Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GUAAEVORoRuwsWcYzXzxtD5mgO4.roa
File:                     GUAAEVORoRuwsWcYzXzxtD5mgO4.roa (raw, json)
Hash identifier:          PIlznZU43j2qWwELZ1Mq8d7HLt1LL4ceRn2TtRKth2g=
Subject key identifier:   19:40:00:11:53:91:A1:1B:B0:B1:67:18:CD:7C:F1:B4:3E:66:80:EE
Certificate issuer:       /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial:       0183B6F966BE328E917B708540407AC3937F
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GUAAEVORoRuwsWcYzXzxtD5mgO4.roa
Signing time:             Sat 08 Oct 2022 09:42:21 +0000
ROA not before:           Sat 08 Oct 2022 09:42:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206065
IP address blocks:        85.198.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b6:f9:66:be:32:8e:91:7b:70:85:40:40:7a:c3:93:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
        Validity
            Not Before: Oct  8 09:42:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=194000115391a11bb0b16718cd7cf1b43e6680ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:47:75:0e:67:29:4c:7f:25:47:a2:91:d5:
                    65:36:53:9b:b3:dd:17:51:04:a5:f0:f2:9f:25:e3:
                    2a:87:ad:d4:ba:b2:3f:de:11:9c:f5:6c:2f:39:b7:
                    1d:82:47:46:51:d9:c6:d5:7c:c5:e7:24:c9:56:59:
                    0a:62:a4:8f:3d:fd:26:ad:18:57:d8:e3:52:f2:31:
                    b7:82:ea:3e:9d:bd:a2:fb:8e:06:8d:ee:44:0b:06:
                    16:ee:6f:6b:8d:cc:f7:a1:6f:ca:84:57:8f:e2:1d:
                    d1:71:61:b7:95:bd:ef:cf:de:4c:60:31:c8:22:ff:
                    e7:ea:e8:06:43:31:12:bb:cf:48:34:81:68:34:6d:
                    a7:cb:13:b3:03:a5:3a:80:c2:36:91:6d:17:4d:ba:
                    66:04:7b:fb:6f:56:d9:26:09:e5:f8:11:58:5f:d0:
                    17:85:46:f6:3b:ff:70:7a:53:bb:d0:d0:5a:24:ed:
                    fa:53:01:2a:57:f1:4e:26:98:a7:b0:d2:b1:aa:d3:
                    2a:10:c7:6b:d8:95:3d:6e:c0:ed:e7:76:4d:23:40:
                    d8:f3:d5:e9:56:75:19:b6:ce:28:2a:24:db:82:78:
                    34:d6:1c:28:5b:1f:44:f4:d8:c8:aa:a4:8b:df:a5:
                    9e:da:a8:42:c8:b2:c5:2e:d5:c3:58:a4:7d:7a:6b:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:40:00:11:53:91:A1:1B:B0:B1:67:18:CD:7C:F1:B4:3E:66:80:EE
            X509v3 Authority Key Identifier:
                keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GUAAEVORoRuwsWcYzXzxtD5mgO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.198.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:56:75:db:91:94:64:4b:06:78:0a:50:62:07:b8:36:58:
         f0:8b:10:5d:ab:11:c7:ad:c9:7d:c7:73:b1:72:41:00:97:43:
         15:3a:4e:7f:da:6d:48:1b:50:45:83:ee:78:a9:d3:22:7d:59:
         c0:4a:b7:9c:7d:1d:f5:dd:30:ef:c2:55:0c:32:c5:01:cb:13:
         80:b6:da:3c:4a:4c:98:d7:15:66:5d:7a:ca:1d:dc:b5:c2:4e:
         47:d8:74:9f:0f:81:06:f3:82:cd:f5:8d:03:e9:c0:e9:bc:c4:
         34:4f:4e:56:ec:a6:31:1d:76:ed:d7:c5:bf:c5:51:2c:22:fe:
         45:16:0b:c3:e4:c7:3c:f8:d6:54:5e:80:44:ba:d4:20:92:5b:
         de:96:ee:87:c6:36:bd:f6:47:7c:6f:07:1e:91:cc:d2:97:f0:
         9e:7b:77:a7:f1:9d:6f:3f:12:7b:73:d7:c7:4d:5c:64:f8:e5:
         c9:71:d0:69:1b:24:b0:b5:66:ac:ae:67:ba:6e:e4:c5:fd:ac:
         ef:74:23:af:af:e0:b5:be:d4:2e:61:e9:e4:4d:ad:0c:e2:c4:
         9f:6d:a2:8d:41:a9:10:a3:ee:37:c5:b2:3f:ce:3f:7e:e6:7a:
         fb:04:45:83:06:e5:43:aa:b1:b4:c1:a9:a5:06:12:60:b1:36:
         76:c6:be:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYO2+Wa+Mo6Re3CFQEB6w5N/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjIxMDA4MDk0MjIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTQwMDAxMTUzOTFhMTFiYjBiMTY3MThjZDdjZjFiNDNlNjY4MGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NRHdQ5nKUx/JUeikdVlNlObs90X
UQSl8PKfJeMqh63UurI/3hGc9WwvObcdgkdGUdnG1XzF5yTJVlkKYqSPPf0mrRhX
2ONS8jG3guo+nb2i+44Gje5ECwYW7m9rjcz3oW/KhFeP4h3RcWG3lb3vz95MYDHI
Iv/n6ugGQzESu89INIFoNG2nyxOzA6U6gMI2kW0XTbpmBHv7b1bZJgnl+BFYX9AX
hUb2O/9welO70NBaJO36UwEqV/FOJpinsNKxqtMqEMdr2JU9bsDt53ZNI0DY89Xp
VnUZts4oKiTbgng01hwoWx9E9NjIqqSL36We2qhCyLLFLtXDWKR9emvM/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlAABFTkaEbsLFnGM188bQ+ZoDuMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvR1VBQUVWT1JvUnV3c1djWXpYenh0RDVtZ080LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVcYwMA0G
CSqGSIb3DQEBCwUAA4IBAQA88FZ125GUZEsGeApQYge4NljwixBdqxHHrcl9x3Ox
ckEAl0MVOk5/2m1IG1BFg+54qdMifVnASrecfR313TDvwlUMMsUByxOAtto8SkyY
1xVmXXrKHdy1wk5H2HSfD4EG84LN9Y0D6cDpvMQ0T05W7KYxHXbt18W/xVEsIv5F
FgvD5Mc8+NZUXoBEutQgklvelu6Hxja99kd8bwcekczSl/Cee3en8Z1vPxJ7c9fH
TVxk+OXJcdBpGySwtWasrme6buTF/azvdCOvr+C1vtQuYenkTa0M4sSfbaKNQakQ
o+43xbI/zj9+5nr7BEWDBuVDqrG0wamlBhJgsTZ2xr6+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org