Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gV35v3gN1yMq72E_6Y6ndbnZcgc.roa
File:                     gV35v3gN1yMq72E_6Y6ndbnZcgc.roa (raw, json)
Hash identifier:          St4E/cs0pkER6iAdDDlyBsaYLrcm8XUf1MMzukqhe0Y=
Subject key identifier:   81:5D:F9:BF:78:0D:D7:23:2A:EF:61:3F:E9:8E:A7:75:B9:D9:72:07
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       018446FC4E0C055A5CFC209ED6AA3979FB0C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gV35v3gN1yMq72E_6Y6ndbnZcgc.roa
Signing time:             Sat 05 Nov 2022 08:50:50 +0000
ROA not before:           Sat 05 Nov 2022 08:50:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        88.209.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:46:fc:4e:0c:05:5a:5c:fc:20:9e:d6:aa:39:79:fb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Nov  5 08:50:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=815df9bf780dd7232aef613fe98ea775b9d97207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:ba:8f:a5:35:c3:36:c7:f9:52:d7:bf:cf:
                    5b:3b:21:d6:2b:91:96:51:cf:46:6d:bd:c1:9a:bd:
                    08:44:29:b2:44:8b:f7:c7:07:9f:21:32:dd:7c:14:
                    7f:0d:c3:6d:45:74:6a:76:ce:65:e2:b6:c3:69:60:
                    b7:eb:ba:bc:b0:e4:32:30:6b:61:cc:a6:15:25:c1:
                    4c:4f:c7:bb:a0:73:92:b4:72:c6:da:c6:d5:fe:32:
                    a4:1c:72:7e:55:aa:12:4c:f2:be:53:8e:f9:13:d7:
                    8d:5d:fd:0f:2f:b8:6b:75:db:27:9a:c4:3a:11:8a:
                    73:02:35:75:05:31:ff:50:4b:11:4e:7f:05:13:c3:
                    90:09:73:2c:fe:07:6c:78:c1:49:c4:6c:8b:1a:16:
                    4f:ee:bb:5f:fc:22:6d:89:5e:c0:5d:65:cd:83:09:
                    6c:58:cd:b9:7e:bc:ff:6c:7f:ab:cc:82:e3:00:03:
                    ea:a1:67:1d:2e:32:01:b6:99:19:a2:18:18:4d:79:
                    89:83:5c:56:98:54:11:d2:a4:32:ab:da:59:e7:e0:
                    ef:ef:cb:03:ae:b6:5a:cd:c8:d5:9a:80:7e:be:03:
                    24:f6:9a:05:51:d6:f3:d3:d3:a0:dd:39:5e:36:e0:
                    0d:92:22:da:65:c0:d7:4d:b8:b7:22:c6:ce:81:b1:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:F9:BF:78:0D:D7:23:2A:EF:61:3F:E9:8E:A7:75:B9:D9:72:07
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gV35v3gN1yMq72E_6Y6ndbnZcgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.209.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:dd:03:9f:5e:12:66:eb:6f:3b:50:fb:78:88:c6:2e:f7:
         46:fb:b0:48:21:52:a6:fe:5c:f8:b4:4a:d7:56:f5:ef:07:88:
         50:a8:8a:d4:b3:d3:e3:30:14:00:07:d4:8f:ac:fb:01:8f:1b:
         c7:b4:87:45:db:05:46:c7:40:64:ed:d8:8f:7d:48:03:75:fe:
         bb:17:21:fa:78:29:86:89:56:fe:0b:c2:97:38:2b:dd:5c:b2:
         72:df:f9:8f:0f:34:36:16:4b:00:1c:31:fc:b3:58:02:b2:4a:
         c8:61:73:ce:fe:ed:23:4c:21:39:3d:ac:b0:fe:76:90:20:3b:
         75:f9:b1:dd:c5:6e:64:95:b9:61:95:39:d3:30:78:f0:78:bf:
         d4:8f:f1:ac:6f:33:9b:1d:cc:aa:23:03:a7:47:2d:82:f7:1d:
         5b:d2:92:f2:41:43:fc:db:a4:8e:ed:66:38:41:96:92:ab:66:
         89:70:a9:9b:e6:d3:dd:f5:55:31:ac:a0:bd:47:61:58:d6:0f:
         0f:5d:2b:cd:af:70:19:43:a7:7e:78:83:c8:c7:d9:0c:3a:96:
         92:09:94:4d:b0:3f:f6:23:4f:c2:45:d4:9e:61:41:85:13:07:
         ba:d5:73:63:0c:71:b1:b8:c7:33:e5:42:24:09:4e:2d:0c:8c:
         a3:59:af:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRG/E4MBVpc/CCe1qo5efsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIxMTA1MDg1MDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTVkZjliZjc4MGRkNzIzMmFlZjYxM2ZlOThlYTc3NWI5ZDk3MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh+6j6U1wzbH+VLXv89bOyHWK5GW
Uc9Gbb3Bmr0IRCmyRIv3xwefITLdfBR/DcNtRXRqds5l4rbDaWC367q8sOQyMGth
zKYVJcFMT8e7oHOStHLG2sbV/jKkHHJ+VaoSTPK+U475E9eNXf0PL7hrddsnmsQ6
EYpzAjV1BTH/UEsRTn8FE8OQCXMs/gdseMFJxGyLGhZP7rtf/CJtiV7AXWXNgwls
WM25frz/bH+rzILjAAPqoWcdLjIBtpkZohgYTXmJg1xWmFQR0qQyq9pZ5+Dv78sD
rrZazcjVmoB+vgMk9poFUdbz09Og3TleNuANkiLaZcDXTbi3IsbOgbF2mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFd+b94DdcjKu9hP+mOp3W52XIHMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZ1YzNXYzZ04xeU1xNzJFXzZZNm5kYm5aY2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHiMA0G
CSqGSIb3DQEBCwUAA4IBAQAsb90Dn14SZutvO1D7eIjGLvdG+7BIIVKm/lz4tErX
VvXvB4hQqIrUs9PjMBQAB9SPrPsBjxvHtIdF2wVGx0Bk7diPfUgDdf67FyH6eCmG
iVb+C8KXOCvdXLJy3/mPDzQ2FksAHDH8s1gCskrIYXPO/u0jTCE5Payw/naQIDt1
+bHdxW5klblhlTnTMHjweL/Uj/GsbzObHcyqIwOnRy2C9x1b0pLyQUP826SO7WY4
QZaSq2aJcKmb5tPd9VUxrKC9R2FY1g8PXSvNr3AZQ6d+eIPIx9kMOpaSCZRNsD/2
I0/CRdSeYUGFEwe61XNjDHGxuMcz5UIkCU4tDIyjWa+g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org