:31:8e:97:8c:83:b4:ac:64:d3:54:
         26:67:9b:5d:cb:85:44:05:f1:72:f8:6e:48:d8:71:a4:12:7b:
         10:66:32:13:16:08:59:5f:a7:23:7a:b9:59:8f:b0:7a:8b:be:
         3e:bf:34:f2:6d:68:db:ed:da:c8:42:3e:37:d1:8a:f1:e9:50:
         3e:a9:7f:b0:6a:e6:c6:83:83:90:6d:3e:ad:73:a6:7c:2f:94:
         e2:62:51:cb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFHjnRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTVlYmI5YjA1MWFkNWVjN2EzNjk4OWZjM2ZjYzk0YzFjYWJjYzc0MB4XDTIyMDEw
MTA2NTQzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTJiYjA5NWJmYmYz
ZjQ5YmQ4ZGEwNzRkMWRiMmRkODUyNmMwODg4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOW4W3vsFOEIDNuQmIRxIk0UeOJGbphPbq16h4FYIpHkDAd5
wo9pwLwLhl62O3kdDNy7ROde5pBXeICdYmWNsBHXsLwxnxLj4CAAX1+XXY4CPRA7
3EYGY10DjyKxLOhO3ISNAfb4x3wIwsBM5jAPkydTnlTIUMLA1w7NuLtEEkL2BHCe
X6ImskZ+PeruFcwJ0JItvY3xYEmctJ3HMW2uaYgDvqF4AKwQYrQFDlg9PxZ6As45
j7VG4xedBAU4OHZrE1/ibOdhbWP9sir1HDtzsW+/vd9Eghk+8y3Eh7Nq+BrkweUa
ZZ64/TuO7TxZEQKzEK3EBKgXZDwnRxcWMDHYhrkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTiuwlb+/P0m9jaB00dst2FJsCIiDAfBgNVHSMEGDAWgBROXrubBRrV7Ho2
mJ/D/MlMHKvMdDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RsNjdtd1VhMWV4Nk5waWZ3X3pKVEJ5cnpIUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvZWMxNzIxLTc1YzUtNDBmNS05MzQ1LWMyZmQwZjk1OGQ0Yi8x
LzRyc0pXX3Z6OUp2WTJnZE5IYkxkaFNiQWlJZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
ZWMxNzIxLTc1YzUtNDBmNS05MzQ1LWMyZmQwZjk1OGQ0Yi8xL1RsNjdtd1VhMWV4
Nk5waWZ3X3pKVEJ5cnpIUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl2f2DANBgkqhkiG9w0BAQsFAAOC
AQEAowrUR40Y5R18ky8jALY8JQ+Fk8xyJlRGTqAWDi42FLiG1/U23FVvjhBsKKPU
/JerywVsKba0qtVLKGR8fQnJYXuoN0+CbJK2Ojuh6JNoduWJuRpFIm88FffAbuTr
yK9ycqrfUCqCLt1hAs1tDusjVUt2i4iMlDFV6mSlhKVzHmGTwrKkoivVGdoTBw1z
QHo0sK+bRp+KLgffpgA/v0LPnh/bxY1J0JoeEBMxjpeMg7SsZNNUJmebXcuFRAXx
cvhuSNhxpBJ7EGYyExYIWV+nI3q5WY+weou+Pr808m1o2+3ayEI+N9GK8elQPql/
sGrmxoODkG0+rXOmfC+U4mJRyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:05 2024 by rpki-client on console-fra.rpki-client.org