Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/2VA1fTCzrxQpoo7QniaoNxXlEUw.roa
File:                     2VA1fTCzrxQpoo7QniaoNxXlEUw.roa (raw, json)
Hash identifier:          TO1CSAHkGYu/QjFHqe+F8jKaWRFyIIOztIs/6nUJPSY=
Subject key identifier:   D9:50:35:7D:30:B3:AF:14:29:A2:8E:D0:9E:26:A8:37:15:E5:11:4C
Certificate issuer:       /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial:       03176D16
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/2VA1fTCzrxQpoo7QniaoNxXlEUw.roa
Signing time:             Sat 01 Jan 2022 08:02:16 +0000
ROA not before:           Sat 01 Jan 2022 08:02:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42889
IP address blocks:        185.190.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51866902 (0x3176d16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
        Validity
            Not Before: Jan  1 08:02:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d950357d30b3af1429a28ed09e26a83715e5114c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:d3:77:8b:c1:2c:8f:b6:07:7b:75:7c:cb:
                    66:15:65:35:71:8f:9e:20:2d:0c:9a:5d:b4:aa:b5:
                    7e:d4:7e:2d:22:e5:1d:02:45:26:f6:a6:0c:7b:8b:
                    3d:4a:e9:3b:fa:a8:0a:a0:03:f6:3d:8d:da:62:44:
                    cc:40:88:0b:69:2a:b7:9d:97:25:c7:c4:80:87:5c:
                    93:17:8b:3f:54:84:39:b3:ed:d8:bd:db:2d:c4:3a:
                    5d:97:8c:8f:7c:c3:4a:c3:54:fc:27:0c:7c:e0:3c:
                    62:4b:b3:73:e7:11:45:64:58:cd:f0:f6:eb:7e:67:
                    69:3e:13:cd:b1:3d:b6:4a:be:3c:65:aa:14:a6:88:
                    e1:e5:37:e5:d6:28:db:ff:c7:09:59:8e:2d:95:a7:
                    03:1a:eb:91:de:64:cd:a8:8d:45:35:df:fb:a3:e4:
                    4d:2f:fd:82:c5:42:fc:1a:8d:64:ce:1e:ac:55:3e:
                    94:13:8b:10:8a:32:60:41:97:57:2b:9b:f0:8a:a9:
                    54:38:cd:03:36:c9:5f:c6:cd:f9:d4:53:cc:fb:eb:
                    48:31:af:5e:96:25:21:8d:80:e4:cd:be:ff:92:28:
                    8e:73:9f:a4:c1:6a:1b:41:a2:75:75:e5:24:3d:ec:
                    78:6a:ef:b2:9a:83:0f:3c:8c:95:4b:ff:cd:84:5b:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:50:35:7D:30:B3:AF:14:29:A2:8E:D0:9E:26:A8:37:15:E5:11:4C
            X509v3 Authority Key Identifier:
                keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/2VA1fTCzrxQpoo7QniaoNxXlEUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:93:05:be:27:08:d8:7c:58:83:3c:c5:d4:8b:17:a9:09:
         b3:e6:da:b6:f9:d1:52:b8:48:08:17:e8:80:68:27:7f:d6:65:
         5d:ee:b3:ed:39:ee:2a:eb:73:e7:f6:d4:51:6e:b4:72:88:8f:
         eb:b3:71:08:66:51:02:82:fa:48:db:5a:ee:66:71:74:0f:81:
         e3:4a:09:af:29:b2:61:82:ba:ff:f9:8f:de:5d:f2:9a:7b:c1:
         4f:56:e1:43:ca:e8:45:c5:02:72:d9:23:c9:d4:85:8e:f3:31:
         f6:41:1e:99:56:43:c0:c5:5f:81:66:aa:f8:80:f6:6c:25:f5:
         b7:81:89:0c:96:44:40:7a:52:79:eb:fb:79:ee:51:f3:c0:41:
         fe:9e:8d:b2:43:1a:90:d9:0c:e8:f9:b6:b7:7b:17:c8:33:96:
         3d:9b:75:82:62:72:23:2d:5f:fd:98:15:cb:a2:fc:d7:34:f9:
         10:af:d6:9a:b7:27:d3:29:d0:57:c9:95:8b:e0:e3:af:8a:f2:
         ab:9d:a0:d7:7d:72:56:78:83:4b:c0:d0:92:d4:30:40:50:7b:
         01:e0:41:31:18:29:c6:2d:e2:f7:58:af:1a:26:42:09:4c:43:
         95:1d:bb:1f:d0:1c:f7:c1:b6:33:e2:eb:8a:76:a7:8c:78:e3:
         c0:94:7c:b2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxdtFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjhjMmVkYzEzYmIyYTNjNjMyNjIxMjFiOWVhYWQxODhiZWRiYWU5MB4XDTIyMDEw
MTA4MDIxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk1MDM1N2QzMGIz
YWYxNDI5YTI4ZWQwOWUyNmE4MzcxNWU1MTE0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5w03eLwSyPtgd7dXzLZhVlNXGPniAtDJpdtKq1ftR+LSLl
HQJFJvamDHuLPUrpO/qoCqAD9j2N2mJEzECIC2kqt52XJcfEgIdckxeLP1SEObPt
2L3bLcQ6XZeMj3zDSsNU/CcMfOA8Ykuzc+cRRWRYzfD2635naT4TzbE9tkq+PGWq
FKaI4eU35dYo2//HCVmOLZWnAxrrkd5kzaiNRTXf+6PkTS/9gsVC/BqNZM4erFU+
lBOLEIoyYEGXVyub8IqpVDjNAzbJX8bN+dRTzPvrSDGvXpYlIY2A5M2+/5IojnOf
pMFqG0GidXXlJD3seGrvspqDDzyMlUv/zYRb7fcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZUDV9MLOvFCmijtCeJqg3FeURTDAfBgNVHSMEGDAWgBQmjC7cE7sqPGMm
ISG56q0Yi+266TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pvd3UzQk83S2p4akppRWh1ZXF0R0l2dHV1ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzYvMmNiM2M5LTNkMDEtNGNhMi1iOWM3LWYwMTE1Yzg1ZjNiYS8x
LzJWQTFmVEN6cnhRcG9vN1FuaWFvTnhYbEVVdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYv
MmNiM2M5LTNkMDEtNGNhMi1iOWM3LWYwMTE1Yzg1ZjNiYS8xL0pvd3UzQk83S2p4
akppRWh1ZXF0R0l2dHV1ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm+BzANBgkqhkiG9w0BAQsFAAOC
AQEARtyTBb4nCNh8WIM8xdSLF6kJs+batvnRUrhICBfogGgnf9ZlXe6z7TnuKutz
5/bUUW60coiP67NxCGZRAoL6SNta7mZxdA+B40oJrymyYYK6//mP3l3ymnvBT1bh
Q8roRcUCctkjydSFjvMx9kEemVZDwMVfgWaq+ID2bCX1t4GJDJZEQHpSeev7ee5R
88BB/p6NskMakNkM6Pm2t3sXyDOWPZt1gmJyIy1f/ZgVy6L81zT5EK/Wmrcn0ynQ
V8mVi+Djr4ryq52g131yVniDS8DQktQwQFB7AeBBMRgpxi3i91ivGiZCCUxDlR27
H9Ac98G2M+LrinanjHjjwJR8sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:17 2024 by rpki-client on console-ams.rpki-client.org