Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/APy8h5qt8ylzwok3py9XIUvr-0U.roa
File:                     APy8h5qt8ylzwok3py9XIUvr-0U.roa (raw, json)
Hash identifier:          ABb4yaNUEqpSbbN5HE2z4Mi6wDHpEVVMcg6jXtIlabs=
Subject key identifier:   00:FC:BC:87:9A:AD:F3:29:73:C2:89:37:A7:2F:57:21:4B:EB:FB:45
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       0BAED59A
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/APy8h5qt8ylzwok3py9XIUvr-0U.roa
Signing time:             Fri 15 Apr 2022 12:49:38 +0000
ROA not before:           Fri 15 Apr 2022 12:49:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        185.169.181.0/24 maxlen: 24
                          185.169.182.0/24 maxlen: 24
                          185.174.22.0/24 maxlen: 24
                          185.174.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196007322 (0xbaed59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Apr 15 12:49:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=00fcbc879aadf32973c28937a72f57214bebfb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:f1:87:d9:63:0e:49:06:4b:32:a5:04:4e:
                    e4:99:2d:de:11:35:57:88:32:08:17:ca:c5:f7:e4:
                    d7:49:69:2b:6b:bd:eb:4d:55:b6:9c:08:34:e0:6c:
                    47:9e:9a:a7:c5:de:28:6b:08:5f:23:86:72:5a:a9:
                    30:cd:db:e5:ad:f2:33:03:19:a7:e0:ad:9a:e3:e2:
                    aa:61:ee:c3:a3:45:53:26:87:7b:97:4d:07:6d:99:
                    6b:c0:de:4c:f8:e6:6f:96:99:9f:99:db:a9:37:d0:
                    84:8b:38:f9:c7:93:bf:e1:f9:ff:ae:d6:e8:55:12:
                    f8:50:81:cc:9b:eb:42:74:6a:c4:d9:7d:f4:94:af:
                    e4:15:cf:c2:10:c2:44:6a:f8:83:ea:40:96:99:d6:
                    fd:87:cb:84:dd:3c:cb:95:90:03:66:43:c9:97:46:
                    34:32:7d:49:79:37:93:7e:ac:b9:7e:d5:66:25:c2:
                    22:e9:d7:76:ac:8c:fd:13:e3:de:eb:43:3a:d0:ed:
                    84:e4:87:1d:f7:e4:4d:72:f5:21:02:ab:01:b5:c3:
                    39:90:e9:78:d3:2d:16:ca:6f:9f:8f:44:7a:ab:ee:
                    88:d2:c8:b5:66:c8:b6:fe:cf:00:79:3d:65:96:8c:
                    32:6b:e6:cd:b1:29:b2:7f:52:5f:f6:bf:d1:7b:52:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:BC:87:9A:AD:F3:29:73:C2:89:37:A7:2F:57:21:4B:EB:FB:45
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/APy8h5qt8ylzwok3py9XIUvr-0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.181.0-185.169.182.255
                  185.174.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:ea:aa:6c:74:07:0d:6b:b8:de:17:27:96:04:83:6e:22:41:
         16:94:db:90:a3:f8:90:07:26:50:42:1b:b7:08:04:44:bd:e2:
         d2:06:df:ea:10:35:2a:7e:5c:da:8f:9b:2b:53:51:94:49:c3:
         b1:b0:56:41:aa:18:8e:ef:ac:bc:65:c4:d8:f1:33:4c:7d:68:
         e8:2f:1b:d6:b7:94:f2:70:17:d9:79:8d:1b:5a:9b:4e:d6:b2:
         e4:fb:7e:a4:d3:95:a5:b1:3e:54:bf:c9:53:96:81:15:2b:a6:
         a8:ec:50:36:59:2f:c0:0b:e3:b4:98:4b:13:44:a7:11:33:b0:
         5f:6d:1b:69:b8:44:e0:08:de:d9:31:09:80:d6:e6:a0:66:b2:
         60:6a:17:35:94:41:16:21:43:4e:18:74:70:db:ab:38:44:85:
         0f:19:d3:8d:39:59:08:81:86:e9:1e:2a:2a:da:ba:4c:4f:92:
         4d:26:04:6e:c2:51:04:91:53:9d:bf:02:f8:a9:54:d4:5f:79:
         72:d1:f3:03:28:3e:14:46:0a:31:58:83:ba:6c:4d:b7:a2:2a:
         3b:46:6f:f2:c6:2c:56:c1:42:8c:42:e8:4a:4a:b5:eb:fa:d4:
         fd:14:07:3b:83:6e:e8:f7:22:15:68:21:10:24:9c:87:a6:11:
         35:73:81:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEC67VmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZDBkYTQzYjRhNWQzZGI3OGJhM2Y3NzRlNWIzMWI3NzAzNzIwMmQ1MB4XDTIyMDQx
NTEyNDkzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDBmY2JjODc5YWFk
ZjMyOTczYzI4OTM3YTcyZjU3MjE0YmViZmI0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQF8YfZYw5JBksypQRO5Jkt3hE1V4gyCBfKxffk10lpK2u9
601VtpwINOBsR56ap8XeKGsIXyOGclqpMM3b5a3yMwMZp+CtmuPiqmHuw6NFUyaH
e5dNB22Za8DeTPjmb5aZn5nbqTfQhIs4+ceTv+H5/67W6FUS+FCBzJvrQnRqxNl9
9JSv5BXPwhDCRGr4g+pAlpnW/YfLhN08y5WQA2ZDyZdGNDJ9SXk3k36suX7VZiXC
IunXdqyM/RPj3utDOtDthOSHHffkTXL1IQKrAbXDOZDpeNMtFspvn49EeqvuiNLI
tWbItv7PAHk9ZZaMMmvmzbEpsn9SX/a/0XtSEW0CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQA/LyHmq3zKXPCiTenL1chS+v7RTAfBgNVHSMEGDAWgBStDaQ7Sl09t4uj
93Tlsxt3A3IC1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JRMmtPMHBkUGJlTG9fZDA1Yk1iZHdOeUF0VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvZGQ4MDk2LTE0Y2MtNDg4ZC05MjU3LWM1MTVmMzU0Y2M1YS8x
L0FQeThoNXF0OHlsendvazNweTlYSVV2ci0wVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
ZGQ4MDk2LTE0Y2MtNDg4ZC05MjU3LWM1MTVmMzU0Y2M1YS8xL3JRMmtPMHBkUGJl
TG9fZDA1Yk1iZHdOeUF0VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAuam1AwQAuam2AwQBua4WMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ6qpsdAcNa7jeFyeWBINuIkEWlNuQo/iQByZQQhu3
CAREveLSBt/qEDUqflzaj5srU1GUScOxsFZBqhiO76y8ZcTY8TNMfWjoLxvWt5Ty
cBfZeY0bWptO1rLk+36k05WlsT5Uv8lTloEVK6ao7FA2WS/AC+O0mEsTRKcRM7Bf
bRtpuETgCN7ZMQmA1uagZrJgahc1lEEWIUNOGHRw26s4RIUPGdONOVkIgYbpHioq
2rpMT5JNJgRuwlEEkVOdvwL4qVTUX3ly0fMDKD4URgoxWIO6bE23oio7Rm/yxixW
wUKMQuhKSrXr+tT9FAc7g27o9yIVaCEQJJyHphE1c4H5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org