Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/66RTpZXXSNjbBgD7wRgKj4n-uxY.roa
File:                     66RTpZXXSNjbBgD7wRgKj4n-uxY.roa (raw, json)
Hash identifier:          qzWbNGSwUAPhT5KoCFTxHdm1FXRY/s6BMbRBUj9ZKFw=
Subject key identifier:   EB:A4:53:A5:95:D7:48:D8:DB:06:00:FB:C1:18:0A:8F:89:FE:BB:16
Certificate issuer:       /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial:       018211EE0C8C6C5BE690F901F014344EC596
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/66RTpZXXSNjbBgD7wRgKj4n-uxY.roa
Signing time:             Mon 18 Jul 2022 15:29:49 +0000
ROA not before:           Mon 18 Jul 2022 15:29:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58110
IP address blocks:        45.88.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:11:ee:0c:8c:6c:5b:e6:90:f9:01:f0:14:34:4e:c5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
        Validity
            Not Before: Jul 18 15:29:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eba453a595d748d8db0600fbc1180a8f89febb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b7:76:8c:77:d5:a2:da:30:ac:c0:6b:5f:c3:
                    92:95:e7:6c:63:68:8b:0b:02:1c:ca:fa:f9:ab:8b:
                    cb:b7:ef:80:69:dd:0c:60:ad:56:0b:f4:7c:22:29:
                    df:63:66:4b:68:21:96:2c:02:09:a0:3b:9e:64:ab:
                    21:f6:1d:46:a0:ea:9d:37:4b:97:bf:2c:1b:85:35:
                    65:21:43:f6:25:f1:29:d9:42:21:b1:e4:21:d0:5a:
                    79:19:dc:24:42:e4:82:1a:45:3f:dc:84:c7:f4:57:
                    21:ba:97:9a:6a:11:8c:fa:3e:a9:67:59:4e:d1:a4:
                    a5:ce:cc:8b:0a:9f:79:11:b2:dc:66:27:89:ff:9f:
                    1b:0d:61:df:d5:9e:59:be:9c:7a:03:89:42:ba:f1:
                    a7:00:73:f8:1c:9f:4b:9e:05:6f:e0:32:ef:97:f6:
                    f1:af:9e:b6:8a:ac:3d:4a:a9:b2:73:29:23:4b:6f:
                    0a:0d:f5:0f:02:ff:d0:2e:24:5a:b6:2e:6e:53:8b:
                    a4:9b:4a:e4:d1:8b:35:59:e3:33:2c:f9:6a:87:61:
                    9d:25:60:73:05:5e:d7:4b:5f:e6:3f:87:0a:18:1d:
                    89:a5:43:4d:99:5f:23:49:63:cc:50:c8:61:34:5a:
                    1b:8d:a9:1e:d8:5d:06:ba:3a:14:a1:6c:90:33:b0:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A4:53:A5:95:D7:48:D8:DB:06:00:FB:C1:18:0A:8F:89:FE:BB:16
            X509v3 Authority Key Identifier:
                keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/66RTpZXXSNjbBgD7wRgKj4n-uxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:94:9e:6d:07:3f:66:3c:65:cf:d1:db:e7:05:e4:d7:1c:29:
         dd:b1:83:80:b7:a9:b8:84:37:d9:60:f7:af:fe:d4:8a:2a:04:
         21:ea:c1:85:f8:95:90:6f:f0:56:ff:e6:cd:88:3e:cc:a2:d2:
         a9:5c:85:a0:05:f2:69:a4:6a:70:9e:e4:45:3d:ea:10:92:73:
         4b:b1:9d:1c:ad:53:2f:af:c3:44:1a:24:21:00:85:60:a3:c7:
         c4:13:91:9e:5f:13:ae:c6:7f:46:75:5f:d8:c4:ab:95:f8:9f:
         d2:bd:b0:41:cc:51:5d:ef:a9:b7:84:41:ae:37:fe:64:41:df:
         8b:2f:94:01:0d:3f:5d:95:f1:70:64:47:26:be:a7:63:dd:44:
         22:f4:ad:6a:9e:98:1f:8f:ed:b8:9a:67:43:53:b7:fa:c4:6e:
         b8:fc:af:99:9e:93:9d:e9:ee:ec:14:65:bf:d5:47:de:bd:b8:
         35:26:04:94:79:fe:bc:64:1a:9d:a8:a2:a3:ee:9d:1f:a8:cf:
         cd:5e:5a:46:11:d3:05:b5:6d:d6:69:64:8b:7b:dd:7a:ac:81:
         8f:3c:f9:eb:97:49:23:04:03:62:11:82:03:84:5e:c5:1a:1b:
         4b:a1:80:a7:71:09:58:9e:c3:25:e3:2d:e2:b6:de:ed:e9:0a:
         da:79:b6:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIR7gyMbFvmkPkB8BQ0TsWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTIyOWUyNjZiMjU1ODg5OWYzNTQ3ZWU2M2Q4NGVkNjU5
NDc2OGIwHhcNMjIwNzE4MTUyOTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmE0NTNhNTk1ZDc0OGQ4ZGIwNjAwZmJjMTE4MGE4Zjg5ZmViYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrd2jHfVotowrMBrX8OSledsY2iL
CwIcyvr5q4vLt++Aad0MYK1WC/R8IinfY2ZLaCGWLAIJoDueZKsh9h1GoOqdN0uX
vywbhTVlIUP2JfEp2UIhseQh0Fp5GdwkQuSCGkU/3ITH9FchupeaahGM+j6pZ1lO
0aSlzsyLCp95EbLcZieJ/58bDWHf1Z5Zvpx6A4lCuvGnAHP4HJ9LngVv4DLvl/bx
r562iqw9SqmycykjS28KDfUPAv/QLiRati5uU4ukm0rk0Ys1WeMzLPlqh2GdJWBz
BV7XS1/mP4cKGB2JpUNNmV8jSWPMUMhhNFobjake2F0GujoUoWyQM7CcBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOukU6WV10jY2wYA+8EYCo+J/rsWMB8GA1UdIwQY
MBaAFJOiKeJmslWImfNUfuY9hO1llHaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYt
NGQ3NzdjYWNkOWE0LzEvNjZSVHBaWFhTTmpiQmdEN3dSZ0tqNG4tdXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYtNGQ3NzdjYWNkOWE0
LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVjKMA0G
CSqGSIb3DQEBCwUAA4IBAQBdlJ5tBz9mPGXP0dvnBeTXHCndsYOAt6m4hDfZYPev
/tSKKgQh6sGF+JWQb/BW/+bNiD7MotKpXIWgBfJppGpwnuRFPeoQknNLsZ0crVMv
r8NEGiQhAIVgo8fEE5GeXxOuxn9GdV/YxKuV+J/SvbBBzFFd76m3hEGuN/5kQd+L
L5QBDT9dlfFwZEcmvqdj3UQi9K1qnpgfj+24mmdDU7f6xG64/K+ZnpOd6e7sFGW/
1Ufevbg1JgSUef68ZBqdqKKj7p0fqM/NXlpGEdMFtW3WaWSLe916rIGPPPnrl0kj
BANiEYIDhF7FGhtLoYCncQlYnsMl4y3itt7t6QraebYO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-fra.rpki-client.org