Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/Zpim2iOBSVoCqLMvHDsgyKsKs_g.roa
File:                     Zpim2iOBSVoCqLMvHDsgyKsKs_g.roa (raw, json)
Hash identifier:          Ti3//3oHbBOvDppTuhMuhWztr9LlEYl4X/YQX5ctSbA=
Subject key identifier:   66:98:A6:DA:23:81:49:5A:02:A8:B3:2F:1C:3B:20:C8:AB:0A:B3:F8
Certificate issuer:       /CN=26e3fc79b638b123191dafa4e886d3a5acad487f
Certificate serial:       01830E32D15AC7A9C5D717108D4045BBDC98
Authority key identifier: 26:E3:FC:79:B6:38:B1:23:19:1D:AF:A4:E8:86:D3:A5:AC:AD:48:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JuP8ebY4sSMZHa-k6IbTpaytSH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/Zpim2iOBSVoCqLMvHDsgyKsKs_g.roa
Signing time:             Mon 05 Sep 2022 15:09:14 +0000
ROA not before:           Mon 05 Sep 2022 15:09:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211087
IP address blocks:        91.216.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0e:32:d1:5a:c7:a9:c5:d7:17:10:8d:40:45:bb:dc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26e3fc79b638b123191dafa4e886d3a5acad487f
        Validity
            Not Before: Sep  5 15:09:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6698a6da2381495a02a8b32f1c3b20c8ab0ab3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:d1:16:d6:4f:ac:85:83:b6:7f:cb:3e:90:
                    cd:30:68:1c:b9:98:5b:92:b6:40:2a:13:03:f4:a4:
                    d2:21:20:3e:b3:4c:80:7c:00:e3:a4:71:cd:ef:a0:
                    fe:ca:61:1a:01:a3:4f:1a:86:f5:7b:0e:d5:2d:10:
                    cf:e0:97:1c:3f:54:b6:a1:13:b1:4c:72:eb:67:b8:
                    bf:45:32:09:e8:4c:89:c2:e6:3e:1b:23:13:bb:8e:
                    65:dc:1c:ee:e0:58:93:47:05:00:3c:4c:3f:ea:30:
                    e6:8e:fd:b6:28:2d:4e:03:9f:d6:46:83:89:1f:34:
                    e7:09:2c:e9:ac:76:3a:40:44:c7:a1:c6:96:66:44:
                    b2:d9:9c:7a:07:3d:fb:d2:4a:d4:41:00:66:57:04:
                    8d:8e:dc:65:42:35:ab:7c:4f:39:af:10:3b:b1:46:
                    5d:ee:7b:2d:cd:49:79:8b:e8:30:37:83:d6:19:ba:
                    ad:f0:70:cd:1e:ab:94:02:5d:9e:60:07:2a:48:94:
                    f9:bc:78:d3:9a:af:06:fc:ff:f2:77:7c:e9:37:59:
                    8c:1b:98:15:79:42:34:9a:c8:68:01:2d:7d:03:d3:
                    b9:45:0b:34:3a:bf:99:d2:ec:74:60:e7:0e:7b:03:
                    63:83:7c:83:b9:5a:a2:a1:bc:fb:df:e4:71:f8:74:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:A6:DA:23:81:49:5A:02:A8:B3:2F:1C:3B:20:C8:AB:0A:B3:F8
            X509v3 Authority Key Identifier:
                keyid:26:E3:FC:79:B6:38:B1:23:19:1D:AF:A4:E8:86:D3:A5:AC:AD:48:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuP8ebY4sSMZHa-k6IbTpaytSH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/Zpim2iOBSVoCqLMvHDsgyKsKs_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/JuP8ebY4sSMZHa-k6IbTpaytSH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:c5:8d:47:95:ea:f6:83:da:03:36:95:53:3c:94:21:6a:
         c8:e9:8b:b7:d0:ce:ff:f8:a2:f5:81:f8:8f:55:5d:9d:d3:a1:
         1a:da:fb:9d:6b:0e:36:66:9e:aa:53:5c:4f:bf:04:bb:d6:6b:
         4c:f9:fd:78:83:08:bf:33:dc:93:bf:d7:1c:69:ae:a9:de:2e:
         d1:23:05:c3:ef:67:4b:ad:ac:1b:90:30:db:8a:e7:ab:5c:17:
         e0:4b:bc:6c:8e:fa:6b:d1:0f:58:b9:0c:85:51:a3:a0:92:79:
         5e:15:ee:67:1e:8f:01:0c:f8:2d:68:0b:82:b5:05:b8:c1:9b:
         b2:4d:e7:c2:ac:d3:7d:3e:00:2c:99:26:be:22:8f:1a:42:3b:
         bc:29:7a:26:22:5d:7e:61:c8:94:ab:0f:ae:1f:97:af:62:80:
         6a:1e:52:eb:67:98:9b:ba:86:f8:2c:bd:59:79:04:f4:42:79:
         1e:5e:3d:da:3d:7f:e2:7b:67:49:4b:aa:ec:15:2d:90:6c:8e:
         fd:c0:ed:57:83:64:ec:ae:10:ac:61:d2:dd:ad:95:4f:c0:12:
         6c:6e:f5:aa:ac:92:a1:60:64:f4:4e:bd:b8:4e:ca:ba:dd:2d:
         e3:c8:0d:81:63:4d:f1:d1:25:47:eb:b8:9f:6b:97:18:d3:e5:
         ab:ad:ba:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMOMtFax6nF1xcQjUBFu9yYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZTNmYzc5YjYzOGIxMjMxOTFkYWZhNGU4ODZkM2E1YWNh
ZDQ4N2YwHhcNMjIwOTA1MTUwOTE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Njk4YTZkYTIzODE0OTVhMDJhOGIzMmYxYzNiMjBjOGFiMGFiM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+vRFtZPrIWDtn/LPpDNMGgcuZhb
krZAKhMD9KTSISA+s0yAfADjpHHN76D+ymEaAaNPGob1ew7VLRDP4JccP1S2oROx
THLrZ7i/RTIJ6EyJwuY+GyMTu45l3Bzu4FiTRwUAPEw/6jDmjv22KC1OA5/WRoOJ
HzTnCSzprHY6QETHocaWZkSy2Zx6Bz370krUQQBmVwSNjtxlQjWrfE85rxA7sUZd
7nstzUl5i+gwN4PWGbqt8HDNHquUAl2eYAcqSJT5vHjTmq8G/P/yd3zpN1mMG5gV
eUI0mshoAS19A9O5RQs0Or+Z0ux0YOcOewNjg3yDuVqiobz73+Rx+HRvkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaYptojgUlaAqizLxw7IMirCrP4MB8GA1UdIwQY
MBaAFCbj/Hm2OLEjGR2vpOiG06WsrUh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnVQOGViWTRzU01aSGEtazZJYlRwYXl0U0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81M2IwMTMtNTkxMi00MmIwLWIwMjYt
YTU1YjBkY2MyOTQ2LzEvWnBpbTJpT0JTVm9DcUxNdkhEc2d5S3NLc19nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81M2IwMTMtNTkxMi00MmIwLWIwMjYtYTU1YjBkY2MyOTQ2
LzEvSnVQOGViWTRzU01aSGEtazZJYlRwYXl0U0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9i6MA0G
CSqGSIb3DQEBCwUAA4IBAQAA2cWNR5Xq9oPaAzaVUzyUIWrI6Yu30M7/+KL1gfiP
VV2d06Ea2vudaw42Zp6qU1xPvwS71mtM+f14gwi/M9yTv9ccaa6p3i7RIwXD72dL
rawbkDDbiuerXBfgS7xsjvpr0Q9YuQyFUaOgknleFe5nHo8BDPgtaAuCtQW4wZuy
TefCrNN9PgAsmSa+Io8aQju8KXomIl1+YciUqw+uH5evYoBqHlLrZ5ibuob4LL1Z
eQT0QnkeXj3aPX/ie2dJS6rsFS2QbI79wO1Xg2TsrhCsYdLdrZVPwBJsbvWqrJKh
YGT0Tr24Tsq63S3jyA2BY03x0SVH67ifa5cY0+WrrboA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:44 2024 by rpki-client on console-ams.rpki-client.org