Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/V1xvQetvFybGmDID3mCg4WsCnlk.roa
File:                     V1xvQetvFybGmDID3mCg4WsCnlk.roa (raw, json)
Hash identifier:          FrYD032oOHDcNg2yaxmioPvZKQ1KGb8T01XSjDTvRLI=
Subject key identifier:   57:5C:6F:41:EB:6F:17:26:C6:98:32:03:DE:60:A0:E1:6B:02:9E:59
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       01844613BFEC7962350A40DB59D7BFB41D6C
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/V1xvQetvFybGmDID3mCg4WsCnlk.roa
Signing time:             Sat 05 Nov 2022 04:36:50 +0000
ROA not before:           Sat 05 Nov 2022 04:36:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        188.214.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:46:13:bf:ec:79:62:35:0a:40:db:59:d7:bf:b4:1d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Nov  5 04:36:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=575c6f41eb6f1726c6983203de60a0e16b029e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:00:db:86:3d:2d:d2:11:02:1d:4f:f7:c2:
                    24:f0:f0:94:36:94:78:ea:03:ba:7f:eb:b9:95:5a:
                    8e:1f:4f:9a:b3:fa:3e:0f:c4:64:cd:53:c1:05:c4:
                    92:88:cb:34:b7:38:c3:92:41:ae:cf:34:24:23:2f:
                    e1:fd:3c:d9:5d:7b:d9:76:d7:34:6f:49:6b:3e:ed:
                    ca:6b:b2:f3:b1:88:c3:82:86:71:f0:2d:8c:f3:31:
                    24:18:c9:74:2f:f7:26:a2:47:bb:f8:92:cc:cf:da:
                    36:ff:cb:40:56:70:a4:5e:41:d5:e9:66:0e:7a:bb:
                    09:2b:b3:4e:10:ec:4b:9c:48:e9:f4:2e:e4:5d:12:
                    49:b2:46:d9:c5:7a:8d:3c:fa:49:14:06:ee:0b:7b:
                    0e:86:58:44:70:2d:0f:56:0f:82:ea:7c:a4:38:a1:
                    76:97:c0:7a:03:f4:7c:5c:9c:98:e9:76:8e:32:f5:
                    6e:e8:d6:82:db:14:28:26:f8:09:3e:23:bd:3b:69:
                    13:a2:68:d9:7f:7e:59:f1:57:d4:ed:cc:c2:23:03:
                    fd:fe:52:e9:24:7f:2c:7b:f8:e8:df:5c:ea:3b:03:
                    98:26:50:f7:b5:8d:3e:55:84:05:d0:c2:b8:c4:c0:
                    88:99:4c:28:61:ee:61:51:d5:40:bb:3f:c4:af:a1:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5C:6F:41:EB:6F:17:26:C6:98:32:03:DE:60:A0:E1:6B:02:9E:59
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/V1xvQetvFybGmDID3mCg4WsCnlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.214.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:b5:b8:b1:18:9e:bf:4b:e0:ac:86:cc:df:53:96:08:ff:
         cc:6f:d1:6f:df:bb:87:30:f4:3f:0f:33:1e:c3:1e:11:5f:5f:
         19:36:d2:c7:3a:f5:44:97:18:9f:40:d0:e5:91:1c:a7:ea:e0:
         99:55:de:0d:47:21:06:75:bd:8a:c1:99:cc:9e:64:40:47:a8:
         3a:c9:f1:e6:cb:68:38:6e:82:27:d9:f3:e9:4c:01:60:7e:32:
         17:35:de:e9:16:e8:3c:64:be:b9:ea:6a:1c:43:e7:50:82:4f:
         0b:ae:ec:53:54:34:cc:57:aa:0b:1b:c0:a7:6a:89:cb:ac:24:
         b7:30:40:e5:50:29:b8:dd:ba:27:86:4b:67:cf:d2:fc:15:9f:
         15:72:28:90:c0:0f:1b:ac:b2:c9:2e:97:a2:77:25:81:87:c7:
         84:1b:e0:ef:0b:c2:08:72:a7:4d:16:e8:76:f4:81:64:db:dd:
         5c:e6:d2:55:f0:d1:11:3c:2f:28:93:26:3e:0f:fd:a9:d5:59:
         00:42:02:45:16:6b:2d:25:1f:77:08:2a:90:4f:83:38:0e:c2:
         9c:58:80:22:cd:f3:d4:b9:a0:9a:94:34:2c:ba:f1:8c:29:fb:
         e1:03:fb:89:b9:6c:08:8e:d3:be:cf:59:c4:fd:42:b5:42:31:
         21:9c:f7:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRGE7/seWI1CkDbWde/tB1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjIxMTA1MDQzNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzVjNmY0MWViNmYxNzI2YzY5ODMyMDNkZTYwYTBlMTZiMDI5ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNEA24Y9LdIRAh1P98Ik8PCUNpR4
6gO6f+u5lVqOH0+as/o+D8RkzVPBBcSSiMs0tzjDkkGuzzQkIy/h/TzZXXvZdtc0
b0lrPu3Ka7LzsYjDgoZx8C2M8zEkGMl0L/cmoke7+JLMz9o2/8tAVnCkXkHV6WYO
ersJK7NOEOxLnEjp9C7kXRJJskbZxXqNPPpJFAbuC3sOhlhEcC0PVg+C6nykOKF2
l8B6A/R8XJyY6XaOMvVu6NaC2xQoJvgJPiO9O2kTomjZf35Z8VfU7czCIwP9/lLp
JH8se/jo31zqOwOYJlD3tY0+VYQF0MK4xMCImUwoYe5hUdVAuz/Er6H2/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdcb0HrbxcmxpgyA95goOFrAp5ZMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvVjF4dlFldHZGeWJHbURJRDNtQ2c0V3NDbmxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvNboMA0G
CSqGSIb3DQEBCwUAA4IBAQArU7W4sRiev0vgrIbM31OWCP/Mb9Fv37uHMPQ/DzMe
wx4RX18ZNtLHOvVElxifQNDlkRyn6uCZVd4NRyEGdb2KwZnMnmRAR6g6yfHmy2g4
boIn2fPpTAFgfjIXNd7pFug8ZL656mocQ+dQgk8LruxTVDTMV6oLG8CnaonLrCS3
MEDlUCm43bonhktnz9L8FZ8VciiQwA8brLLJLpeidyWBh8eEG+DvC8IIcqdNFuh2
9IFk291c5tJV8NERPC8okyY+D/2p1VkAQgJFFmstJR93CCqQT4M4DsKcWIAizfPU
uaCalDQsuvGMKfvhA/uJuWwIjtO+z1nE/UK1QjEhnPfJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org