Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fZLCfYvEJjOYy7vH98JrV_Td9HM.roa
File:                     fZLCfYvEJjOYy7vH98JrV_Td9HM.roa (raw, json)
Hash identifier:          wWadJJcazEHVJtgzeQOEAcVSKdvVGxTMK3bvrIsorck=
Subject key identifier:   7D:92:C2:7D:8B:C4:26:33:98:CB:BB:C7:F7:C2:6B:57:F4:DD:F4:73
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       4356B4B7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fZLCfYvEJjOYy7vH98JrV_Td9HM.roa
Signing time:             Thu 17 Mar 2022 09:24:29 +0000
ROA not before:           Thu 17 Mar 2022 09:24:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8769
IP address blocks:        193.182.245.0/24 maxlen: 24
                          193.234.82.0/24 maxlen: 24
                          193.234.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129755831 (0x4356b4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Mar 17 09:24:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d92c27d8bc4263398cbbbc7f7c26b57f4ddf473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:66:24:5f:ab:f7:b4:b9:3a:ba:f5:97:a8:
                    6d:35:f6:4e:19:f5:9a:97:fd:80:b3:89:69:1b:72:
                    05:01:80:04:c3:4c:fd:40:2a:30:04:29:07:a1:bf:
                    68:96:79:63:80:40:f2:48:db:9d:c3:14:78:a4:4a:
                    46:c8:75:30:ec:75:14:3c:1c:af:08:28:03:1a:19:
                    ff:3e:c3:c1:c8:1d:77:12:0d:df:13:54:54:05:da:
                    a2:94:e7:30:3f:bc:6f:e5:46:1d:d8:51:43:58:f0:
                    ac:6d:37:cf:dc:c5:e5:bf:11:e7:87:47:b3:08:bb:
                    a8:11:d2:2a:2c:2f:bc:44:35:0d:ab:e8:1e:7f:1a:
                    dc:b1:64:3d:1f:ef:de:14:63:8b:f3:b8:ef:29:56:
                    5d:eb:05:32:7e:56:c8:b9:1a:c3:59:8f:58:34:75:
                    1b:82:d1:d6:ea:ba:ea:a2:36:8f:6d:74:64:5e:5a:
                    41:6d:2d:48:eb:32:e5:70:8e:6e:66:ab:db:32:a9:
                    9f:ff:0f:9f:9d:83:20:82:70:71:42:4e:bd:0e:04:
                    b7:3f:a1:52:a5:27:ef:a9:63:da:e0:bd:aa:50:76:
                    b9:ae:a8:03:26:fa:89:74:9e:00:81:af:42:46:f1:
                    a0:3f:b7:ae:b6:ac:37:29:0c:ef:c1:df:74:ea:91:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:C2:7D:8B:C4:26:33:98:CB:BB:C7:F7:C2:6B:57:F4:DD:F4:73
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fZLCfYvEJjOYy7vH98JrV_Td9HM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.182.245.0/24
                  193.234.18.0/24
                  193.234.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:da:de:45:88:61:a7:fd:df:c9:fc:a2:7a:75:97:a6:53:
         77:02:f1:93:a0:f1:02:ad:a6:f3:41:63:83:ce:84:7c:c0:49:
         5b:ba:75:4d:fd:6e:df:37:61:e0:ba:68:ff:fe:aa:d9:e2:cd:
         5a:e0:a4:2a:fb:a1:44:21:4e:2b:db:7c:28:14:78:d6:0e:8a:
         06:84:15:ba:d4:6d:55:88:27:b9:be:13:08:75:92:17:8c:1a:
         31:23:0c:27:6e:5f:3e:28:4c:91:55:97:7c:7e:d1:0e:de:70:
         36:b5:b5:b5:f1:44:73:d7:6f:2b:b0:a0:95:66:bc:57:b4:45:
         a8:d3:c4:e5:5b:db:cb:3c:5e:f3:5f:03:6a:26:0a:95:94:f8:
         b0:da:55:46:28:dc:35:f9:80:94:fe:93:c5:65:ab:b7:7e:8c:
         8d:36:5c:82:63:3e:1c:31:4c:d0:e0:80:cf:bc:15:32:17:a6:
         da:ed:06:5a:74:88:6d:8c:80:40:6e:90:44:71:52:54:f0:20:
         5c:f6:06:ea:1b:41:a8:c6:16:3d:ac:0f:ac:42:a0:3f:f5:d1:
         c6:22:ef:5c:db:91:4e:ea:c6:5e:5c:b7:04:fb:0e:bb:07:be:
         f3:b0:e2:f4:09:6a:ef:d2:7b:1a:16:56:04:0a:a6:b6:af:eb:
         29:31:ef:9a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEQ1a0tzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDMx
NzA5MjQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q5MmMyN2Q4YmM0
MjYzMzk4Y2JiYmM3ZjdjMjZiNTdmNGRkZjQ3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/aZiRfq/e0uTq69ZeobTX2Thn1mpf9gLOJaRtyBQGABMNM
/UAqMAQpB6G/aJZ5Y4BA8kjbncMUeKRKRsh1MOx1FDwcrwgoAxoZ/z7DwcgddxIN
3xNUVAXaopTnMD+8b+VGHdhRQ1jwrG03z9zF5b8R54dHswi7qBHSKiwvvEQ1Davo
Hn8a3LFkPR/v3hRji/O47ylWXesFMn5WyLkaw1mPWDR1G4LR1uq66qI2j210ZF5a
QW0tSOsy5XCObmar2zKpn/8Pn52DIIJwcUJOvQ4Etz+hUqUn76lj2uC9qlB2ua6o
Ayb6iXSeAIGvQkbxoD+3rrasNykM78HfdOqR5lMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBR9ksJ9i8QmM5jLu8f3wmtX9N30czAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
L2ZaTENmWXZFSmpPWXk3dkg5OEpyVl9UZDlITS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMG29QMEAMHqEgMEAMHqUjANBgkq
hkiG9w0BAQsFAAOCAQEAB6na3kWIYaf938n8onp1l6ZTdwLxk6DxAq2m80Fjg86E
fMBJW7p1Tf1u3zdh4Lpo//6q2eLNWuCkKvuhRCFOK9t8KBR41g6KBoQVutRtVYgn
ub4TCHWSF4waMSMMJ25fPihMkVWXfH7RDt5wNrW1tfFEc9dvK7CglWa8V7RFqNPE
5Vvbyzxe818DaiYKlZT4sNpVRijcNfmAlP6TxWWrt36MjTZcgmM+HDFM0OCAz7wV
Mhem2u0GWnSIbYyAQG6QRHFSVPAgXPYG6htBqMYWPawPrEKgP/XRxiLvXNuRTurG
Xly3BPsOuwe+87Di9Alq79J7GhZWBAqmtq/rKTHvmg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org