Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa
File:                     VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa (raw, json)
Hash identifier:          2tbLONPbbdSld4DhlCDnz6m1yCEZicYAU22ds0FT8Kc=
Subject key identifier:   54:50:E8:23:34:46:5F:8B:94:FA:2A:A1:08:24:D9:93:4A:4D:48:FC
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0182B7DB409FF2704377B8FA473ACF564650
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa
Signing time:             Fri 19 Aug 2022 20:46:15 +0000
ROA not before:           Fri 19 Aug 2022 20:46:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210439
IP address blocks:        79.175.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b7:db:40:9f:f2:70:43:77:b8:fa:47:3a:cf:56:46:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Aug 19 20:46:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5450e82334465f8b94fa2aa10824d9934a4d48fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:fe:c1:75:5c:60:21:45:46:48:37:23:0e:
                    68:c7:a3:46:6f:4b:5d:ce:93:0c:4a:f3:96:c2:4a:
                    aa:53:87:3f:53:ed:8c:22:d4:d8:62:51:ab:c4:87:
                    3a:34:b3:c6:3e:34:e8:7c:c1:64:2a:f8:13:d6:0f:
                    cf:28:14:86:cf:98:ee:b9:45:57:63:d1:bf:b3:cb:
                    83:24:ad:e7:8e:84:ff:c0:21:b1:ea:69:39:8b:c7:
                    93:f7:6b:a6:1e:75:a9:7d:f2:5e:5f:02:80:8d:f2:
                    b7:b1:6e:47:e5:63:1b:93:ed:ab:ae:ab:ea:77:59:
                    bf:6b:46:7b:08:2e:6d:30:4b:98:0e:18:c3:ef:14:
                    c2:3a:86:08:19:39:fe:29:4a:be:d1:7b:d0:ae:9c:
                    6c:8a:2c:40:43:b8:81:f9:18:cd:c8:41:3b:76:73:
                    61:e8:93:0d:20:79:c1:3b:06:26:ea:f7:ea:b0:6c:
                    91:28:51:ea:8c:87:06:64:62:7b:c4:24:58:6e:0c:
                    b6:df:f9:9e:74:19:f7:14:af:55:18:65:cf:87:87:
                    87:7c:6e:97:c6:4b:e5:f2:51:c1:11:ce:c9:58:dd:
                    9b:aa:dc:01:8c:d0:7b:d6:f4:c8:33:60:54:f6:45:
                    d4:88:9b:52:26:3f:76:5a:a4:cb:0f:93:0f:c0:cc:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:50:E8:23:34:46:5F:8B:94:FA:2A:A1:08:24:D9:93:4A:4D:48:FC
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.175.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f4:b2:f1:45:e3:a6:3c:73:ee:27:34:a6:b4:b4:ef:78:ec:
         01:35:1a:0b:20:d0:b1:fe:74:01:71:5b:f0:f1:27:60:78:4c:
         43:34:c3:df:dc:c5:8a:d6:b3:61:6d:07:ff:f1:59:76:7a:42:
         86:18:11:c3:05:7c:ff:4d:35:b1:fe:00:95:37:0f:34:b8:00:
         e2:3a:ee:f5:6d:6e:ad:09:90:26:f4:d0:1a:84:97:57:04:79:
         66:a3:78:a3:80:c4:68:2c:79:fc:a4:a4:07:b8:2f:4a:5b:ab:
         15:e8:1b:81:b7:f4:84:e5:54:6a:49:c3:27:ba:03:96:d8:6a:
         ca:65:4a:b5:b9:27:b6:95:06:34:a0:3a:4f:e4:79:95:ba:66:
         46:a6:c5:b1:cb:ee:e4:9a:b7:61:28:58:d0:09:0a:40:29:45:
         95:21:51:d9:9e:e8:9d:d0:c0:a8:35:49:0a:4c:05:be:8d:f0:
         77:d7:00:0e:1d:dc:c7:34:59:aa:c2:c3:d2:bb:1d:da:74:4c:
         98:91:63:e4:04:ce:ef:ff:0d:ba:1c:d6:4d:86:21:7d:5f:77:
         91:41:75:ad:aa:37:58:98:99:07:7f:54:79:b5:3d:08:aa:95:
         20:27:96:73:03:ed:fe:85:2e:81:b8:22:d2:fb:7b:f6:54:09:
         21:60:59:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYK320Cf8nBDd7j6RzrPVkZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIwODE5MjA0NjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDUwZTgyMzM0NDY1ZjhiOTRmYTJhYTEwODI0ZDk5MzRhNGQ0OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPD+wXVcYCFFRkg3Iw5ox6NGb0td
zpMMSvOWwkqqU4c/U+2MItTYYlGrxIc6NLPGPjTofMFkKvgT1g/PKBSGz5juuUVX
Y9G/s8uDJK3njoT/wCGx6mk5i8eT92umHnWpffJeXwKAjfK3sW5H5WMbk+2rrqvq
d1m/a0Z7CC5tMEuYDhjD7xTCOoYIGTn+KUq+0XvQrpxsiixAQ7iB+RjNyEE7dnNh
6JMNIHnBOwYm6vfqsGyRKFHqjIcGZGJ7xCRYbgy23/medBn3FK9VGGXPh4eHfG6X
xkvl8lHBEc7JWN2bqtwBjNB71vTIM2BU9kXUiJtSJj92WqTLD5MPwMw5xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRQ6CM0Rl+LlPoqoQgk2ZNKTUj8MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvVkZEb0l6UkdYNHVVLWlxaENDVFprMHBOU1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT69fMA0G
CSqGSIb3DQEBCwUAA4IBAQAf9LLxReOmPHPuJzSmtLTveOwBNRoLINCx/nQBcVvw
8SdgeExDNMPf3MWK1rNhbQf/8Vl2ekKGGBHDBXz/TTWx/gCVNw80uADiOu71bW6t
CZAm9NAahJdXBHlmo3ijgMRoLHn8pKQHuC9KW6sV6BuBt/SE5VRqScMnugOW2GrK
ZUq1uSe2lQY0oDpP5HmVumZGpsWxy+7kmrdhKFjQCQpAKUWVIVHZnuid0MCoNUkK
TAW+jfB31wAOHdzHNFmqwsPSux3adEyYkWPkBM7v/w26HNZNhiF9X3eRQXWtqjdY
mJkHf1R5tT0IqpUgJ5ZzA+3+hS6BuCLS+3v2VAkhYFkV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org