Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/YmwyXo0Lc-bQzOKtJSfqmNfiI5I.roa
File:                     YmwyXo0Lc-bQzOKtJSfqmNfiI5I.roa (raw, json)
Hash identifier:          mcI5bHqkx/s4mv1u9rY48CDMmtu13OADGxlkiGsHRUQ=
Subject key identifier:   62:6C:32:5E:8D:0B:73:E6:D0:CC:E2:AD:25:27:EA:98:D7:E2:23:92
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       0271669C
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/YmwyXo0Lc-bQzOKtJSfqmNfiI5I.roa
Signing time:             Sat 01 Jan 2022 10:56:47 +0000
ROA not before:           Sat 01 Jan 2022 10:56:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210008
IP address blocks:        185.230.182.0/24 maxlen: 24
                          185.230.181.0/24 maxlen: 24
                          185.230.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40986268 (0x271669c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Jan  1 10:56:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=626c325e8d0b73e6d0cce2ad2527ea98d7e22392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:ac:ff:60:d1:a8:70:a7:9b:8e:0f:b9:b5:
                    5b:36:5a:7c:0d:01:96:0a:11:f0:93:d5:91:50:f4:
                    44:b2:56:8c:c4:82:2a:3a:e4:7b:ae:95:1f:68:5a:
                    2a:f3:46:0d:01:21:d1:a3:f3:b0:c5:19:db:e1:ac:
                    4f:64:22:fc:21:48:5d:a2:38:ae:25:1b:e2:3f:58:
                    78:80:85:3b:c6:f0:7a:4e:d4:59:fb:03:b7:f9:94:
                    56:90:7b:10:e0:30:7b:f7:05:53:d6:e3:b3:cf:59:
                    85:a2:b0:90:b8:e1:f6:d7:99:80:77:03:e5:6a:da:
                    e9:7b:3a:31:9b:64:7d:9b:ae:74:ff:9b:8a:82:1b:
                    0f:32:a4:3d:25:d9:41:c2:24:73:db:dd:c6:bd:4d:
                    f7:61:72:5f:0b:bb:11:33:5f:88:9c:47:81:c7:83:
                    10:64:cc:df:6b:43:ba:87:25:ef:2f:bf:d0:0c:ab:
                    12:72:aa:a6:52:b7:f0:5e:5e:19:a5:b6:c2:02:87:
                    45:e8:14:6c:43:63:24:18:56:c1:11:4a:d6:4c:f4:
                    73:7f:97:6e:89:e8:45:51:5e:ef:3a:f6:68:82:84:
                    5d:a3:56:84:9b:40:a6:48:9f:6e:e9:4b:7a:4e:5d:
                    a2:c2:43:b2:ba:98:ca:48:89:8b:d6:63:09:61:87:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6C:32:5E:8D:0B:73:E6:D0:CC:E2:AD:25:27:EA:98:D7:E2:23:92
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/YmwyXo0Lc-bQzOKtJSfqmNfiI5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.181.0-185.230.183.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:1c:1b:5b:87:00:8f:fb:6c:3d:d0:05:14:36:a0:2a:50:
         5c:66:f8:b0:fb:0a:07:98:95:47:02:7d:00:78:a1:7b:9c:9c:
         7f:52:74:5c:59:61:03:59:cb:21:31:3c:8d:9a:38:d5:fa:75:
         c0:cb:55:98:88:37:cb:23:30:33:e1:ec:59:ff:99:b0:8d:c5:
         85:5a:17:a1:a6:19:cb:9c:a0:f5:51:cc:19:47:33:ae:08:a0:
         73:45:cd:57:5a:7b:8d:6e:a4:a9:91:b1:9e:f0:1f:f0:e7:3f:
         c5:fe:81:f3:13:64:21:98:86:c2:5b:5d:a3:6e:a4:fc:5f:66:
         cb:d4:8a:61:a5:b9:64:3f:2a:5d:c5:f5:72:04:25:2c:0b:e1:
         0c:6c:02:4e:df:88:d8:c0:04:3d:de:bb:23:7f:be:ae:87:15:
         01:f0:69:dc:7f:3f:30:15:b1:9c:ed:eb:05:14:16:08:7a:7d:
         cf:83:ae:91:88:4a:71:61:9e:d1:69:31:31:2e:90:a7:42:11:
         63:f1:03:a1:84:50:3f:a9:cb:a2:dc:5d:70:26:b2:3a:0b:c7:
         04:be:79:87:8a:61:29:92:2a:09:2d:a2:47:9c:8c:c0:c7:47:
         6a:4e:b9:00:f9:45:ee:95:b7:40:06:30:07:31:7c:d1:d4:55:
         34:dc:ca:5e
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAnFmnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NDliZDg0ZGExNzk5N2NiYjI4NmFmOTAyMmFiMmUwNWJhMDhiNDQyMB4XDTIyMDEw
MTEwNTY0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjI2YzMyNWU4ZDBi
NzNlNmQwY2NlMmFkMjUyN2VhOThkN2UyMjM5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKV4rP9g0ahwp5uOD7m1WzZafA0BlgoR8JPVkVD0RLJWjMSC
Kjrke66VH2haKvNGDQEh0aPzsMUZ2+GsT2Qi/CFIXaI4riUb4j9YeICFO8bwek7U
WfsDt/mUVpB7EOAwe/cFU9bjs89ZhaKwkLjh9teZgHcD5Wra6Xs6MZtkfZuudP+b
ioIbDzKkPSXZQcIkc9vdxr1N92FyXwu7ETNfiJxHgceDEGTM32tDuocl7y+/0Ayr
EnKqplK38F5eGaW2wgKHRegUbENjJBhWwRFK1kz0c3+XbonoRVFe7zr2aIKEXaNW
hJtApkifbulLek5dosJDsrqYykiJi9ZjCWGH/RcCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRibDJejQtz5tDM4q0lJ+qY1+IjkjAfBgNVHSMEGDAWgBS0m9hNoXmXy7KG
r5Aiqy4Fugi0QjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RKdllUYUY1bDh1eWhxLVFJcXN1QmJvSXRFSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZWU1NGQxLTViMTUtNGY5My04OTdiLTBjOTA5YmY1YmU0ZC8x
L1ltd3lYbzBMYy1iUXpPS3RKU2ZxbU5maUk1SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZWU1NGQxLTViMTUtNGY5My04OTdiLTBjOTA5YmY1YmU0ZC8xL3RKdllUYUY1bDh1
eWhxLVFJcXN1QmJvSXRFSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAuea1AwQDueawMA0GCSqGSIb3
DQEBCwUAA4IBAQA/wBwbW4cAj/tsPdAFFDagKlBcZviw+woHmJVHAn0AeKF7nJx/
UnRcWWEDWcshMTyNmjjV+nXAy1WYiDfLIzAz4exZ/5mwjcWFWhehphnLnKD1UcwZ
RzOuCKBzRc1XWnuNbqSpkbGe8B/w5z/F/oHzE2QhmIbCW12jbqT8X2bL1Iphpblk
PypdxfVyBCUsC+EMbAJO34jYwAQ93rsjf76uhxUB8Gncfz8wFbGc7esFFBYIen3P
g66RiEpxYZ7RaTExLpCnQhFj8QOhhFA/qcui3F1wJrI6C8cEvnmHimEpkioJLaJH
nIzAx0dqTrkA+UXulbdABjAHMXzR1FU03Mpe
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org