Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/n-EdDH7r3MEtRYyCvL6Qsiyu_Fw.roa
File:                     n-EdDH7r3MEtRYyCvL6Qsiyu_Fw.roa (raw, json)
Hash identifier:          TkOQt+0Jacd93Ss92d6Unkozad0ggdLEUuGfbfqGddI=
Subject key identifier:   9F:E1:1D:0C:7E:EB:DC:C1:2D:45:8C:82:BC:BE:90:B2:2C:AE:FC:5C
Certificate issuer:       /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial:       022ECA
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/n-EdDH7r3MEtRYyCvL6Qsiyu_Fw.roa
Signing time:             Sun 12 Jun 2022 07:08:02 +0000
ROA not before:           Sun 12 Jun 2022 07:08:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8881
IP address blocks:        193.163.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143050 (0x22eca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
        Validity
            Not Before: Jun 12 07:08:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fe11d0c7eebdcc12d458c82bcbe90b22caefc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:e0:8f:1d:0f:b9:6a:9b:53:b6:26:84:b2:
                    76:13:1b:a5:5e:0e:e4:34:5a:30:2b:7d:0b:b5:f5:
                    d4:b1:4f:81:24:6d:a5:24:90:c0:b4:3f:43:73:67:
                    4e:70:f8:d3:a6:26:63:e4:e4:82:40:07:a6:0f:32:
                    83:05:e5:50:4b:ef:e0:26:9f:44:43:36:31:1c:98:
                    a0:32:22:28:ca:26:8d:32:6a:ab:49:64:26:b8:01:
                    52:f4:db:c1:8b:b0:96:da:b9:a0:f6:10:8f:02:04:
                    86:48:a8:63:ed:38:c7:94:f0:b4:90:cc:df:79:29:
                    52:a8:c9:35:d4:8d:fc:b4:5c:9e:84:e1:31:5f:9d:
                    3b:35:09:6e:a9:49:4e:51:33:42:62:42:fa:34:55:
                    b9:da:72:c2:28:48:38:05:f2:de:7d:c8:b3:6d:bd:
                    e8:ed:ac:78:e1:d0:64:6f:b3:18:af:b1:f9:5b:4f:
                    f0:eb:e5:74:b3:0a:7e:c2:cb:c2:85:90:58:50:4a:
                    0f:8e:81:d5:7d:11:34:30:76:4e:95:38:23:e6:7a:
                    ee:2a:0d:b2:88:d5:1d:c5:2e:ed:99:92:a3:89:59:
                    bb:28:ff:80:cf:8d:bf:65:6e:76:52:3a:6c:c8:cd:
                    b7:0a:58:28:90:2b:d2:89:f9:35:c9:e1:ac:01:a6:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E1:1D:0C:7E:EB:DC:C1:2D:45:8C:82:BC:BE:90:B2:2C:AE:FC:5C
            X509v3 Authority Key Identifier:
                keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/n-EdDH7r3MEtRYyCvL6Qsiyu_Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:0e:7b:91:19:aa:89:c2:b5:fa:e5:a4:e4:53:97:75:3c:
         8f:e8:8c:03:42:d8:f3:bb:2b:19:e2:58:9a:cb:d4:f2:0e:db:
         79:84:00:2b:8c:ee:a4:c0:e2:f5:d1:98:0b:b7:68:34:a0:32:
         a3:96:8d:f7:a8:53:66:84:47:bc:d1:2f:05:85:3d:da:df:85:
         46:f1:37:53:ec:01:d3:b7:7d:57:e8:1b:c3:5a:a7:ec:5f:b8:
         94:43:79:dd:e7:d2:51:ac:13:1f:d8:0b:c7:4f:8e:01:85:83:
         d6:87:a2:d4:c1:04:50:25:d6:d0:30:e5:92:c9:34:31:8e:eb:
         2f:d9:6f:fe:43:54:57:54:8b:10:0b:3a:7f:14:df:00:4d:44:
         80:1b:8f:28:a3:c5:29:1e:71:1d:40:48:1c:81:ad:8b:6d:34:
         37:d1:cc:99:3e:17:18:4f:a1:27:8d:26:e7:58:f4:26:b2:d8:
         61:43:e7:8e:89:9e:55:a0:f4:13:11:fc:c3:82:b2:5e:77:17:
         0d:3a:9c:dd:7a:96:83:89:e4:71:7f:5a:6f:4e:26:1a:c7:c1:
         d7:ff:25:8f:05:49:a2:b2:e7:01:ae:7e:11:7f:b8:39:da:e2:
         ab:da:cf:37:41:fe:5e:eb:0b:e4:e9:b7:ac:c4:5f:09:0b:a5:
         21:58:e9:c2
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAi7KMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNj
MDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2ZjljNDAwHhcNMjIwNjEy
MDcwODAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZmUxMWQwYzdlZWJk
Y2MxMmQ0NThjODJiY2JlOTBiMjJjYWVmYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp+rgjx0PuWqbU7YmhLJ2ExulXg7kNFowK30LtfXUsU+BJG2l
JJDAtD9Dc2dOcPjTpiZj5OSCQAemDzKDBeVQS+/gJp9EQzYxHJigMiIoyiaNMmqr
SWQmuAFS9NvBi7CW2rmg9hCPAgSGSKhj7TjHlPC0kMzfeSlSqMk11I38tFyehOEx
X507NQluqUlOUTNCYkL6NFW52nLCKEg4BfLefcizbb3o7ax44dBkb7MYr7H5W0/w
6+V0swp+wsvChZBYUEoPjoHVfRE0MHZOlTgj5nruKg2yiNUdxS7tmZKjiVm7KP+A
z42/ZW52UjpsyM23ClgokCvSifk1yeGsAaYcDQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJ/hHQx+69zBLUWMgry+kLIsrvxcMB8GA1UdIwQYMBaAFMwActqYEUGTwQTO
GmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3LzEv
bi1FZERIN3IzTUV0Ull5Q3ZMNlFzaXl1X0Z3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82
MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBC
Qk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMNMA0GCSqGSIb3DQEBCwUAA4IB
AQAcXA57kRmqicK1+uWk5FOXdTyP6IwDQtjzuysZ4liay9TyDtt5hAArjO6kwOL1
0ZgLt2g0oDKjlo33qFNmhEe80S8FhT3a34VG8TdT7AHTt31X6BvDWqfsX7iUQ3nd
59JRrBMf2AvHT44BhYPWh6LUwQRQJdbQMOWSyTQxjusv2W/+Q1RXVIsQCzp/FN8A
TUSAG48oo8UpHnEdQEgcga2LbTQ30cyZPhcYT6EnjSbnWPQmsthhQ+eOiZ5VoPQT
EfzDgrJedxcNOpzdepaDieRxf1pvTiYax8HX/yWPBUmisucBrn4Rf7g52uKr2s83
Qf5e6wvk6besxF8JC6UhWOnC
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:15 2023 by rpki-client on console.sobornost.net