Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/FsMDdWlt9qUST_zX-tHeXXABvl8.roa
File:                     FsMDdWlt9qUST_zX-tHeXXABvl8.roa (raw, json)
Hash identifier:          C9+zle2OFwvnXX+jWmHdlFZ5/XsUrNlh40/jxv77t0A=
Subject key identifier:   16:C3:03:75:69:6D:F6:A5:12:4F:FC:D7:FA:D1:DE:5D:70:01:BE:5F
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       36909761
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/FsMDdWlt9qUST_zX-tHeXXABvl8.roa
Signing time:             Sat 01 Jan 2022 01:01:04 +0000
ROA not before:           Sat 01 Jan 2022 01:01:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     27173
IP address blocks:        80.231.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915445601 (0x36909761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jan  1 01:01:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16c30375696df6a5124ffcd7fad1de5d7001be5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:4f:57:88:1a:93:0f:9b:8c:3a:51:b1:1d:
                    ad:99:df:1a:71:d1:f7:6c:69:18:11:db:f5:f0:b0:
                    d5:0d:54:b9:52:98:a2:b9:d6:ca:32:a6:41:9c:91:
                    af:e0:e0:f7:70:21:10:0f:b9:59:22:1c:5b:af:c8:
                    57:97:ab:d7:cf:0e:a9:d4:30:9e:ad:2d:f2:23:f8:
                    78:6f:9d:13:cf:00:3c:3d:56:d8:60:c7:c6:e9:94:
                    dc:ee:0c:8b:47:72:67:47:98:a1:e3:3d:62:06:a3:
                    6b:61:9c:b4:66:89:c9:3e:a6:e7:65:29:d2:11:c4:
                    9d:2f:42:cc:21:0f:4f:09:05:c5:99:61:31:61:d5:
                    56:8d:9d:75:45:a4:a9:a9:c7:ca:0e:83:4b:b4:24:
                    60:f7:a1:4f:19:7a:5e:5a:fc:97:39:87:62:60:16:
                    3e:2c:31:ec:da:1f:4e:11:f4:f7:85:b7:2b:37:55:
                    46:d1:4b:cd:d6:c9:01:af:de:51:e2:f4:eb:f1:c3:
                    56:38:e8:7e:ad:03:58:de:e5:d1:cd:d5:65:6d:b5:
                    bc:fa:78:2c:c7:92:2d:dc:82:61:03:01:e6:ff:4f:
                    0a:6f:89:e1:ec:2d:95:50:de:2c:c2:86:fe:7e:fa:
                    e6:90:d9:92:c8:45:ec:25:d9:ff:12:26:c6:da:61:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C3:03:75:69:6D:F6:A5:12:4F:FC:D7:FA:D1:DE:5D:70:01:BE:5F
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/FsMDdWlt9qUST_zX-tHeXXABvl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.231.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:1f:74:7e:3f:f6:9d:6a:af:b9:d6:31:71:98:43:a0:10:d9:
         15:05:98:43:ea:c1:8b:2b:24:b2:8c:56:aa:88:03:87:4b:8e:
         f8:cc:83:d8:d8:86:2b:33:00:8d:46:f7:26:a6:a3:b2:97:49:
         45:58:4a:7f:f0:1b:fb:8b:f6:cf:e2:36:88:85:e1:06:94:3e:
         ce:f9:55:a9:7e:48:1c:42:36:05:a1:9c:45:12:7f:53:99:36:
         6d:01:2d:2c:c0:c5:08:49:7d:e4:a4:4d:ef:3c:c5:34:71:bb:
         2a:ba:93:7c:f1:b0:aa:ec:29:22:6c:d8:4b:7a:26:44:f3:95:
         5d:45:40:09:f2:f5:c0:be:2a:5a:71:32:c6:4f:89:3b:33:6e:
         e9:8d:83:90:f5:56:a1:19:c5:84:b4:83:ba:e0:c1:8a:68:f7:
         9f:e6:38:67:15:3e:54:4d:c5:92:0a:33:10:b5:2e:60:83:2b:
         9a:0c:0f:44:33:86:03:1f:51:24:81:c6:71:01:47:ba:45:55:
         3b:6a:db:ae:41:6b:00:1f:a5:46:e0:f5:70:a5:d6:1b:92:68:
         3a:4f:54:f1:48:6f:ec:05:e2:17:c8:cc:d3:4c:89:34:42:0d:
         b1:4a:45:f7:cf:41:81:cd:c6:80:df:9e:5e:f0:84:24:4e:00:
         c2:54:5d:17
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENpCXYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZGQxYjI1ODc0OTBhZDA2MWNiMjA3MTc2YmRlZWM4MWE1MzE1ODhjMB4XDTIyMDEw
MTAxMDEwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZjMzAzNzU2OTZk
ZjZhNTEyNGZmY2Q3ZmFkMWRlNWQ3MDAxYmU1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKu+T1eIGpMPm4w6UbEdrZnfGnHR92xpGBHb9fCw1Q1UuVKY
ornWyjKmQZyRr+Dg93AhEA+5WSIcW6/IV5er188OqdQwnq0t8iP4eG+dE88APD1W
2GDHxumU3O4Mi0dyZ0eYoeM9Ygaja2GctGaJyT6m52Up0hHEnS9CzCEPTwkFxZlh
MWHVVo2ddUWkqanHyg6DS7QkYPehTxl6Xlr8lzmHYmAWPiwx7NofThH094W3KzdV
RtFLzdbJAa/eUeL06/HDVjjofq0DWN7l0c3VZW21vPp4LMeSLdyCYQMB5v9PCm+J
4ewtlVDeLMKG/n765pDZkshF7CXZ/xImxtphcZsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQWwwN1aW32pRJP/Nf60d5dcAG+XzAfBgNVHSMEGDAWgBRN0bJYdJCtBhyy
Bxdr3uyBpTFYjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RkR3lXSFNRclFZY3NnY1hhOTdzZ2FVeFdJdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvMDFkMmFmLTFmMjEtNGI4MC1iNjY1LWRiNDYzYzVmYjBiNC8x
L0ZzTURkV2x0OXFVU1RfelgtdEhlWFhBQnZsOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
MDFkMmFmLTFmMjEtNGI4MC1iNjY1LWRiNDYzYzVmYjBiNC8xL1RkR3lXSFNRclFZ
Y3NnY1hhOTdzZ2FVeFdJdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFDn4TANBgkqhkiG9w0BAQsFAAOC
AQEA0x90fj/2nWqvudYxcZhDoBDZFQWYQ+rBiysksoxWqogDh0uO+MyD2NiGKzMA
jUb3JqajspdJRVhKf/Ab+4v2z+I2iIXhBpQ+zvlVqX5IHEI2BaGcRRJ/U5k2bQEt
LMDFCEl95KRN7zzFNHG7KrqTfPGwquwpImzYS3omRPOVXUVACfL1wL4qWnEyxk+J
OzNu6Y2DkPVWoRnFhLSDuuDBimj3n+Y4ZxU+VE3FkgozELUuYIMrmgwPRDOGAx9R
JIHGcQFHukVVO2rbrkFrAB+lRuD1cKXWG5JoOk9U8Uhv7AXiF8jM00yJNEINsUpF
989Bgc3GgN+eXvCEJE4AwlRdFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:30 2024 by rpki-client on console-fra.rpki-client.org