Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa
File:                     Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa (raw, json)
Hash identifier:          MVcaffMAzcoSUfe3n6YZzEG/UToSu16Y5EZbpOafvtw=
Subject key identifier:   56:18:B4:AC:2C:DF:5D:6D:07:A5:CE:A2:56:25:0C:43:5F:1F:DE:53
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       4319CD8B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa
Signing time:             Tue 24 May 2022 11:01:13 +0000
ROA not before:           Tue 24 May 2022 11:01:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60033
IP address blocks:        188.213.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125764491 (0x4319cd8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May 24 11:01:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5618b4ac2cdf5d6d07a5cea256250c435f1fde53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:16:3d:5b:c1:97:b5:f5:1c:3a:6c:d6:05:
                    20:69:24:c6:fe:b7:be:92:92:eb:04:ab:53:6c:04:
                    f2:3f:a2:50:84:37:e2:f1:5b:95:c5:52:d5:d6:97:
                    b1:65:66:86:30:64:79:c8:77:99:7d:ed:86:e5:f1:
                    24:b7:0f:05:81:a2:ea:80:ce:89:bf:13:db:6c:48:
                    37:d6:bb:88:ca:41:cc:97:b0:d8:84:8a:b7:2a:14:
                    56:27:99:81:90:25:0b:f4:25:9d:d3:f4:20:be:16:
                    15:a9:68:10:bf:dd:7d:a6:c3:95:fd:0d:2e:2c:5b:
                    81:a8:67:74:a6:b7:d9:e1:4f:4b:50:4a:fb:2d:a6:
                    4f:75:e6:38:04:de:a1:55:23:bd:4a:38:fc:2a:3d:
                    58:3c:6d:0a:5a:aa:f5:b6:33:8d:0d:be:7c:1e:04:
                    90:71:a3:f7:3d:7c:f7:f4:6e:13:0a:d0:86:bb:ce:
                    a2:d3:bf:88:be:8c:bf:b8:94:05:c8:3f:02:66:b3:
                    d9:77:0f:61:01:f7:c7:c7:97:03:51:c2:57:c3:f0:
                    76:38:7d:42:07:36:8e:30:77:51:21:fd:90:ab:45:
                    14:9a:5b:fc:91:2b:bf:80:65:95:f1:b7:fc:01:fe:
                    06:4d:71:3f:ca:23:fb:38:09:82:d1:fe:dd:fe:ab:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:B4:AC:2C:DF:5D:6D:07:A5:CE:A2:56:25:0C:43:5F:1F:DE:53
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.213.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:e4:cf:5e:21:f6:b2:f8:69:64:61:05:bd:bd:e1:c4:8c:
         e7:c7:13:ec:f2:85:57:c6:28:c3:dd:95:51:5b:21:11:bf:43:
         3d:66:d0:f6:9f:85:c8:58:71:e5:11:64:35:aa:c2:ef:bc:b1:
         b4:19:b9:a5:b0:af:4e:a8:ac:8d:f2:55:28:bb:78:98:93:b5:
         7c:1e:1c:e2:5d:f6:69:78:d5:d6:e4:62:e7:12:9f:41:6f:f9:
         e5:93:b6:9f:08:ed:06:a3:7e:6d:a2:7f:67:21:49:7c:58:2f:
         66:55:15:5c:b9:50:2a:56:2b:e3:1d:8a:c7:1e:63:5b:c6:7c:
         f9:f9:29:b0:e1:02:10:3b:78:02:77:d0:9f:0a:a0:d7:7d:9a:
         b7:b5:a7:ad:ec:43:92:f4:0d:2d:0a:fe:3c:14:c6:ea:17:76:
         a2:b9:3b:ce:94:b6:2c:bc:4e:8d:ef:34:c1:00:17:bd:0e:2e:
         ba:e0:ea:3c:67:c5:98:cd:12:b5:bd:72:9c:10:b9:f4:39:03:
         49:2f:1f:41:73:bb:4b:cc:0b:49:fe:c2:70:f9:5f:6b:86:ca:
         55:5e:6d:1f:a8:ee:2d:cb:b4:77:7f:27:60:5e:11:6a:ea:d1:
         7b:63:2f:ab:6f:04:df:36:8b:c4:d8:af:fc:18:63:52:bc:44:
         c3:3d:a5:4c
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEQxnNizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDUy
NDExMDExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTYxOGI0YWMyY2Rm
NWQ2ZDA3YTVjZWEyNTYyNTBjNDM1ZjFmZGU1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0AFj1bwZe19Rw6bNYFIGkkxv63vpKS6wSrU2wE8j+iUIQ3
4vFblcVS1daXsWVmhjBkech3mX3thuXxJLcPBYGi6oDOib8T22xIN9a7iMpBzJew
2ISKtyoUVieZgZAlC/QlndP0IL4WFaloEL/dfabDlf0NLixbgahndKa32eFPS1BK
+y2mT3XmOATeoVUjvUo4/Co9WDxtClqq9bYzjQ2+fB4EkHGj9z189/RuEwrQhrvO
otO/iL6Mv7iUBcg/Amaz2XcPYQH3x8eXA1HCV8Pwdjh9Qgc2jjB3USH9kKtFFJpb
/JErv4BllfG3/AH+Bk1xP8oj+zgJgtH+3f6rDqkCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBRWGLSsLN9dbQelzqJWJQxDXx/eUzAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS9WaGkwckN6ZlhXMEhwYzZpVmlVTVExOGYzbE0ucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNXZMA0GCSqGSIb3DQEBCwUA
A4IBAQBjHeTPXiH2svhpZGEFvb3hxIznxxPs8oVXxijD3ZVRWyERv0M9ZtD2n4XI
WHHlEWQ1qsLvvLG0GbmlsK9OqKyN8lUou3iYk7V8HhziXfZpeNXW5GLnEp9Bb/nl
k7afCO0Go35ton9nIUl8WC9mVRVcuVAqVivjHYrHHmNbxnz5+Smw4QIQO3gCd9Cf
CqDXfZq3taet7EOS9A0tCv48FMbqF3aiuTvOlLYsvE6N7zTBABe9Di664Oo8Z8WY
zRK1vXKcELn0OQNJLx9Bc7tLzAtJ/sJw+V9rhspVXm0fqO4ty7R3fydgXhFq6tF7
Yy+rbwTfNovE2K/8GGNSvETDPaVM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org