Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/B-gjuHkzbPVfBtejorCkaV0Qj-I.roa
File:                     B-gjuHkzbPVfBtejorCkaV0Qj-I.roa (raw, json)
Hash identifier:          8UafJ2D7SY0zjIF/S6gvZRfihlfXphDUQat2+34gqjo=
Subject key identifier:   07:E8:23:B8:79:33:6C:F5:5F:06:D7:A3:A2:B0:A4:69:5D:10:8F:E2
Certificate issuer:       /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial:       09083A2B
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/B-gjuHkzbPVfBtejorCkaV0Qj-I.roa
Signing time:             Sat 01 Jan 2022 02:55:05 +0000
ROA not before:           Sat 01 Jan 2022 02:55:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33915
IP address blocks:        194.53.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151534123 (0x9083a2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
        Validity
            Not Before: Jan  1 02:55:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07e823b879336cf55f06d7a3a2b0a4695d108fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:28:9b:98:8f:9c:31:83:9f:32:cc:8c:26:
                    7d:cd:06:a0:cd:63:32:4a:0e:b3:10:c6:19:1e:53:
                    29:9e:64:95:5d:03:42:27:9d:e3:3a:47:28:51:95:
                    0d:85:66:6a:53:0d:a3:8b:28:89:1a:7e:86:bb:a2:
                    80:d5:b4:0d:2c:5c:10:fe:d7:93:b4:6b:34:f4:19:
                    d9:7a:4b:40:71:95:d9:01:a1:f1:7d:35:70:03:5f:
                    6e:8b:c1:79:ae:fa:51:21:47:1f:87:17:df:f3:cb:
                    86:8b:a8:09:71:38:e2:dd:44:3d:fb:80:37:1b:95:
                    12:b5:49:05:12:d2:d6:bd:5d:0c:47:df:a6:14:1b:
                    fc:cf:98:f0:16:da:f3:6e:89:a9:8f:71:7c:57:b1:
                    15:25:76:b9:66:02:36:20:57:60:13:83:e2:68:8b:
                    28:a5:ef:8b:44:a4:8c:cb:bb:fa:74:ac:f5:f8:01:
                    f6:72:c9:5b:07:0c:c7:f8:4e:62:02:c0:b7:45:e8:
                    f1:06:7c:6d:db:6d:32:b7:ec:a1:c2:ef:0a:9c:ed:
                    d9:55:d5:8b:21:22:23:1a:07:4f:e6:82:99:20:db:
                    e9:1f:71:c0:8e:3c:67:5e:a4:4e:a6:b7:07:77:a0:
                    05:57:a9:6a:4a:12:20:5c:f6:7f:86:0f:36:02:80:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:23:B8:79:33:6C:F5:5F:06:D7:A3:A2:B0:A4:69:5D:10:8F:E2
            X509v3 Authority Key Identifier:
                keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/B-gjuHkzbPVfBtejorCkaV0Qj-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.53.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:98:ff:d6:05:6c:67:52:20:1a:9d:8f:50:9e:85:47:84:0a:
         84:3b:e4:c2:8a:f5:a0:b5:ea:b9:ab:aa:84:65:e0:2e:84:17:
         0b:f4:04:6d:36:47:66:fb:2f:c6:96:1e:51:c4:0f:f5:07:bf:
         1c:44:68:a4:97:85:44:4f:79:16:54:4e:49:32:75:f3:4c:11:
         72:52:d4:97:1e:28:b8:38:27:03:58:3b:0b:15:27:c4:2d:6a:
         f6:a5:17:54:28:76:c3:a9:18:ac:1e:e1:f9:ba:34:bc:f6:72:
         ce:98:89:64:5d:46:00:10:ba:84:ec:5f:a7:6f:0f:5f:6e:9d:
         98:4f:75:75:21:c5:8a:7c:2c:12:fd:6d:92:67:ad:bf:8c:77:
         59:61:88:e1:4a:25:e7:bf:be:e9:a1:0b:22:f1:2d:20:d9:ed:
         08:85:7d:0d:db:42:05:01:dc:4f:dd:c9:41:d2:52:c3:d0:0a:
         44:06:fe:7b:06:58:cf:fd:83:4b:41:35:c8:04:00:95:78:fe:
         0d:f5:20:0a:a4:81:86:36:c9:08:27:d9:d4:67:52:3c:58:cd:
         71:85:41:d9:de:2c:85:49:fb:a5:a3:a8:ad:15:64:1b:76:45:
         82:bd:ed:93:14:8b:1c:8f:1f:04:8f:84:ef:c6:bd:c8:99:74:
         e0:bd:85:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECQg6KzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
M2FjODhmMDE3MGNiZmU0NDZjZmQzMWE1ODIzY2RlMGUwOTMxOTlhMB4XDTIyMDEw
MTAyNTUwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDdlODIzYjg3OTMz
NmNmNTVmMDZkN2EzYTJiMGE0Njk1ZDEwOGZlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMaDKJuYj5wxg58yzIwmfc0GoM1jMkoOsxDGGR5TKZ5klV0D
Qied4zpHKFGVDYVmalMNo4soiRp+hruigNW0DSxcEP7Xk7RrNPQZ2XpLQHGV2QGh
8X01cANfbovBea76USFHH4cX3/PLhouoCXE44t1EPfuANxuVErVJBRLS1r1dDEff
phQb/M+Y8Bba826JqY9xfFexFSV2uWYCNiBXYBOD4miLKKXvi0SkjMu7+nSs9fgB
9nLJWwcMx/hOYgLAt0Xo8QZ8bdttMrfsocLvCpzt2VXViyEiIxoHT+aCmSDb6R9x
wI48Z16kTqa3B3egBVepakoSIFz2f4YPNgKAoKsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQH6CO4eTNs9V8G16OisKRpXRCP4jAfBgNVHSMEGDAWgBSDrIjwFwy/5EbP
0xpYI83g4JMZmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2c2eUk4QmNNdi1SR3o5TWFXQ1BONE9DVEdaby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvZWQ2OWRjLTgwZDctNDMzNi1hMjJkLTg0OGFmNjk4ZDBkOC8x
L0ItZ2p1SGt6YlBWZkJ0ZWpvckNrYVYwUWotSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
ZWQ2OWRjLTgwZDctNDMzNi1hMjJkLTg0OGFmNjk4ZDBkOC8xL2c2eUk4QmNNdi1S
R3o5TWFXQ1BONE9DVEdaby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI1CjANBgkqhkiG9w0BAQsFAAOC
AQEA3pj/1gVsZ1IgGp2PUJ6FR4QKhDvkwor1oLXquauqhGXgLoQXC/QEbTZHZvsv
xpYeUcQP9Qe/HERopJeFRE95FlROSTJ180wRclLUlx4ouDgnA1g7CxUnxC1q9qUX
VCh2w6kYrB7h+bo0vPZyzpiJZF1GABC6hOxfp28PX26dmE91dSHFinwsEv1tkmet
v4x3WWGI4Uol57++6aELIvEtINntCIV9DdtCBQHcT93JQdJSw9AKRAb+ewZYz/2D
S0E1yAQAlXj+DfUgCqSBhjbJCCfZ1GdSPFjNcYVB2d4shUn7paOorRVkG3ZFgr3t
kxSLHI8fBI+E78a9yJl04L2FLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:14 2024 by rpki-client on console-ams.rpki-client.org