Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/agoqYmIc6MM9paS7v_EjVRPDCwg.roa
File:                     agoqYmIc6MM9paS7v_EjVRPDCwg.roa (raw, json)
Hash identifier:          P0AQSXKiommOAV1LayC3klMtB4LqhU2AxLAfZM+IkVU=
Subject key identifier:   6A:0A:2A:62:62:1C:E8:C3:3D:A5:A4:BB:BF:F1:23:55:13:C3:0B:08
Certificate issuer:       /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial:       0455EBED
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/agoqYmIc6MM9paS7v_EjVRPDCwg.roa
Signing time:             Fri 27 May 2022 09:35:16 +0000
ROA not before:           Fri 27 May 2022 09:35:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15924
IP address blocks:        194.37.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72739821 (0x455ebed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
        Validity
            Not Before: May 27 09:35:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a0a2a62621ce8c33da5a4bbbff1235513c30b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:15:ff:45:46:f9:30:c7:a2:a7:f2:6f:cd:
                    cb:40:50:f7:56:dd:5b:b6:65:e5:13:75:d9:12:14:
                    2f:50:05:94:21:26:f2:5e:8d:66:bc:d4:b6:dd:e0:
                    d0:11:e6:5f:14:d4:e9:47:3f:1e:25:7f:49:09:20:
                    dd:b3:3d:64:ea:14:5c:b4:33:d6:90:6d:3d:a0:89:
                    80:cc:fd:bb:0d:28:33:96:fc:30:19:c3:68:ea:79:
                    e1:81:6f:77:07:d7:fa:7f:f9:2b:d8:22:12:34:52:
                    34:b1:04:54:05:86:b9:07:7b:74:30:a5:22:64:17:
                    b7:85:6d:72:d8:26:cf:87:ae:e5:f4:e1:78:9d:b5:
                    d8:48:81:39:92:02:dc:8e:4b:eb:58:e7:95:b7:58:
                    e2:b9:00:ca:7c:ef:0e:7d:bb:f3:c2:16:10:c3:01:
                    24:ed:32:84:3e:47:57:92:47:32:47:7a:7c:f6:1d:
                    6f:f9:30:99:d4:0b:d2:7c:ee:88:9d:81:40:62:56:
                    23:e4:7f:ad:d9:2d:bc:36:25:71:3b:46:c4:0d:20:
                    df:96:7c:70:93:60:9b:09:e9:00:db:86:dc:c8:57:
                    81:ae:2d:61:64:ec:2f:5f:44:06:bd:89:9b:c8:66:
                    3e:b0:8b:fd:66:79:0f:00:8c:04:49:d4:50:1c:4c:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:2A:62:62:1C:E8:C3:3D:A5:A4:BB:BF:F1:23:55:13:C3:0B:08
            X509v3 Authority Key Identifier:
                keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/agoqYmIc6MM9paS7v_EjVRPDCwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.37.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:3b:67:c7:ce:d3:4b:ab:ad:6d:9e:d4:78:c8:64:94:ab:
         91:ff:6c:db:ed:81:2c:40:2c:a4:eb:b8:91:80:e0:db:0f:d4:
         89:3c:a6:9d:77:d0:3f:b0:6d:87:ac:99:45:52:c1:ae:2c:05:
         e9:4f:23:3a:74:ab:e6:37:f0:a6:d6:85:f0:a0:de:59:a7:40:
         f1:79:9b:2f:73:6d:22:6f:13:fa:ea:33:42:78:e5:3e:d7:e6:
         50:4e:d7:57:e5:a8:fb:1b:1d:55:ab:bb:ac:1c:ec:80:d0:f4:
         23:32:9e:f8:50:69:e7:dd:9c:b0:6b:75:ad:4b:2f:ed:5a:a1:
         6d:71:31:b2:f1:50:1b:d1:9c:d0:a0:e3:f4:21:57:ad:fb:8d:
         80:02:5c:05:af:c2:02:f7:ce:63:94:0e:5a:1e:7d:7e:1f:44:
         e3:5d:5e:bb:ea:58:a4:dd:82:81:c0:73:06:78:78:ff:52:75:
         ca:71:4d:b5:6d:43:d5:5c:07:7d:d4:f9:a1:d6:9a:11:ae:f8:
         a0:ae:2c:3f:2c:8c:46:92:cc:01:53:b6:fd:d0:a6:00:55:14:
         82:54:85:3b:31:cb:b3:d4:f1:06:2e:83:02:97:70:f4:1d:0e:
         6a:08:2b:1e:c0:26:52:d5:fe:4c:6b:45:6e:1a:e2:6d:33:a3:
         9d:65:9e:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBFXr7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDU0MmZiYTBjMTdiNDM5MWUzMjk2YzQzNGI1ZmZmMjNhODI5YjZlMB4XDTIyMDUy
NzA5MzUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmEwYTJhNjI2MjFj
ZThjMzNkYTVhNGJiYmZmMTIzNTUxM2MzMGIwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJaEFf9FRvkwx6Kn8m/Ny0BQ91bdW7Zl5RN12RIUL1AFlCEm
8l6NZrzUtt3g0BHmXxTU6Uc/HiV/SQkg3bM9ZOoUXLQz1pBtPaCJgMz9uw0oM5b8
MBnDaOp54YFvdwfX+n/5K9giEjRSNLEEVAWGuQd7dDClImQXt4Vtctgmz4eu5fTh
eJ212EiBOZIC3I5L61jnlbdY4rkAynzvDn2788IWEMMBJO0yhD5HV5JHMkd6fPYd
b/kwmdQL0nzuiJ2BQGJWI+R/rdktvDYlcTtGxA0g35Z8cJNgmwnpANuG3MhXga4t
YWTsL19EBr2Jm8hmPrCL/WZ5DwCMBEnUUBxMCRMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRqCipiYhzowz2lpLu/8SNVE8MLCDAfBgNVHSMEGDAWgBRQVC+6DBe0OR4y
lsQ0tf/yOoKbbjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VGUXZ1Z3dYdERrZU1wYkVOTFhfOGpxQ20yNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvY2IyYmRkLTMyOTEtNDBhZi04YTg4LTVlOTc4N2I2YWVhYS8x
L2Fnb3FZbUljNk1NOXBhUzd2X0VqVlJQREN3Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
Y2IyYmRkLTMyOTEtNDBhZi04YTg4LTVlOTc4N2I2YWVhYS8xL1VGUXZ1Z3dYdERr
ZU1wYkVOTFhfOGpxQ20yNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIlXDANBgkqhkiG9w0BAQsFAAOC
AQEAaPs7Z8fO00urrW2e1HjIZJSrkf9s2+2BLEAspOu4kYDg2w/UiTymnXfQP7Bt
h6yZRVLBriwF6U8jOnSr5jfwptaF8KDeWadA8XmbL3NtIm8T+uozQnjlPtfmUE7X
V+Wo+xsdVau7rBzsgND0IzKe+FBp592csGt1rUsv7VqhbXExsvFQG9Gc0KDj9CFX
rfuNgAJcBa/CAvfOY5QOWh59fh9E411eu+pYpN2CgcBzBnh4/1J1ynFNtW1D1VwH
fdT5odaaEa74oK4sPyyMRpLMAVO2/dCmAFUUglSFOzHLs9TxBi6DApdw9B0Oaggr
HsAmUtX+TGtFbhribTOjnWWePw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:58 2023 by rpki-client on console.sobornost.net