Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/7zljv5H0MBZZ18WRH8WFlahb64o.roa
File:                     7zljv5H0MBZZ18WRH8WFlahb64o.roa (raw, json)
Hash identifier:          5y87zw4gWGURpaj+MuZZiOAKtrq651CsCGoBArLLILM=
Subject key identifier:   EF:39:63:BF:91:F4:30:16:59:D7:C5:91:1F:C5:85:95:A8:5B:EB:8A
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       18F4B378
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/7zljv5H0MBZZ18WRH8WFlahb64o.roa
Signing time:             Sat 01 Jan 2022 11:00:34 +0000
ROA not before:           Sat 01 Jan 2022 11:00:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200989
IP address blocks:        185.83.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418689912 (0x18f4b378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Jan  1 11:00:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef3963bf91f4301659d7c5911fc58595a85beb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:ae:42:2f:91:79:41:fc:5f:02:88:a0:a1:
                    e6:3b:ec:8c:54:63:ef:2a:0f:8b:f1:45:ff:16:92:
                    4f:a7:16:39:fe:fc:7a:a8:53:ca:52:dd:f8:76:a0:
                    38:6e:02:22:19:68:ad:77:bc:f9:ad:27:c1:95:59:
                    c5:c7:2b:9a:77:62:4a:75:62:58:24:a9:05:bd:f1:
                    d2:68:20:7f:1c:93:75:f1:43:53:ab:a8:87:dd:e0:
                    c6:11:6a:d6:d4:3a:56:70:1e:96:15:20:5e:6b:3f:
                    10:26:b0:9b:3e:e7:b3:37:c8:63:13:c5:e3:fc:da:
                    e8:5c:39:d8:31:fb:03:a0:68:35:83:74:4a:9a:cf:
                    d6:cf:39:b1:47:9c:cb:70:4f:33:8b:59:3f:56:8f:
                    7c:c7:f1:7e:af:40:af:fa:01:a6:ff:ca:ff:7b:ce:
                    1e:aa:49:a8:c3:f6:bc:2e:44:01:3a:3c:38:41:75:
                    02:a8:97:e3:c3:cb:5d:b7:1b:9c:71:24:88:f8:93:
                    d4:21:b8:aa:41:8a:7a:91:8c:d8:88:e5:e4:6d:b3:
                    24:01:9c:1e:3d:03:aa:ed:3a:b0:8a:d8:f0:55:52:
                    80:ca:10:38:c2:49:5d:bb:b6:ba:77:7d:30:52:71:
                    d5:c7:9c:84:73:53:92:96:9a:cd:3f:bf:ac:db:ed:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:63:BF:91:F4:30:16:59:D7:C5:91:1F:C5:85:95:A8:5B:EB:8A
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/7zljv5H0MBZZ18WRH8WFlahb64o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:b8:e5:d8:47:93:9a:12:53:43:fa:4d:c6:6d:ad:4a:25:8c:
         46:07:49:ce:fe:a7:b0:a7:9b:51:53:91:c3:fb:2a:a1:eb:7d:
         ff:bd:40:7d:54:80:e0:3c:9b:66:64:35:67:9f:e8:87:49:b0:
         3f:ad:11:f6:f8:54:ce:eb:28:3c:e9:49:cc:c9:16:8b:0f:15:
         b9:c3:12:ca:89:86:39:57:f8:6e:a5:5a:f2:ea:7d:c4:76:fb:
         9f:e9:a1:7b:1f:3b:e7:92:dd:eb:ba:f6:da:70:89:11:e5:ab:
         32:9a:03:c6:c0:5b:e9:50:99:4f:5a:e5:fe:6b:63:34:ea:f6:
         50:45:c9:e5:2c:d3:38:f9:d2:4e:4a:ab:20:fe:c8:c4:d1:5a:
         89:c2:f8:f1:53:1b:96:eb:d7:ee:53:de:d8:ab:a2:d6:87:6b:
         3d:7f:24:4a:28:7f:48:11:c4:05:31:2c:60:a5:e4:10:97:f2:
         b7:64:9f:ac:0f:4b:eb:3e:8a:b2:42:5d:f6:f5:11:d9:8a:be:
         d0:a3:59:92:72:c3:5f:5c:65:b0:20:1c:b0:e5:8a:31:c6:b6:
         79:78:2e:40:00:0d:2f:92:38:c7:6c:42:c2:8a:40:45:34:cb:
         4a:1d:fb:17:cb:57:57:d0:fa:93:61:63:79:da:57:e2:e7:83:
         c4:ee:82:f7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGPSzeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YjAwM2U1ODNiZGIyNTExZmY1N2FiN2EzMmZjZTc0MTMzNGIzNDNiMB4XDTIyMDEw
MTExMDAzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWYzOTYzYmY5MWY0
MzAxNjU5ZDdjNTkxMWZjNTg1OTVhODViZWI4YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANICrkIvkXlB/F8CiKCh5jvsjFRj7yoPi/FF/xaST6cWOf78
eqhTylLd+HagOG4CIhlorXe8+a0nwZVZxccrmndiSnViWCSpBb3x0mggfxyTdfFD
U6uoh93gxhFq1tQ6VnAelhUgXms/ECawmz7nszfIYxPF4/za6Fw52DH7A6BoNYN0
SprP1s85sUecy3BPM4tZP1aPfMfxfq9Ar/oBpv/K/3vOHqpJqMP2vC5EATo8OEF1
AqiX48PLXbcbnHEkiPiT1CG4qkGKepGM2Ijl5G2zJAGcHj0Dqu06sIrY8FVSgMoQ
OMJJXbu2und9MFJx1cechHNTkpaazT+/rNvtBG0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTvOWO/kfQwFlnXxZEfxYWVqFvrijAfBgNVHSMEGDAWgBQrAD5YO9slEf9X
q3oy/OdBM0s0OzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0t3QS1XRHZiSlJIX1Y2dDZNdnpuUVROTE5Ecy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvMTk0ZjIyLTg2ODktNGZkYi05YzQxLTA1OGJiZjlkNWUyNy8x
Lzd6bGp2NUgwTUJaWjE4V1JIOFdGbGFoYjY0by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
MTk0ZjIyLTg2ODktNGZkYi05YzQxLTA1OGJiZjlkNWUyNy8xL0t3QS1XRHZiSlJI
X1Y2dDZNdnpuUVROTE5Ecy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlTBTANBgkqhkiG9w0BAQsFAAOC
AQEAf7jl2EeTmhJTQ/pNxm2tSiWMRgdJzv6nsKebUVORw/sqoet9/71AfVSA4Dyb
ZmQ1Z5/oh0mwP60R9vhUzusoPOlJzMkWiw8VucMSyomGOVf4bqVa8up9xHb7n+mh
ex8755Ld67r22nCJEeWrMpoDxsBb6VCZT1rl/mtjNOr2UEXJ5SzTOPnSTkqrIP7I
xNFaicL48VMbluvX7lPe2Kui1odrPX8kSih/SBHEBTEsYKXkEJfyt2SfrA9L6z6K
skJd9vUR2Yq+0KNZknLDX1xlsCAcsOWKMca2eXguQAANL5I4x2xCwopARTTLSh37
F8tXV9D6k2FjedpX4ueDxO6C9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org