Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HiDEB-nEqvcAedqGt7aNfpBnuVI.roa
File:                     HiDEB-nEqvcAedqGt7aNfpBnuVI.roa (raw, json)
Hash identifier:          cH4b+KplTALlSH30epiPV/AaXJrTm/drS2zoehbRwTY=
Subject key identifier:   1E:20:C4:07:E9:C4:AA:F7:00:79:DA:86:B7:B6:8D:7E:90:67:B9:52
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       01844A160AFF06D83BD40569C0F513831E37
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HiDEB-nEqvcAedqGt7aNfpBnuVI.roa
Signing time:             Sat 05 Nov 2022 23:17:49 +0000
ROA not before:           Sat 05 Nov 2022 23:17:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14315
IP address blocks:        85.92.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:4a:16:0a:ff:06:d8:3b:d4:05:69:c0:f5:13:83:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Nov  5 23:17:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e20c407e9c4aaf70079da86b7b68d7e9067b952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:b7:19:5f:41:4b:84:ae:75:24:81:d6:46:
                    36:a6:b7:bb:7b:f4:ce:b0:8b:e9:c3:9d:b4:2c:f5:
                    03:ed:38:e1:b2:f4:fa:35:9b:06:b1:3e:9a:47:67:
                    a5:75:b8:02:3d:1f:01:55:64:92:8e:42:5c:69:66:
                    e8:8d:61:00:0b:dc:2b:42:38:e6:cf:ea:25:bf:22:
                    bf:77:60:82:bf:97:d1:2a:4c:67:e7:56:7a:7c:db:
                    f0:4e:90:57:92:19:4e:8f:61:7b:77:41:f8:e4:88:
                    4e:2f:55:53:73:bb:b2:38:a2:92:e6:fc:6b:5a:1a:
                    f6:5c:98:67:b3:b3:3f:81:bd:33:51:f1:f0:12:ae:
                    d4:c9:6c:a0:df:18:2b:2c:f2:d4:68:73:12:c5:c0:
                    b1:0a:48:ab:cf:4d:d7:fd:db:a1:53:61:e1:95:2c:
                    cc:92:49:bd:20:75:57:60:08:36:ae:77:d9:17:61:
                    35:f7:90:2c:0f:04:84:f0:0a:b9:07:e2:5b:bb:42:
                    ea:21:59:c4:09:83:95:54:95:f2:e7:02:ba:45:9c:
                    dd:0b:f7:47:13:d3:d4:fb:ab:a3:d8:b7:fb:b7:fb:
                    f2:ad:d9:5f:5a:bc:b5:20:bc:1d:2f:4d:fa:ae:61:
                    a1:d4:ff:7e:51:7b:ea:7c:90:c5:87:21:2c:ee:a8:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:C4:07:E9:C4:AA:F7:00:79:DA:86:B7:B6:8D:7E:90:67:B9:52
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HiDEB-nEqvcAedqGt7aNfpBnuVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.92.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:ff:28:f2:dc:e0:dc:3e:b7:a6:3e:9c:32:72:d1:1f:44:
         46:64:44:f9:05:74:00:59:54:97:a3:ff:30:3b:43:8c:d2:de:
         55:32:e6:31:97:b1:8b:c4:c3:d9:80:48:5e:0d:38:22:f7:fe:
         78:1e:ad:43:4a:59:77:78:31:06:18:30:d5:ab:29:fb:22:dc:
         bb:cc:48:ae:44:1e:23:23:65:c1:52:cf:04:b6:f2:9a:dc:ef:
         ec:fd:23:76:08:ee:d1:28:31:04:3e:b2:60:56:2a:0a:13:24:
         f9:0d:5a:7d:6f:c6:5a:ae:70:43:11:49:84:26:0b:20:c2:73:
         63:ad:7e:1b:32:75:7a:7b:ff:24:3e:02:ff:b6:18:c0:c8:e0:
         46:8e:01:89:49:f6:e6:be:cf:2d:5f:c3:c4:aa:33:33:af:f1:
         8e:33:72:ae:72:ce:ce:1d:82:49:fb:d8:d8:37:a8:f3:37:b3:
         16:6c:8e:ab:bd:98:11:0a:34:ab:01:b2:10:34:7d:b4:ce:35:
         69:ac:25:27:be:34:f7:be:25:44:38:8c:4a:67:21:70:21:85:
         0b:1d:67:4c:51:08:c4:44:69:93:88:9f:39:a9:ca:74:79:ec:
         93:58:91:88:a1:08:52:ce:01:1e:49:53:e0:49:15:77:75:b5:
         b9:2d:52:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRKFgr/Btg71AVpwPUTgx43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjIxMTA1MjMxNzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTIwYzQwN2U5YzRhYWY3MDA3OWRhODZiN2I2OGQ3ZTkwNjdiOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyC3GV9BS4SudSSB1kY2pre7e/TO
sIvpw520LPUD7TjhsvT6NZsGsT6aR2eldbgCPR8BVWSSjkJcaWbojWEAC9wrQjjm
z+olvyK/d2CCv5fRKkxn51Z6fNvwTpBXkhlOj2F7d0H45IhOL1VTc7uyOKKS5vxr
Whr2XJhns7M/gb0zUfHwEq7UyWyg3xgrLPLUaHMSxcCxCkirz03X/duhU2HhlSzM
kkm9IHVXYAg2rnfZF2E195AsDwSE8Aq5B+Jbu0LqIVnECYOVVJXy5wK6RZzdC/dH
E9PU+6uj2Lf7t/vyrdlfWry1ILwdL036rmGh1P9+UXvqfJDFhyEs7qjYsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4gxAfpxKr3AHnahre2jX6QZ7lSMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvSGlERUItbkVxdmNBZWRxR3Q3YU5mcEJudVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVxwMA0G
CSqGSIb3DQEBCwUAA4IBAQANXv8o8tzg3D63pj6cMnLRH0RGZET5BXQAWVSXo/8w
O0OM0t5VMuYxl7GLxMPZgEheDTgi9/54Hq1DSll3eDEGGDDVqyn7Ity7zEiuRB4j
I2XBUs8EtvKa3O/s/SN2CO7RKDEEPrJgVioKEyT5DVp9b8ZarnBDEUmEJgsgwnNj
rX4bMnV6e/8kPgL/thjAyOBGjgGJSfbmvs8tX8PEqjMzr/GOM3Kucs7OHYJJ+9jY
N6jzN7MWbI6rvZgRCjSrAbIQNH20zjVprCUnvjT3viVEOIxKZyFwIYULHWdMUQjE
RGmTiJ85qcp0eeyTWJGIoQhSzgEeSVPgSRV3dbW5LVLv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org