Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/VUiYWohQmj1YRf-8wgzX3Tbd6Mw.roa
File:                     VUiYWohQmj1YRf-8wgzX3Tbd6Mw.roa (raw, json)
Hash identifier:          7Y52Uml+No/dg8UUaLi6ZBQrmMQ7ZQ9bdLPFvvctWfI=
Subject key identifier:   55:48:98:5A:88:50:9A:3D:58:45:FF:BC:C2:0C:D7:DD:36:DD:E8:CC
Certificate issuer:       /CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
Certificate serial:       0DCF0CE0
Authority key identifier: E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/VUiYWohQmj1YRf-8wgzX3Tbd6Mw.roa
Signing time:             Sat 01 Jan 2022 00:55:29 +0000
ROA not before:           Sat 01 Jan 2022 00:55:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205253
IP address blocks:        185.219.39.0/24 maxlen: 24
                          185.219.37.0/24 maxlen: 24
                          185.219.36.0/24 maxlen: 24
                          185.219.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231673056 (0xdcf0ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
        Validity
            Not Before: Jan  1 00:55:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5548985a88509a3d5845ffbcc20cd7dd36dde8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bc:b7:dc:8b:f4:83:7c:4d:6b:d5:a3:38:6e:
                    be:d0:c1:09:a8:7d:e7:06:98:ac:04:b6:99:3b:c8:
                    74:e4:36:18:9a:3e:6b:65:f2:cc:e3:c1:07:b1:9a:
                    40:1a:e5:62:c5:eb:cf:24:44:67:9a:2e:18:62:71:
                    32:2f:3e:d1:06:15:55:08:ac:f1:ec:88:ca:ec:bf:
                    cd:fd:c2:73:76:74:a8:7b:22:4a:43:d3:41:7c:ca:
                    55:f4:6f:03:8c:da:88:02:36:2e:0a:20:f5:f8:94:
                    02:03:19:b4:3c:55:e4:0b:3a:3b:24:05:2a:d1:7a:
                    17:18:0a:8f:56:88:43:1b:4e:db:50:fa:07:46:8b:
                    3d:07:2b:43:c0:0f:bf:da:49:ff:5a:1f:79:27:2f:
                    fc:5e:61:16:5e:28:5e:2b:48:67:bb:f5:c7:ef:9c:
                    88:12:9b:1d:e8:f5:82:c5:35:4f:2b:57:3b:69:d8:
                    9c:fe:f6:01:01:1e:39:a1:d0:8d:80:ce:60:a0:fb:
                    7e:b3:c2:0e:22:cd:7e:d3:83:03:64:42:16:dc:de:
                    86:6b:95:89:d8:99:ed:70:e9:9d:7c:cd:8f:70:83:
                    95:32:10:cf:d0:cc:41:d6:b9:4a:5f:05:b9:72:c6:
                    28:5b:68:88:9f:4b:9b:47:37:c4:5c:a3:6a:47:ec:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:98:5A:88:50:9A:3D:58:45:FF:BC:C2:0C:D7:DD:36:DD:E8:CC
            X509v3 Authority Key Identifier:
                keyid:E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/VUiYWohQmj1YRf-8wgzX3Tbd6Mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:53:2f:39:d8:09:bd:3a:e9:6b:6f:3f:b4:89:17:74:44:5e:
         b5:13:3e:6a:36:58:d3:72:de:15:01:85:46:f8:67:7e:d4:e1:
         7e:6f:9f:11:bf:c1:99:2d:76:5d:48:9b:b8:47:82:ef:c5:cc:
         17:6e:69:d3:28:ba:4a:f8:96:40:35:18:b2:ca:66:73:53:4e:
         3f:bd:1f:83:f5:6a:f4:5e:a1:84:44:b3:e8:de:cf:9d:9b:9b:
         e9:73:b8:21:7c:4e:4a:cb:39:6d:9a:ae:74:34:57:d5:94:62:
         c5:b3:8a:b5:9d:03:fa:20:4d:e2:31:fd:17:32:39:98:58:3f:
         04:97:3e:a8:a2:da:14:f8:a3:72:d9:81:74:28:e6:53:78:63:
         01:62:d6:9a:68:99:9a:04:2d:59:c3:7c:77:43:8c:72:5b:a1:
         e3:8c:ab:d3:b3:42:f2:d9:53:50:1e:45:fa:30:09:db:8b:99:
         87:b1:54:33:34:1f:61:45:a5:6d:9e:92:b9:04:67:98:cf:53:
         0a:45:26:53:60:e0:c1:f1:95:91:88:6a:f5:b3:3f:37:8c:6c:
         42:a6:5d:c4:90:62:6c:0e:c6:09:38:f7:d9:ed:82:02:ab:1e:
         88:7a:b3:d0:10:88:71:aa:5e:35:e2:77:c4:51:96:c9:c9:e2:
         9c:a6:eb:f2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDc8M4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzJiNzMyOWZhODNmM2I0OGJiMTY1NjAwNjBkNzFkOWIzMDI0YjY2MB4XDTIyMDEw
MTAwNTUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTU0ODk4NWE4ODUw
OWEzZDU4NDVmZmJjYzIwY2Q3ZGQzNmRkZThjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOO8t9yL9IN8TWvVozhuvtDBCah95waYrAS2mTvIdOQ2GJo+
a2XyzOPBB7GaQBrlYsXrzyREZ5ouGGJxMi8+0QYVVQis8eyIyuy/zf3Cc3Z0qHsi
SkPTQXzKVfRvA4zaiAI2Lgog9fiUAgMZtDxV5As6OyQFKtF6FxgKj1aIQxtO21D6
B0aLPQcrQ8APv9pJ/1ofeScv/F5hFl4oXitIZ7v1x++ciBKbHej1gsU1TytXO2nY
nP72AQEeOaHQjYDOYKD7frPCDiLNftODA2RCFtzehmuVidiZ7XDpnXzNj3CDlTIQ
z9DMQda5Sl8FuXLGKFtoiJ9Lm0c3xFyjakfsIgsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRVSJhaiFCaPVhF/7zCDNfdNt3ozDAfBgNVHSMEGDAWgBTjK3Mp+oPztIux
ZWAGDXHZswJLZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR5dHpLZnFEODdTTHNXVmdCZzF4MmJNQ1MyWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWYvNzNmNmYwLTU3OTQtNDllMC1iNGY3LTg0MzI3MjI3ZWZmMC8x
L1ZVaVlXb2hRbWoxWVJmLTh3Z3pYM1RiZDZNdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYv
NzNmNmYwLTU3OTQtNDllMC1iNGY3LTg0MzI3MjI3ZWZmMC8xLzR5dHpLZnFEODdT
THNXVmdCZzF4MmJNQ1MyWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnbJDANBgkqhkiG9w0BAQsFAAOC
AQEAMFMvOdgJvTrpa28/tIkXdERetRM+ajZY03LeFQGFRvhnftThfm+fEb/BmS12
XUibuEeC78XMF25p0yi6SviWQDUYsspmc1NOP70fg/Vq9F6hhESz6N7PnZub6XO4
IXxOSss5bZqudDRX1ZRixbOKtZ0D+iBN4jH9FzI5mFg/BJc+qKLaFPijctmBdCjm
U3hjAWLWmmiZmgQtWcN8d0OMcluh44yr07NC8tlTUB5F+jAJ24uZh7FUMzQfYUWl
bZ6SuQRnmM9TCkUmU2DgwfGVkYhq9bM/N4xsQqZdxJBibA7GCTj32e2CAqseiHqz
0BCIcapeNeJ3xFGWycninKbr8g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:05 2023 by rpki-client on console-fra.rpki-client.org