Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/AZh0qTllEju389TdGvEyaUWy60U.roa
File:                     AZh0qTllEju389TdGvEyaUWy60U.roa (raw, json)
Hash identifier:          zQXllwBCgX+2oiZi8bN0lGQ9Rvr7K8wsQBMyxU/R+OY=
Subject key identifier:   01:98:74:A9:39:65:12:3B:B7:F3:D4:DD:1A:F1:32:69:45:B2:EB:45
Certificate issuer:       /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial:       EC00
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/AZh0qTllEju389TdGvEyaUWy60U.roa
Signing time:             Thu 17 Feb 2022 12:29:47 +0000
ROA not before:           Thu 17 Feb 2022 12:29:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204667
IP address blocks:        185.243.164.0/22 maxlen: 24
                          92.246.64.0/22 maxlen: 24
                          45.148.84.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60416 (0xec00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
        Validity
            Not Before: Feb 17 12:29:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=019874a93965123bb7f3d4dd1af1326945b2eb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:57:6f:8c:a5:28:27:63:57:f8:c4:73:31:
                    51:5e:f5:83:dd:59:bc:25:22:72:41:3e:d4:d0:ff:
                    74:a3:ee:1b:3d:c8:a2:43:bc:fe:34:09:cf:9c:fb:
                    50:eb:ff:a3:09:dd:b9:28:6d:c6:5a:05:83:b5:0a:
                    5d:aa:34:6f:95:cf:3b:35:d5:ae:21:b7:28:a2:c1:
                    ae:4a:34:1c:d1:12:78:f6:81:09:48:e0:c5:1f:8b:
                    16:97:e2:39:9f:8d:a5:c5:7d:09:f9:75:b9:9f:aa:
                    99:0d:2d:6b:e3:6a:2a:5e:2c:42:41:5c:e7:77:ea:
                    41:38:bd:fb:a5:4a:a9:d9:e0:55:76:ec:33:4b:10:
                    aa:76:c1:53:38:cc:21:a9:49:1b:a0:b9:04:c4:6b:
                    76:78:10:f8:68:74:62:a7:25:b3:3f:06:06:d1:08:
                    7a:d3:c9:a9:16:95:35:a5:c3:df:39:26:8b:76:b9:
                    aa:e3:f4:92:34:14:15:e9:0f:0a:fd:c1:ce:8b:16:
                    85:72:6c:b7:26:5d:f8:52:1b:55:77:4b:34:e1:85:
                    28:98:09:f8:20:a7:7d:77:a1:04:87:cd:8d:bf:b3:
                    dd:df:b5:dd:2b:e7:a8:52:c9:67:32:ed:cb:07:fe:
                    13:5d:85:31:4d:48:b7:6d:f3:48:fe:40:a3:74:4e:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:98:74:A9:39:65:12:3B:B7:F3:D4:DD:1A:F1:32:69:45:B2:EB:45
            X509v3 Authority Key Identifier:
                keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/AZh0qTllEju389TdGvEyaUWy60U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.84.0/22
                  92.246.64.0/22
                  185.243.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:98:18:c2:38:55:cd:f0:d3:88:3b:17:91:3c:20:91:d4:
         84:14:0f:29:f1:47:26:ac:46:b7:37:89:c4:ba:51:2e:56:c1:
         ed:a0:0a:e1:71:19:03:2a:bf:9d:b4:e2:39:99:92:06:a9:f8:
         66:03:b9:e2:5a:be:52:ba:28:cf:3d:e9:33:c6:a5:31:79:e2:
         df:bd:88:51:8f:dd:76:4c:96:81:35:15:0c:95:ee:e9:39:23:
         34:f0:81:4e:dc:5c:0a:19:17:2a:ba:06:94:e7:12:6b:59:15:
         ec:69:d3:d1:82:c9:dc:b1:85:f9:8c:f7:41:37:26:04:43:4b:
         88:58:44:c8:b7:e0:eb:a6:3b:53:0a:47:92:6b:d9:a5:18:20:
         23:a0:69:82:65:02:b7:fc:c3:12:9a:d8:06:52:51:74:95:26:
         eb:fc:df:95:4c:8a:38:f9:fc:dc:7f:5e:c0:05:93:49:19:73:
         a5:81:61:ef:b0:58:ed:59:8d:c9:4e:e7:d0:96:3b:72:00:f9:
         8f:ce:ee:e6:88:db:19:c1:54:4e:fe:c7:8a:ec:db:50:86:44:
         d4:d0:99:58:c7:2b:da:ac:be:ca:ce:c6:ce:71:c2:4e:48:1f:
         46:98:c7:3b:9d:50:d5:08:ce:04:9d:a0:f9:1f:45:44:94:fe:
         cd:25:86:0a
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDAOwAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NjE1NzhjZTBmZjM3ZjA2YzI2MzYyZWEyYzYzNTdiOTg2MzNiNzAwHhcNMjIwMjE3
MTIyOTQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMTk4NzRhOTM5NjUx
MjNiYjdmM2Q0ZGQxYWYxMzI2OTQ1YjJlYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArvlXb4ylKCdjV/jEczFRXvWD3Vm8JSJyQT7U0P90o+4bPcii
Q7z+NAnPnPtQ6/+jCd25KG3GWgWDtQpdqjRvlc87NdWuIbcoosGuSjQc0RJ49oEJ
SODFH4sWl+I5n42lxX0J+XW5n6qZDS1r42oqXixCQVznd+pBOL37pUqp2eBVduwz
SxCqdsFTOMwhqUkboLkExGt2eBD4aHRipyWzPwYG0Qh608mpFpU1pcPfOSaLdrmq
4/SSNBQV6Q8K/cHOixaFcmy3Jl34UhtVd0s04YUomAn4IKd9d6EEh82Nv7Pd37Xd
K+eoUslnMu3LB/4TXYUxTUi3bfNI/kCjdE4UVQIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFAGYdKk5ZRI7t/PU3RrxMmlFsutFMB8GA1UdIwQYMBaAFMFhV4zg/zfwbCY2
LqLGNXuYYztwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
d1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjktYWZiZjRlY2YyYjUwLzEv
QVpoMHFUbGxFanUzODlUZEd2RXlhVVd5NjBVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8w
YjgzNzMtMGMyYy00YjA2LWJmNjktYWZiZjRlY2YyYjUwLzEvd1dGWGpPRF9OX0Jz
SmpZdW9zWTFlNWhqTzNBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZRUAwQCXPZAAwQCufOkMA0GCSqG
SIb3DQEBCwUAA4IBAQA3vZgYwjhVzfDTiDsXkTwgkdSEFA8p8UcmrEa3N4nEulEu
VsHtoArhcRkDKr+dtOI5mZIGqfhmA7niWr5SuijPPekzxqUxeeLfvYhRj912TJaB
NRUMle7pOSM08IFO3FwKGRcqugaU5xJrWRXsadPRgsncsYX5jPdBNyYEQ0uIWETI
t+DrpjtTCkeSa9mlGCAjoGmCZQK3/MMSmtgGUlF0lSbr/N+VTIo4+fzcf17ABZNJ
GXOlgWHvsFjtWY3JTufQljtyAPmPzu7miNsZwVRO/seK7NtQhkTU0JlYxyvarL7K
zsbOccJOSB9GmMc7nVDVCM4EnaD5H0VElP7NJYYK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:46 2024 by rpki-client on console-fra.rpki-client.org