Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/BAiIur_7WxwVKkpq6VyZ91GlGXE.roa
File:                     BAiIur_7WxwVKkpq6VyZ91GlGXE.roa (raw, json)
Hash identifier:          DB4Pti6YBawEPY2rpw1zESDxMoLUN82/evlE6e0ynNo=
Subject key identifier:   04:08:88:BA:BF:FB:5B:1C:15:2A:4A:6A:E9:5C:99:F7:51:A5:19:71
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       3514523B
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/BAiIur_7WxwVKkpq6VyZ91GlGXE.roa
Signing time:             Sat 01 Jan 2022 05:58:44 +0000
ROA not before:           Sat 01 Jan 2022 05:58:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208161
IP address blocks:        87.236.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890524219 (0x3514523b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jan  1 05:58:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=040888babffb5b1c152a4a6ae95c99f751a51971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:91:ec:92:a5:d6:0d:89:73:97:8a:02:64:
                    aa:37:c1:f9:3d:7e:66:59:1a:d4:96:75:84:2b:7b:
                    17:29:08:d6:4d:c7:9d:7c:19:56:ca:25:f8:44:82:
                    25:14:43:52:6d:db:56:41:3b:91:13:1e:06:24:fb:
                    9f:c0:84:79:54:af:ef:5e:8d:c7:13:7c:30:db:47:
                    a3:db:ca:6c:38:98:0a:cf:e7:11:af:05:72:69:f8:
                    4a:84:6d:53:82:4d:46:e3:05:1c:58:2b:b7:bd:b1:
                    bd:19:db:e2:3c:e7:bc:60:76:cd:71:3f:1d:53:fe:
                    da:6d:c3:8f:13:0e:47:eb:df:db:2a:a5:07:28:62:
                    9d:dc:89:08:36:f4:ce:2c:d6:15:cd:57:a8:94:d9:
                    03:14:91:0f:40:df:b5:aa:56:75:e8:35:99:86:95:
                    af:62:34:22:61:90:0c:9b:c6:04:21:77:c3:e7:3a:
                    a3:42:97:ab:37:6c:04:f1:c2:ed:cb:2d:ad:78:9b:
                    f2:77:d0:15:3e:e2:8f:be:de:12:5b:92:6e:1c:a1:
                    c1:63:ee:b3:c9:aa:79:e7:6d:43:8a:0a:c7:6c:03:
                    aa:f4:58:4a:ea:b2:37:13:17:dc:34:6a:a4:a8:cc:
                    f4:b6:b7:32:88:43:08:95:11:f6:c7:1b:60:95:13:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:08:88:BA:BF:FB:5B:1C:15:2A:4A:6A:E9:5C:99:F7:51:A5:19:71
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/BAiIur_7WxwVKkpq6VyZ91GlGXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c9:4d:17:e8:22:f0:f8:6e:da:44:59:83:20:04:33:c3:31:
         4a:d8:d4:0c:e8:3f:0c:05:c3:47:74:b1:42:5d:40:fb:04:b9:
         87:15:2c:cc:be:51:c8:28:57:cc:a2:bd:89:83:c9:8e:08:99:
         79:fd:c4:d6:72:45:83:a1:09:16:6a:73:aa:e4:8c:3d:f5:91:
         8b:c3:fd:93:73:93:94:81:65:19:ad:11:3d:8c:e0:8b:41:8a:
         3f:46:0f:c5:3c:91:35:a1:c1:aa:c5:e8:3f:c8:95:b0:5e:4b:
         5e:fc:5a:c7:47:7e:72:af:7d:05:fd:fb:b9:20:01:54:97:0b:
         59:76:4e:95:37:c8:57:f8:e3:9f:8c:0a:ef:74:3f:24:57:7f:
         a7:a8:69:8d:2e:6d:12:6c:f9:e9:90:cd:55:b9:9e:47:9f:24:
         7b:96:96:df:42:3a:c2:6a:82:d9:6f:59:85:37:56:70:23:7d:
         7a:9b:1e:1d:31:24:95:4f:49:4b:8e:2d:7e:e5:1d:bb:5b:4c:
         f2:99:ae:77:b7:c7:f0:35:87:52:8a:22:72:af:ba:ba:e5:cc:
         29:93:df:39:02:97:f9:d6:2e:ad:a3:71:9e:ad:64:00:5b:0a:
         48:c0:a6:a3:f2:2a:4a:15:35:c2:0f:f4:fe:0d:e5:da:ad:01:
         f7:8f:8c:09
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENRRSOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MmJmNjQ2NGNlNmUxOWE0ZGNmOGEzMmIyN2EyZjFjYmUxNTUxMDU1MB4XDTIyMDEw
MTA1NTg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQwODg4YmFiZmZi
NWIxYzE1MmE0YTZhZTk1Yzk5Zjc1MWE1MTk3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONGkeySpdYNiXOXigJkqjfB+T1+Zlka1JZ1hCt7FykI1k3H
nXwZVsol+ESCJRRDUm3bVkE7kRMeBiT7n8CEeVSv716NxxN8MNtHo9vKbDiYCs/n
Ea8Fcmn4SoRtU4JNRuMFHFgrt72xvRnb4jznvGB2zXE/HVP+2m3DjxMOR+vf2yql
ByhindyJCDb0zizWFc1XqJTZAxSRD0DftapWdeg1mYaVr2I0ImGQDJvGBCF3w+c6
o0KXqzdsBPHC7cstrXib8nfQFT7ij77eEluSbhyhwWPus8mqeedtQ4oKx2wDqvRY
SuqyNxMX3DRqpKjM9La3MohDCJUR9scbYJUTLhECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQECIi6v/tbHBUqSmrpXJn3UaUZcTAfBgNVHSMEGDAWgBSSv2Rkzm4ZpNz4
oysnovHL4VUQVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tyOWtaTTV1R2FUYy1LTXJKNkx4eS1GVkVGVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvZjFkNjk3LWJjOGUtNGYxNC04YjM3LWI1M2UzMGUxNDEyYS8x
L0JBaUl1cl83V3h3VktrcHE2VnlaOTFHbEdYRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
ZjFkNjk3LWJjOGUtNGYxNC04YjM3LWI1M2UzMGUxNDEyYS8xL2tyOWtaTTV1R2FU
Yy1LTXJKNkx4eS1GVkVGVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFfs1zANBgkqhkiG9w0BAQsFAAOC
AQEAHMlNF+gi8Phu2kRZgyAEM8MxStjUDOg/DAXDR3SxQl1A+wS5hxUszL5RyChX
zKK9iYPJjgiZef3E1nJFg6EJFmpzquSMPfWRi8P9k3OTlIFlGa0RPYzgi0GKP0YP
xTyRNaHBqsXoP8iVsF5LXvxax0d+cq99Bf37uSABVJcLWXZOlTfIV/jjn4wK73Q/
JFd/p6hpjS5tEmz56ZDNVbmeR58ke5aW30I6wmqC2W9ZhTdWcCN9epseHTEklU9J
S44tfuUdu1tM8pmud7fH8DWHUooicq+6uuXMKZPfOQKX+dYuraNxnq1kAFsKSMCm
o/IqShU1wg/0/g3l2q0B94+MCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org