Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/r0hc2hJZQl-YtgQs5N-mTl2ojBo.roa
File:                     r0hc2hJZQl-YtgQs5N-mTl2ojBo.roa (raw, json)
Hash identifier:          gngISOevSI6eP6N6RK+GFjlbOypeaWzDlwF/4p3BNYk=
Subject key identifier:   AF:48:5C:DA:12:59:42:5F:98:B6:04:2C:E4:DF:A6:4E:5D:A8:8C:1A
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       42A9A983
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/r0hc2hJZQl-YtgQs5N-mTl2ojBo.roa
Signing time:             Sat 01 Jan 2022 06:05:07 +0000
ROA not before:           Sat 01 Jan 2022 06:05:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206835
IP address blocks:        37.79.229.0/24 maxlen: 24
                          37.79.230.0/24 maxlen: 24
                          37.79.227.0/24 maxlen: 24
                          37.79.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118415235 (0x42a9a983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  1 06:05:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af485cda1259425f98b6042ce4dfa64e5da88c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:53:17:63:6c:1f:50:c4:41:0e:b6:8c:31:
                    1b:c2:e4:5b:34:81:da:b9:3a:69:9e:fd:8c:57:06:
                    40:2a:a3:fb:da:8f:d8:ca:4d:9c:c4:20:6a:79:fa:
                    69:e9:02:00:90:83:d8:e0:d9:23:2c:fd:44:2c:cc:
                    36:87:30:c5:2a:2e:8b:13:f2:d8:0c:dd:d9:36:0c:
                    4c:00:ee:a2:c0:3c:8e:1a:6c:0b:27:4f:cc:5e:e3:
                    04:5e:19:8d:00:14:0d:26:00:03:cc:58:7c:8e:e7:
                    cd:d7:0f:c7:88:1d:0c:23:20:0b:64:76:4f:41:24:
                    d4:ec:1b:54:98:d8:6a:09:dd:79:7e:7e:13:e4:76:
                    49:8e:53:50:c0:57:50:76:a5:ee:da:7b:4a:34:2d:
                    54:08:a5:96:cb:d4:d4:69:2e:7b:b8:40:16:43:49:
                    9d:84:ce:98:ae:03:db:41:d5:09:7d:47:cb:e1:ff:
                    91:a3:ad:a4:d4:a6:8e:8d:ea:66:11:01:37:53:21:
                    a8:93:24:fd:76:52:2d:eb:44:c3:e6:b4:e0:64:f8:
                    5c:be:f8:70:14:37:f6:82:74:31:e9:02:9e:b0:a5:
                    a2:56:ab:9c:28:cb:33:48:63:fa:b9:86:a9:74:ce:
                    4d:46:55:70:d6:47:3f:06:83:8b:9f:3c:48:9d:ab:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:48:5C:DA:12:59:42:5F:98:B6:04:2C:E4:DF:A6:4E:5D:A8:8C:1A
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/r0hc2hJZQl-YtgQs5N-mTl2ojBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.79.227.0-37.79.230.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:86:dc:dd:ed:e9:2b:7e:34:5c:58:39:79:86:d4:03:22:1b:
         2d:f4:3e:a8:60:50:6d:13:64:85:8d:9c:1a:70:bb:b2:58:c7:
         88:b6:72:f5:4e:f9:09:5a:20:d5:09:19:2c:77:dd:c2:cd:0c:
         a2:19:4d:e5:67:ee:90:57:ca:df:e7:91:70:a7:03:c5:a7:11:
         22:21:62:58:bc:8c:cf:fd:1e:fc:62:11:ef:31:0e:cf:49:d9:
         33:c5:37:60:a2:eb:bd:9a:ac:b8:05:ae:81:6e:f9:ce:86:57:
         d9:2f:8b:74:29:08:cb:47:a9:eb:4f:94:9b:f3:46:5c:91:00:
         dc:1a:87:31:23:ba:c2:ed:0a:39:64:02:57:bd:84:7e:17:ea:
         28:d6:b2:9c:df:92:db:d0:55:8d:ee:ba:3e:ae:6b:04:32:10:
         c9:3f:6a:0b:a5:0b:a0:73:54:df:6b:04:10:b5:f6:44:5f:8e:
         9c:9a:21:a0:84:99:5d:29:18:2c:ac:52:23:1a:d3:2e:33:8c:
         e5:d9:01:c9:7f:5f:46:0d:29:08:1c:11:7d:20:31:5e:47:87:
         85:25:a5:e8:5f:9e:48:83:e0:07:57:b6:f5:32:4d:81:ec:fd:
         2e:1e:52:0b:00:10:44:98:7b:f1:63:20:74:77:da:7b:ee:d4:
         28:4a:96:52
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEQqmpgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWU1MzFiOWFjMjk5MGQ2OWE4YTVjMzAyM2U3MmU2ZDg0MWU2YzA5MB4XDTIyMDEw
MTA2MDUwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWY0ODVjZGExMjU5
NDI1Zjk4YjYwNDJjZTRkZmE2NGU1ZGE4OGMxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALK8UxdjbB9QxEEOtowxG8LkWzSB2rk6aZ79jFcGQCqj+9qP
2MpNnMQgann6aekCAJCD2ODZIyz9RCzMNocwxSouixPy2Azd2TYMTADuosA8jhps
CydPzF7jBF4ZjQAUDSYAA8xYfI7nzdcPx4gdDCMgC2R2T0Ek1OwbVJjYagndeX5+
E+R2SY5TUMBXUHal7tp7SjQtVAillsvU1Gkue7hAFkNJnYTOmK4D20HVCX1Hy+H/
kaOtpNSmjo3qZhEBN1MhqJMk/XZSLetEw+a04GT4XL74cBQ39oJ0MekCnrClolar
nCjLM0hj+rmGqXTOTUZVcNZHPwaDi588SJ2rpQ8CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSvSFzaEllCX5i2BCzk36ZOXaiMGjAfBgNVHSMEGDAWgBRe5TG5rCmQ1pqK
XDAj5y5thB5sCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1h1VXh1YXdwa05hYWlsd3dJLWN1YllRZWJBay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvOWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8x
L3IwaGMyaEpaUWwtWXRnUXM1Ti1tVGwyb2pCby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
OWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8xL1h1VXh1YXdwa05h
YWlsd3dJLWN1YllRZWJBay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAJU/jAwQAJU/mMA0GCSqGSIb3
DQEBCwUAA4IBAQBbhtzd7ekrfjRcWDl5htQDIhst9D6oYFBtE2SFjZwacLuyWMeI
tnL1TvkJWiDVCRksd93CzQyiGU3lZ+6QV8rf55FwpwPFpxEiIWJYvIzP/R78YhHv
MQ7PSdkzxTdgouu9mqy4Ba6BbvnOhlfZL4t0KQjLR6nrT5Sb80ZckQDcGocxI7rC
7Qo5ZAJXvYR+F+oo1rKc35Lb0FWN7ro+rmsEMhDJP2oLpQugc1TfawQQtfZEX46c
miGghJldKRgsrFIjGtMuM4zl2QHJf19GDSkIHBF9IDFeR4eFJaXoX55Ig+AHV7b1
Mk2B7P0uHlILABBEmHvxYyB0d9p77tQoSpZS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:26 2024 by rpki-client on console-ams.rpki-client.org