Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/KGYklojHogjVezW4LSoLFKmmOrU.roa
File:                     KGYklojHogjVezW4LSoLFKmmOrU.roa (raw, json)
Hash identifier:          iHaZbwJmaB64Sh2YmukSW55M53fEB4GsaEtwq+CNrEo=
Subject key identifier:   28:66:24:96:88:C7:A2:08:D5:7B:35:B8:2D:2A:0B:14:A9:A6:3A:B5
Certificate issuer:       /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial:       779706
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/KGYklojHogjVezW4LSoLFKmmOrU.roa
Signing time:             Sat 01 Jan 2022 01:56:47 +0000
ROA not before:           Sat 01 Jan 2022 01:56:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12993
IP address blocks:        193.105.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7837446 (0x779706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
        Validity
            Not Before: Jan  1 01:56:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2866249688c7a208d57b35b82d2a0b14a9a63ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c7:02:b6:c4:88:56:4f:80:68:aa:27:f2:f4:
                    da:05:48:a0:7b:35:6b:73:c3:fa:59:5f:15:ae:37:
                    0e:27:00:9f:00:a4:4d:6c:e5:21:d4:c3:60:47:f8:
                    65:70:d8:80:7c:18:40:d6:49:3c:81:e8:84:a2:20:
                    4d:9c:cf:d5:01:4b:8e:8f:41:7f:0a:97:18:32:ba:
                    77:64:d2:94:27:a1:f7:1d:3b:01:8b:3f:fe:8e:57:
                    81:0c:7b:55:79:07:68:f9:55:ad:4d:f2:ea:54:9a:
                    4f:e1:b9:64:d0:df:b7:04:72:38:38:a0:98:75:a1:
                    bd:67:55:85:58:26:ec:9f:4d:22:98:c6:ee:0c:34:
                    78:d8:20:f4:ac:59:96:7a:35:8c:85:9e:2f:a7:83:
                    b3:2d:bd:81:0a:aa:38:30:f8:15:b8:0d:64:05:72:
                    04:6e:f8:5a:c5:28:a4:9b:e8:49:4a:94:b1:47:c1:
                    40:b9:3b:69:35:c4:2b:4c:ea:fc:24:e3:ac:5f:4f:
                    53:59:79:4c:d7:70:95:7b:49:7f:cd:90:8c:96:c9:
                    df:8f:29:46:d5:17:8f:3c:7e:52:5c:5a:48:46:bd:
                    9f:4d:48:70:6e:46:e6:f3:e8:1b:fb:5a:e8:d2:44:
                    6c:d9:30:60:16:2f:de:18:ab:67:2c:3a:14:27:68:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:66:24:96:88:C7:A2:08:D5:7B:35:B8:2D:2A:0B:14:A9:A6:3A:B5
            X509v3 Authority Key Identifier:
                keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/KGYklojHogjVezW4LSoLFKmmOrU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:6e:00:77:fe:1f:f7:b4:7f:57:91:d1:85:ac:48:b4:5c:
         21:5e:a2:72:ca:6f:50:79:41:bf:67:63:94:4a:f0:0f:58:e6:
         33:1a:09:f5:93:e5:6c:ba:be:f9:1d:cb:29:d4:3f:fb:cb:4a:
         06:32:9e:f4:04:bb:6f:c6:57:06:c3:53:b8:68:07:f0:31:36:
         ec:9b:54:32:18:71:fa:d6:b3:24:4b:0e:65:50:b3:3e:e4:a6:
         6f:b0:a3:d9:b8:36:c1:5a:86:1d:62:19:49:96:68:93:e4:1e:
         d4:2c:63:29:0d:8b:75:01:75:73:40:f7:2e:13:51:e6:e2:28:
         ed:35:74:87:69:c2:bf:ff:e6:73:9b:b6:2e:55:e3:db:53:5e:
         86:d2:a3:7f:df:04:4b:a6:37:93:54:12:f7:01:6c:cc:5d:94:
         9f:e4:f7:84:37:82:6f:8f:c0:d2:15:ce:bd:68:3c:1c:75:cc:
         55:6e:44:94:cf:ec:c4:4c:66:33:7d:62:dd:03:e4:0e:3f:72:
         8e:33:5b:b7:b6:60:71:50:66:08:bc:22:36:a0:f0:34:8b:c9:
         85:81:27:75:9c:20:2b:8b:02:9a:7f:35:6b:e3:8f:80:00:1d:
         17:62:d2:27:ea:42:76:5d:e0:4e:aa:e0:e9:80:e2:73:c2:8d:
         dd:f0:fa:64
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDd5cGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU1
MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRlNDNlNzIwHhcNMjIwMTAx
MDE1NjQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyODY2MjQ5Njg4Yzdh
MjA4ZDU3YjM1YjgyZDJhMGIxNGE5YTYzYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA28cCtsSIVk+AaKon8vTaBUigezVrc8P6WV8VrjcOJwCfAKRN
bOUh1MNgR/hlcNiAfBhA1kk8geiEoiBNnM/VAUuOj0F/CpcYMrp3ZNKUJ6H3HTsB
iz/+jleBDHtVeQdo+VWtTfLqVJpP4blk0N+3BHI4OKCYdaG9Z1WFWCbsn00imMbu
DDR42CD0rFmWejWMhZ4vp4OzLb2BCqo4MPgVuA1kBXIEbvhaxSikm+hJSpSxR8FA
uTtpNcQrTOr8JOOsX09TWXlM13CVe0l/zZCMlsnfjylG1RePPH5SXFpIRr2fTUhw
bkbm8+gb+1ro0kRs2TBgFi/eGKtnLDoUJ2hUTQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFChmJJaIx6II1Xs1uC0qCxSppjq1MB8GA1UdIwQYMBaAFFURlot5espX1hGA
GpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRhLzEv
S0dZa2xvakhvZ2pWZXpXNExTb0xGS21tT3JVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8x
MTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZX
RVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWloMA0GCSqGSIb3DQEBCwUAA4IB
AQBGuG4Ad/4f97R/V5HRhaxItFwhXqJyym9QeUG/Z2OUSvAPWOYzGgn1k+Vsur75
Hcsp1D/7y0oGMp70BLtvxlcGw1O4aAfwMTbsm1QyGHH61rMkSw5lULM+5KZvsKPZ
uDbBWoYdYhlJlmiT5B7ULGMpDYt1AXVzQPcuE1Hm4ijtNXSHacK//+Zzm7YuVePb
U16G0qN/3wRLpjeTVBL3AWzMXZSf5PeEN4Jvj8DSFc69aDwcdcxVbkSUz+zETGYz
fWLdA+QOP3KOM1u3tmBxUGYIvCI2oPA0i8mFgSd1nCAriwKafzVr44+AAB0XYtIn
6kJ2XeBOquDpgOJzwo3d8Ppk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:47 2024 by rpki-client on console-ams.rpki-client.org