Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/tioY1FAhezS6c4_gVQFWaxyYxJM.roa
File:                     tioY1FAhezS6c4_gVQFWaxyYxJM.roa (raw, json)
Hash identifier:          uA4iGI3o8EmbU2z6MYpU0NCvX7l0O4qaKqjGI8uN24k=
Subject key identifier:   B6:2A:18:D4:50:21:7B:34:BA:73:8F:E0:55:01:56:6B:1C:98:C4:93
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       03F23368
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/tioY1FAhezS6c4_gVQFWaxyYxJM.roa
Signing time:             Sun 29 May 2022 13:07:14 +0000
ROA not before:           Sun 29 May 2022 13:07:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49632
IP address blocks:        188.125.175.0/24 maxlen: 24
                          188.125.173.0/24 maxlen: 24
                          188.125.172.0/24 maxlen: 24
                          188.125.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66204520 (0x3f23368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 29 13:07:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b62a18d450217b34ba738fe05501566b1c98c493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:60:c7:82:08:8d:d0:79:d1:0e:e3:f7:90:
                    26:72:80:36:2d:81:9f:59:6b:bb:92:37:8d:d8:a4:
                    dc:f1:f8:40:f1:1b:cf:f0:bd:f9:5c:27:c0:96:aa:
                    5f:df:2b:cf:fa:90:d2:4c:c9:d5:6e:4d:70:39:d0:
                    aa:50:0e:fe:b6:bc:96:e7:2d:d6:5c:00:c0:ea:22:
                    39:ca:4d:cd:ff:49:25:cd:49:50:fd:e6:67:b6:78:
                    be:14:f5:e5:63:96:07:1d:8d:cf:fa:29:ee:02:b6:
                    3e:59:ac:c5:33:94:04:07:03:3b:34:36:a5:71:cd:
                    9f:be:23:66:ad:55:29:e0:7e:72:7d:0f:06:e4:99:
                    7f:a9:2a:e5:a3:88:d3:56:29:df:49:6d:6f:91:90:
                    51:aa:01:0a:91:ab:37:6e:95:8e:12:1d:c7:47:18:
                    21:2f:c3:40:a6:7e:1d:54:84:74:21:6f:67:ee:0b:
                    26:0d:a0:a8:45:35:72:e6:97:ff:82:68:f4:59:9c:
                    18:6b:7e:b7:ab:c3:4b:fc:ec:57:ce:7f:70:82:9d:
                    62:c0:f4:9c:37:ac:8c:8c:b9:3e:03:9d:f7:62:17:
                    f8:aa:3d:bd:b5:d3:e2:1c:d6:e5:c3:a4:04:98:8d:
                    a3:16:30:9b:a0:07:60:aa:fc:ff:22:ff:14:86:f0:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2A:18:D4:50:21:7B:34:BA:73:8F:E0:55:01:56:6B:1C:98:C4:93
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/tioY1FAhezS6c4_gVQFWaxyYxJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.125.171.0-188.125.173.255
                  188.125.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:57:88:d1:c5:74:eb:bc:01:4c:72:b5:81:6a:0f:9d:7d:80:
         da:11:f3:13:61:a9:b8:b7:5a:eb:7c:e5:2f:ad:91:8b:c1:b8:
         89:d7:e6:c8:93:bf:be:cb:bc:ae:bb:cb:9e:17:e4:6b:f5:8e:
         44:8e:61:6a:b2:58:ed:42:04:52:09:b6:5c:d6:24:95:68:30:
         ac:53:ea:0f:6e:db:16:35:dd:8b:f9:83:61:fe:90:f7:a6:87:
         3a:e7:64:db:c7:ac:36:cd:66:bf:53:51:cb:29:22:d4:28:e9:
         b7:38:83:85:42:16:31:fb:3e:36:bb:89:ae:63:b2:33:74:84:
         56:c2:a0:4f:e5:ff:47:0a:e5:35:45:40:24:f6:21:cf:65:8b:
         2c:3d:ab:20:30:a5:8f:eb:02:92:5b:fa:ac:a0:e7:8c:6d:64:
         24:20:36:e5:2e:ed:d5:91:19:37:29:f9:d8:99:10:77:c5:21:
         46:ca:7b:43:3f:99:f8:45:81:86:17:6c:25:3d:16:e6:6c:3e:
         69:94:ce:be:a4:05:a8:13:c8:37:0e:97:53:c6:c0:e4:f7:7c:
         17:0b:9d:21:54:0e:c9:75:2e:d5:3a:f6:8a:aa:7f:08:a2:51:
         11:8f:62:93:db:c2:f4:20:62:7a:73:50:d9:c9:da:0b:89:38:
         ce:1a:04:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEA/IzaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTllNjg4N2VhNzU3MmE2NDExMzA2Yzg3YjBjYzA4OTM5N2E2MzU0MB4XDTIyMDUy
OTEzMDcxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjYyYTE4ZDQ1MDIx
N2IzNGJhNzM4ZmUwNTUwMTU2NmIxYzk4YzQ5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqSYMeCCI3QedEO4/eQJnKANi2Bn1lru5I3jdik3PH4QPEb
z/C9+VwnwJaqX98rz/qQ0kzJ1W5NcDnQqlAO/ra8luct1lwAwOoiOcpNzf9JJc1J
UP3mZ7Z4vhT15WOWBx2Nz/op7gK2PlmsxTOUBAcDOzQ2pXHNn74jZq1VKeB+cn0P
BuSZf6kq5aOI01Yp30ltb5GQUaoBCpGrN26VjhIdx0cYIS/DQKZ+HVSEdCFvZ+4L
Jg2gqEU1cuaX/4Jo9FmcGGt+t6vDS/zsV85/cIKdYsD0nDesjIy5PgOd92IX+Ko9
vbXT4hzW5cOkBJiNoxYwm6AHYKr8/yL/FIbwXN8CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBS2KhjUUCF7NLpzj+BVAVZrHJjEkzAfBgNVHSMEGDAWgBSenmiH6nVypkET
Bsh7DMCJOXpjVDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25wNW9oLXAxY3FaQkV3Yklld3pBaVRsNlkxUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvZTJhYmFkLTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8x
L3Rpb1kxRkFoZXpTNmM0X2dWUUZXYXh5WXhKTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
ZTJhYmFkLTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8xL25wNW9oLXAxY3Fa
QkV3Yklld3pBaVRsNlkxUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAvH2rAwQBvH2sAwQAvH2vMA0G
CSqGSIb3DQEBCwUAA4IBAQBWV4jRxXTrvAFMcrWBag+dfYDaEfMTYam4t1rrfOUv
rZGLwbiJ1+bIk7++y7yuu8ueF+Rr9Y5EjmFqsljtQgRSCbZc1iSVaDCsU+oPbtsW
Nd2L+YNh/pD3poc652Tbx6w2zWa/U1HLKSLUKOm3OIOFQhYx+z42u4muY7IzdIRW
wqBP5f9HCuU1RUAk9iHPZYssPasgMKWP6wKSW/qsoOeMbWQkIDblLu3VkRk3KfnY
mRB3xSFGyntDP5n4RYGGF2wlPRbmbD5plM6+pAWoE8g3DpdTxsDk93wXC50hVA7J
dS7VOvaKqn8IolERj2KT28L0IGJ6c1DZydoLiTjOGgR9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:01 2024 by rpki-client on console-fra.rpki-client.org