Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/7Z7i6vm701ugIb0W7pWe57xfOa4.roa
File:                     7Z7i6vm701ugIb0W7pWe57xfOa4.roa (raw, json)
Hash identifier:          qKoY8eC5D6xv8ZIzlhB62YydMQlDhMNK6ZMkaQomz94=
Subject key identifier:   ED:9E:E2:EA:F9:BB:D3:5B:A0:21:BD:16:EE:95:9E:E7:BC:5F:39:AE
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       03EC0EC7
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/7Z7i6vm701ugIb0W7pWe57xfOa4.roa
Signing time:             Sat 28 May 2022 09:09:13 +0000
ROA not before:           Sat 28 May 2022 09:09:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213145
IP address blocks:        185.117.99.0/24 maxlen: 24
                          185.117.120.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65801927 (0x3ec0ec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 28 09:09:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed9ee2eaf9bbd35ba021bd16ee959ee7bc5f39ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:39:9b:b2:1d:29:4d:10:0e:4e:31:33:56:
                    29:11:8e:d8:5c:0a:e1:a0:8a:5c:48:ee:32:b3:7c:
                    5d:b4:f4:0f:2a:68:59:2d:ed:5c:7e:f6:2d:d2:8b:
                    c6:09:51:7e:d1:70:9f:d5:3a:59:2e:e3:55:48:28:
                    05:68:d5:b9:c6:46:1e:6e:fe:52:e8:00:89:ab:c8:
                    11:a8:9e:b9:d4:77:4c:4e:11:bd:9e:9a:06:ea:e5:
                    8d:2f:d3:b0:a1:64:1c:1f:b1:3c:d0:df:fc:c2:13:
                    24:8e:fc:c2:f0:0f:ab:f0:25:2c:22:f6:0d:db:6a:
                    fe:7d:5f:f0:14:1f:c1:91:fe:1e:bf:03:43:50:7d:
                    1e:67:85:e0:cd:ff:dd:be:ef:54:bd:68:6a:2b:a9:
                    22:13:0e:dd:6f:e6:d6:1f:98:15:18:f7:b8:7f:ee:
                    e1:0f:f5:5e:e7:7e:bc:7f:78:68:8d:69:59:eb:12:
                    f5:c9:a1:de:88:d3:40:4a:cc:a5:68:09:68:af:48:
                    ba:ac:fb:da:62:e5:8d:cc:2c:5b:ae:7b:50:91:0c:
                    ed:c0:56:ee:95:ae:25:dd:ee:5c:98:de:d6:b2:b3:
                    51:33:7b:4f:f4:2b:4d:f3:ac:ef:30:48:b5:38:44:
                    8c:17:32:a9:22:0a:7b:96:c5:0c:ec:21:27:9e:79:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9E:E2:EA:F9:BB:D3:5B:A0:21:BD:16:EE:95:9E:E7:BC:5F:39:AE
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/7Z7i6vm701ugIb0W7pWe57xfOa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.99.0/24
                  185.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:20:20:5f:aa:ae:44:6d:c9:16:34:6e:d5:fd:b6:77:cf:fa:
         c0:b2:2b:b3:61:33:67:c9:a4:f1:dc:9c:d4:f7:02:35:11:37:
         42:94:53:d9:95:cf:69:13:7b:ef:2a:72:59:f2:31:fa:3a:52:
         57:ea:22:7c:0f:14:f2:e2:38:57:6e:0a:6f:75:f6:48:bf:dd:
         3d:df:e4:45:0f:5d:ae:1f:c5:f3:09:11:13:d1:43:00:cc:55:
         c7:33:cb:31:11:99:1d:15:46:ce:b2:e2:33:98:0c:a6:8c:95:
         c5:cf:11:c8:67:c4:8d:dc:49:f0:6d:1a:9e:d6:6f:6b:4e:34:
         e0:09:37:de:e0:71:dd:00:84:64:07:d8:f8:f0:1f:fe:29:51:
         77:aa:63:32:75:7a:60:83:03:e9:47:38:1e:b0:e1:60:af:18:
         d2:78:1d:23:a3:d6:03:cd:09:a8:1b:2c:a0:9c:52:37:1f:4e:
         0a:90:bc:3e:d5:ea:34:5d:af:6b:57:28:f7:7c:4c:d2:67:10:
         62:ff:fc:e2:4a:87:ee:0c:e8:18:4a:bf:07:91:fb:72:ac:23:
         f7:fc:e2:b0:b1:5c:cf:07:6c:7b:1b:88:88:ee:77:fe:46:97:
         ed:55:51:8c:69:32:ca:78:38:44:b5:70:da:55:5d:49:a4:c1:
         69:cf:0a:6a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA+wOxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTllNjg4N2VhNzU3MmE2NDExMzA2Yzg3YjBjYzA4OTM5N2E2MzU0MB4XDTIyMDUy
ODA5MDkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQ5ZWUyZWFmOWJi
ZDM1YmEwMjFiZDE2ZWU5NTllZTdiYzVmMzlhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPyOZuyHSlNEA5OMTNWKRGO2FwK4aCKXEjuMrN8XbT0Dypo
WS3tXH72LdKLxglRftFwn9U6WS7jVUgoBWjVucZGHm7+UugAiavIEaieudR3TE4R
vZ6aBurljS/TsKFkHB+xPNDf/MITJI78wvAPq/AlLCL2Ddtq/n1f8BQfwZH+Hr8D
Q1B9HmeF4M3/3b7vVL1oaiupIhMO3W/m1h+YFRj3uH/u4Q/1Xud+vH94aI1pWesS
9cmh3ojTQErMpWgJaK9Iuqz72mLljcwsW657UJEM7cBW7pWuJd3uXJje1rKzUTN7
T/QrTfOs7zBItThEjBcyqSIKe5bFDOwhJ555r40CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTtnuLq+bvTW6AhvRbulZ7nvF85rjAfBgNVHSMEGDAWgBSenmiH6nVypkET
Bsh7DMCJOXpjVDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25wNW9oLXAxY3FaQkV3Yklld3pBaVRsNlkxUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvZTJhYmFkLTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8x
LzdaN2k2dm03MDF1Z0liMFc3cFdlNTd4Zk9hNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
ZTJhYmFkLTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8xL25wNW9oLXAxY3Fa
QkV3Yklld3pBaVRsNlkxUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALl1YwMEArl1eDANBgkqhkiG9w0B
AQsFAAOCAQEAQyAgX6quRG3JFjRu1f22d8/6wLIrs2EzZ8mk8dyc1PcCNRE3QpRT
2ZXPaRN77ypyWfIx+jpSV+oifA8U8uI4V24Kb3X2SL/dPd/kRQ9drh/F8wkRE9FD
AMxVxzPLMRGZHRVGzrLiM5gMpoyVxc8RyGfEjdxJ8G0antZva0404Ak33uBx3QCE
ZAfY+PAf/ilRd6pjMnV6YIMD6Uc4HrDhYK8Y0ngdI6PWA80JqBssoJxSNx9OCpC8
PtXqNF2va1co93xM0mcQYv/84kqH7gzoGEq/B5H7cqwj9/zisLFczwdsexuIiO53
/kaX7VVRjGkyyng4RLVw2lVdSaTBac8Kag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:58 2024 by rpki-client on console-ams.rpki-client.org