Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/JVSdW4KVyvIb5Wn6UgZ0YtH4WzQ.roa
File:                     JVSdW4KVyvIb5Wn6UgZ0YtH4WzQ.roa (raw, json)
Hash identifier:          weaem7aDNn/iJ17YWWd1xA2gC8e8K+fvOEwQRESmjSw=
Subject key identifier:   25:54:9D:5B:82:95:CA:F2:1B:E5:69:FA:52:06:74:62:D1:F8:5B:34
Certificate issuer:       /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial:       038FCE
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/JVSdW4KVyvIb5Wn6UgZ0YtH4WzQ.roa
Signing time:             Tue 21 Jun 2022 20:49:44 +0000
ROA not before:           Tue 21 Jun 2022 20:49:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        185.79.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233422 (0x38fce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
        Validity
            Not Before: Jun 21 20:49:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=25549d5b8295caf21be569fa52067462d1f85b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:cd:01:c4:24:64:51:34:2e:e0:e9:03:a9:
                    0f:35:d5:c7:b4:9c:5a:b9:cd:6b:76:07:c6:69:cb:
                    67:4d:ba:08:6a:39:f5:24:b9:36:0f:51:79:88:ae:
                    2d:d3:45:8f:c0:6d:09:49:6e:fb:ef:29:f2:04:19:
                    a0:f6:07:c1:4f:af:66:e7:2f:78:cb:a6:0d:86:d1:
                    33:56:9d:da:8b:5e:67:3e:d5:9c:05:c1:9e:eb:19:
                    08:ec:52:d0:94:87:03:1f:f4:b7:1e:b2:66:12:21:
                    aa:84:ee:fb:75:0d:be:b8:48:db:2d:82:5a:e8:8a:
                    5f:7c:d4:70:5e:a1:b0:26:72:21:a8:3f:85:ad:32:
                    57:aa:cd:7b:24:ed:4d:41:79:6d:2f:7d:5a:c6:fa:
                    45:55:d8:7d:48:e3:64:b0:b3:e8:89:4f:97:66:e5:
                    7c:3b:6d:94:9d:58:47:04:a1:c1:07:be:1e:a0:d2:
                    dc:e7:32:62:13:3b:ec:d1:13:bc:4c:f4:71:5b:be:
                    43:a7:9c:09:14:82:d6:cd:4e:c1:77:dd:16:fd:93:
                    51:14:fc:7a:6f:4d:fc:c6:c5:24:31:c3:40:c4:b9:
                    8d:58:9b:e2:45:b9:b3:94:b4:fa:b6:dc:07:d5:e6:
                    9e:44:64:7a:67:a2:37:6b:0e:58:67:7a:c9:7e:8b:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:54:9D:5B:82:95:CA:F2:1B:E5:69:FA:52:06:74:62:D1:F8:5B:34
            X509v3 Authority Key Identifier:
                keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/JVSdW4KVyvIb5Wn6UgZ0YtH4WzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:fe:5a:10:c1:4a:2d:47:f8:5c:19:5b:7d:f7:ab:c9:1e:
         bb:9c:ab:d2:a5:f4:3b:32:ea:d7:f3:b8:8d:33:f4:37:2b:b1:
         b3:e3:0e:64:65:7c:b0:0a:33:b0:72:d0:bc:65:dc:ed:88:f3:
         2f:65:c7:ee:38:cf:ec:a9:b9:70:04:b1:11:59:3c:52:f6:6b:
         84:29:1a:cb:a0:bc:81:41:39:f7:3b:7d:96:f0:49:d6:56:ce:
         72:c7:59:b5:20:18:3f:8d:30:2c:d0:cd:10:96:85:a4:cc:f4:
         6a:d8:e7:c1:50:0f:7c:a0:cc:ee:be:67:27:fd:5d:ed:9b:fd:
         1c:88:cd:d4:e6:33:af:1b:af:e1:76:04:f9:42:6a:04:2d:86:
         a1:20:77:bf:f6:0c:c3:9f:40:ed:4f:78:2e:eb:8e:76:55:1a:
         d9:62:2b:2f:5f:4f:ad:81:84:fd:30:e7:4c:4f:52:c7:48:b2:
         c3:0a:a6:34:a9:8e:91:29:ff:d9:3c:3f:14:09:73:5f:5c:07:
         15:00:2b:aa:2d:44:3b:c6:02:83:bf:3c:0c:f6:72:6c:53:5d:
         88:b4:19:c1:27:55:69:7c:dd:2e:7a:ed:e3:90:de:af:e2:3c:
         48:c8:c8:12:a1:38:f6:ce:2a:ca:fd:55:08:7d:f6:cf:52:51:
         e3:eb:5a:33
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDA4/OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMw
ZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQwNThiNTYwHhcNMjIwNjIx
MjA0OTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyNTU0OWQ1YjgyOTVj
YWYyMWJlNTY5ZmE1MjA2NzQ2MmQxZjg1YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo17NAcQkZFE0LuDpA6kPNdXHtJxauc1rdgfGactnTboIajn1
JLk2D1F5iK4t00WPwG0JSW777ynyBBmg9gfBT69m5y94y6YNhtEzVp3ai15nPtWc
BcGe6xkI7FLQlIcDH/S3HrJmEiGqhO77dQ2+uEjbLYJa6IpffNRwXqGwJnIhqD+F
rTJXqs17JO1NQXltL31axvpFVdh9SONksLPoiU+XZuV8O22UnVhHBKHBB74eoNLc
5zJiEzvs0RO8TPRxW75Dp5wJFILWzU7Bd90W/ZNRFPx6b038xsUkMcNAxLmNWJvi
RbmzlLT6ttwH1eaeRGR6Z6I3aw5YZ3rJfou2rwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCVUnVuClcryG+Vp+lIGdGLR+Fs0MB8GA1UdIwQYMBaAFMD5JXEQiVh4a2X/
okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
d1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1LzEv
SlZTZFc0S1Z5dkliNVduNlVnWjBZdEg0V3pRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9i
ZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1LzEvd1BrbGNSQ0pXSGhy
WmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU9LMA0GCSqGSIb3DQEBCwUAA4IB
AQBm0f5aEMFKLUf4XBlbfferyR67nKvSpfQ7MurX87iNM/Q3K7Gz4w5kZXywCjOw
ctC8ZdztiPMvZcfuOM/sqblwBLERWTxS9muEKRrLoLyBQTn3O32W8EnWVs5yx1m1
IBg/jTAs0M0QloWkzPRq2OfBUA98oMzuvmcn/V3tm/0ciM3U5jOvG6/hdgT5QmoE
LYahIHe/9gzDn0DtT3gu6452VRrZYisvX0+tgYT9MOdMT1LHSLLDCqY0qY6RKf/Z
PD8UCXNfXAcVACuqLUQ7xgKDvzwM9nJsU12ItBnBJ1VpfN0ueu3jkN6v4jxIyMgS
oTj2zirK/VUIffbPUlHj61oz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:01 2024 by rpki-client on console-fra.rpki-client.org