Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/k8qRAXBUCZvmGAOm8CFaEgsi9tM.roa
File:                     k8qRAXBUCZvmGAOm8CFaEgsi9tM.roa (raw, json)
Hash identifier:          B/SJ8aVsCfdlURalBI8DWciPZjSCLKbZSIrAkQZZyNk=
Subject key identifier:   93:CA:91:01:70:54:09:9B:E6:18:03:A6:F0:21:5A:12:0B:22:F6:D3
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       0984B8B0
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/k8qRAXBUCZvmGAOm8CFaEgsi9tM.roa
Signing time:             Sat 01 Jan 2022 10:03:06 +0000
ROA not before:           Sat 01 Jan 2022 10:03:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2119
IP address blocks:        193.161.96.0/22 maxlen: 22
                          193.161.100.0/24 maxlen: 24
                          193.161.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159692976 (0x984b8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Jan  1 10:03:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93ca91017054099be61803a6f0215a120b22f6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:80:cd:20:12:7f:e9:37:68:6b:86:5f:84:
                    c1:2d:b4:dd:a5:66:89:25:fa:b8:68:39:cf:10:7a:
                    81:9f:3f:75:f9:b6:78:d4:0d:93:c6:e9:09:ab:d7:
                    37:09:ec:63:36:70:64:63:0a:0c:37:27:5b:66:4b:
                    47:db:12:5a:ee:96:38:3b:81:60:7c:77:a8:fb:34:
                    79:dd:93:c0:1b:7e:27:5a:01:95:5f:ed:c5:17:a7:
                    8f:2f:59:33:a6:f6:02:ed:b8:c3:57:a3:c0:48:4a:
                    6c:6e:c2:96:e8:37:40:6d:d3:88:fd:df:fe:c9:ed:
                    93:1d:66:16:c9:44:f8:a4:7e:24:2a:1e:31:63:b3:
                    97:1c:3c:3a:84:41:2c:3c:4a:bd:9e:ed:85:c8:3b:
                    79:32:9a:e7:a2:fb:15:97:7e:0f:77:7f:06:64:24:
                    9e:02:ae:b4:f4:f4:68:93:9b:94:7a:74:f3:94:56:
                    1e:df:c0:e5:22:88:e1:96:87:e0:6a:3c:0c:59:5c:
                    d1:96:08:bc:33:ac:d6:03:8a:e4:76:cf:b0:8f:09:
                    17:e2:a3:32:0b:70:c5:7e:5e:83:51:95:12:6a:e1:
                    a7:a7:2e:f2:7a:e7:f6:4a:58:90:ca:5e:82:b9:90:
                    f8:63:25:ec:01:d0:98:87:d8:c7:c7:cd:36:fa:68:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CA:91:01:70:54:09:9B:E6:18:03:A6:F0:21:5A:12:0B:22:F6:D3
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/k8qRAXBUCZvmGAOm8CFaEgsi9tM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.161.96.0-193.161.100.255
                  193.161.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:fe:fb:2b:c9:f7:6c:e4:35:aa:6b:a0:a5:fa:34:88:5e:
         46:c5:09:9a:92:c2:60:e7:75:f7:ef:b1:ec:5e:11:97:ba:b7:
         35:5e:d5:be:93:36:dc:4c:1f:c2:db:fb:e0:67:1a:25:96:1a:
         a4:e6:55:41:93:76:0f:e4:8a:02:a5:c4:80:93:41:c3:86:9b:
         ff:4e:02:38:20:71:56:5a:be:16:4f:0a:c6:bd:3a:80:74:60:
         70:19:63:95:b4:3b:4f:8e:25:ab:79:3c:b3:e2:d4:ea:e1:3e:
         24:b8:6b:42:7f:f5:48:6d:5f:28:80:69:3c:6f:cc:fe:69:62:
         e8:cf:ed:e3:1e:4b:1e:52:35:17:4c:f3:6a:83:a1:a2:c2:fe:
         99:6a:9e:28:02:ee:79:01:0d:f0:47:bd:bc:dc:67:6a:af:64:
         7c:c6:52:e5:1f:23:29:f4:b7:64:8b:19:43:91:72:87:ad:2a:
         fa:b2:81:d5:d8:83:97:e1:47:ad:f6:64:37:51:55:30:c2:fc:
         59:0c:6f:5f:a9:f8:4b:15:82:07:9b:9d:46:19:b3:b8:81:3a:
         62:e9:17:42:72:13:cb:eb:e6:a9:d1:8b:10:5d:33:89:6a:06:
         27:53:98:4d:74:d3:8f:ec:e5:41:04:0c:1e:ed:22:ab:54:c9:
         b2:66:a4:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIECYS4sDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NmM2ZmNhNzUyNjljNmIwMTBhNmZhNzEwOWU0MzE1ZTA2YTA4M2RjMB4XDTIyMDEw
MTEwMDMwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTNjYTkxMDE3MDU0
MDk5YmU2MTgwM2E2ZjAyMTVhMTIwYjIyZjZkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQUgM0gEn/pN2hrhl+EwS203aVmiSX6uGg5zxB6gZ8/dfm2
eNQNk8bpCavXNwnsYzZwZGMKDDcnW2ZLR9sSWu6WODuBYHx3qPs0ed2TwBt+J1oB
lV/txRenjy9ZM6b2Au24w1ejwEhKbG7Clug3QG3TiP3f/sntkx1mFslE+KR+JCoe
MWOzlxw8OoRBLDxKvZ7thcg7eTKa56L7FZd+D3d/BmQkngKutPT0aJOblHp085RW
Ht/A5SKI4ZaH4Go8DFlc0ZYIvDOs1gOK5HbPsI8JF+KjMgtwxX5eg1GVEmrhp6cu
8nrn9kpYkMpegrmQ+GMl7AHQmIfYx8fNNvpoN4MCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBSTypEBcFQJm+YYA6bwIVoSCyL20zAfBgNVHSMEGDAWgBSmxvynUmnGsBCm
+nEJ5DFeBqCD3DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BzYjhwMUpweHJBUXB2cHhDZVF4WGdhZ2c5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvZWFiN2VmLThjZDYtNGRmZS04ZjFlLTg2ZTI5ZjA1ZWI5Ny8x
L2s4cVJBWEJVQ1p2bUdBT204Q0ZhRWdzaTl0TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
ZWFiN2VmLThjZDYtNGRmZS04ZjFlLTg2ZTI5ZjA1ZWI5Ny8xL3BzYjhwMUpweHJB
UXB2cHhDZVF4WGdhZ2c5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQFwaFgAwQAwaFkAwQAwaFmMA0G
CSqGSIb3DQEBCwUAA4IBAQCtFf77K8n3bOQ1qmugpfo0iF5GxQmaksJg53X377Hs
XhGXurc1XtW+kzbcTB/C2/vgZxollhqk5lVBk3YP5IoCpcSAk0HDhpv/TgI4IHFW
Wr4WTwrGvTqAdGBwGWOVtDtPjiWreTyz4tTq4T4kuGtCf/VIbV8ogGk8b8z+aWLo
z+3jHkseUjUXTPNqg6Giwv6Zap4oAu55AQ3wR7283Gdqr2R8xlLlHyMp9LdkixlD
kXKHrSr6soHV2IOX4Uet9mQ3UVUwwvxZDG9fqfhLFYIHm51GGbO4gTpi6RdCchPL
6+ap0YsQXTOJagYnU5hNdNOP7OVBBAwe7SKrVMmyZqR9
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:53 2023 by rpki-client on console.sobornost.net