Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/MelIdoqoRE1RW4UdEx-MXOGA_eE.roa
File:                     MelIdoqoRE1RW4UdEx-MXOGA_eE.roa (raw, json)
Hash identifier:          LDty99f/I+EVm49KBxeySoLdRecVAQIOxq6+j5vmtSA=
Subject key identifier:   31:E9:48:76:8A:A8:44:4D:51:5B:85:1D:13:1F:8C:5C:E1:80:FD:E1
Certificate issuer:       /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial:       0426F0A5
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/MelIdoqoRE1RW4UdEx-MXOGA_eE.roa
Signing time:             Sat 01 Jan 2022 07:58:33 +0000
ROA not before:           Sat 01 Jan 2022 07:58:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        185.152.172.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69660837 (0x426f0a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
        Validity
            Not Before: Jan  1 07:58:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31e948768aa8444d515b851d131f8c5ce180fde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:65:ee:9d:e5:50:ba:92:05:ee:6a:34:4a:
                    c7:06:bf:b9:a7:26:fb:a1:d9:25:09:92:cc:b5:be:
                    57:15:32:16:9b:a0:28:fe:17:c4:26:b8:24:bd:75:
                    a9:61:d5:0c:18:5d:08:a0:b9:cc:dd:7c:df:17:8a:
                    28:c1:ca:8f:a6:d6:89:84:54:fd:f1:63:36:43:ec:
                    1b:0f:5d:c9:6f:c1:66:de:7a:85:88:24:98:fe:5f:
                    ab:d7:26:ff:1a:d2:49:f3:3c:8a:d3:a8:c5:31:53:
                    49:c2:a4:ee:5c:f7:a4:cd:f1:e0:69:63:d1:bf:eb:
                    06:6b:b1:19:85:ae:4f:92:d5:b6:06:3c:43:7a:69:
                    71:a0:3d:5f:99:60:18:6b:8b:1f:db:09:c8:69:f2:
                    a0:5f:73:f3:f5:17:10:ac:0e:04:67:8a:7c:90:fe:
                    d0:40:ec:2b:03:ae:4f:4c:f2:03:cd:ba:33:9b:1b:
                    a1:41:65:95:14:7c:c8:78:7e:42:57:7c:a7:7b:85:
                    5c:ec:c2:dc:b6:a4:90:89:6e:09:19:0a:99:62:d2:
                    4a:ed:b7:b1:0e:7f:f2:31:0a:79:a7:28:c9:cb:79:
                    6f:b2:a1:06:15:bc:af:08:48:cb:5a:ef:48:bd:08:
                    3f:7c:af:ae:80:4b:8e:90:98:8e:ae:5c:57:04:d1:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E9:48:76:8A:A8:44:4D:51:5B:85:1D:13:1F:8C:5C:E1:80:FD:E1
            X509v3 Authority Key Identifier:
                keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/MelIdoqoRE1RW4UdEx-MXOGA_eE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.152.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:e5:7f:eb:8f:19:e2:b2:a5:0b:ad:d4:ce:22:c3:0c:a5:
         80:33:cf:23:bf:0d:9e:3c:38:60:ad:7c:a0:37:e0:85:15:f8:
         ec:94:8d:36:96:eb:0b:2d:d3:51:85:2c:f3:fd:b9:87:6c:d8:
         3e:ba:89:80:bb:35:95:89:53:38:dc:a5:57:c9:d3:68:24:1c:
         10:96:44:33:1c:57:ab:82:9e:19:89:5d:d5:dd:79:90:3a:97:
         a3:e1:20:f9:4c:1d:0b:d2:97:e7:29:45:60:5a:47:de:28:7f:
         a4:07:5b:e2:e6:09:17:df:82:82:e1:24:ea:a1:30:08:6d:fa:
         fc:d8:be:67:4c:a4:50:78:0d:6f:87:12:eb:6f:27:1b:eb:a6:
         37:36:85:20:b7:c2:db:c0:5a:d8:a3:e6:97:d0:f8:47:5b:61:
         a1:0a:e6:2f:2e:b6:29:75:79:6d:22:a5:1a:82:74:c3:eb:3f:
         39:1b:b4:4b:a2:b7:11:32:93:c2:7b:a6:7b:25:09:a0:0a:1f:
         d6:15:1e:42:3c:d8:0d:6e:10:c2:71:f3:e0:4b:6e:00:c8:a8:
         6d:66:03:68:c4:e7:ed:ae:24:6f:53:c8:e7:2a:26:1d:d2:f6:
         7e:c4:29:65:55:20:f2:da:d2:89:c6:bc:0d:8b:4e:a0:a6:99:
         68:64:67:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBCbwpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTE1YjMyN2U4NDc2MTY4NTAyMmY0NzMyOGQ2ZjRjYmQ2ZDMwNDFlMB4XDTIyMDEw
MTA3NTgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzFlOTQ4NzY4YWE4
NDQ0ZDUxNWI4NTFkMTMxZjhjNWNlMTgwZmRlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXXZe6d5VC6kgXuajRKxwa/uacm+6HZJQmSzLW+VxUyFpug
KP4XxCa4JL11qWHVDBhdCKC5zN183xeKKMHKj6bWiYRU/fFjNkPsGw9dyW/BZt56
hYgkmP5fq9cm/xrSSfM8itOoxTFTScKk7lz3pM3x4Glj0b/rBmuxGYWuT5LVtgY8
Q3ppcaA9X5lgGGuLH9sJyGnyoF9z8/UXEKwOBGeKfJD+0EDsKwOuT0zyA826M5sb
oUFllRR8yHh+Qld8p3uFXOzC3LakkIluCRkKmWLSSu23sQ5/8jEKeacoyct5b7Kh
BhW8rwhIy1rvSL0IP3yvroBLjpCYjq5cVwTRt0sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQx6Uh2iqhETVFbhR0TH4xc4YD94TAfBgNVHSMEGDAWgBTBFbMn6EdhaFAi
9HMo1vTL1tMEHjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dSV3pKLWhIWVdoUUl2UnpLTmIweTliVEJCNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvYTRiZGY3LTI1NzktNGJkMC04YTkzLTIyNGZkNzhlZjgyNy8x
L01lbElkb3FvUkUxUlc0VWRFeC1NWE9HQV9lRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Iv
YTRiZGY3LTI1NzktNGJkMC04YTkzLTIyNGZkNzhlZjgyNy8xL3dSV3pKLWhIWVdo
UUl2UnpLTmIweTliVEJCNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmYrDANBgkqhkiG9w0BAQsFAAOC
AQEAPjLlf+uPGeKypQut1M4iwwylgDPPI78Nnjw4YK18oDfghRX47JSNNpbrCy3T
UYUs8/25h2zYPrqJgLs1lYlTONylV8nTaCQcEJZEMxxXq4KeGYld1d15kDqXo+Eg
+UwdC9KX5ylFYFpH3ih/pAdb4uYJF9+CguEk6qEwCG36/Ni+Z0ykUHgNb4cS628n
G+umNzaFILfC28Ba2KPml9D4R1thoQrmLy62KXV5bSKlGoJ0w+s/ORu0S6K3ETKT
wnumeyUJoAof1hUeQjzYDW4QwnHz4EtuAMiobWYDaMTn7a4kb1PI5yomHdL2fsQp
ZVUg8trSica8DYtOoKaZaGRnMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:03 2024 by rpki-client on console-fra.rpki-client.org