Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/gxu2ZeFiqvyROKBDajXNv_wGnPA.roa
File:                     gxu2ZeFiqvyROKBDajXNv_wGnPA.roa (raw, json)
Hash identifier:          ey7J1uVK7YSc+AHJABIcqyiZvl/VT56sOqKGpqjzjFI=
Subject key identifier:   83:1B:B6:65:E1:62:AA:FC:91:38:A0:43:6A:35:CD:BF:FC:06:9C:F0
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018363434B67AFA7B1955023B1FE64C100CD
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/gxu2ZeFiqvyROKBDajXNv_wGnPA.roa
Signing time:             Thu 22 Sep 2022 03:34:57 +0000
ROA not before:           Thu 22 Sep 2022 03:34:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212836
IP address blocks:        185.233.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:63:43:4b:67:af:a7:b1:95:50:23:b1:fe:64:c1:00:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Sep 22 03:34:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=831bb665e162aafc9138a0436a35cdbffc069cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:a1:b2:44:e5:30:04:9d:8d:35:cb:cf:2f:
                    c7:13:35:a3:d2:c1:a3:88:df:35:6b:df:6c:87:16:
                    e6:96:19:bd:ea:41:df:bf:99:40:5f:02:d8:a1:15:
                    0d:e2:75:de:40:25:30:0e:54:a8:73:fe:6d:fd:a9:
                    83:32:9a:50:19:f9:30:34:22:96:50:9d:61:39:1b:
                    1d:00:42:ac:90:4a:56:83:77:6d:cb:19:fd:5d:1d:
                    17:09:67:a6:2c:cf:d9:8e:fc:a4:3b:3c:27:72:23:
                    c4:05:77:08:56:76:19:f8:0b:17:c9:e9:76:25:8d:
                    d6:5f:37:31:4a:1b:07:2e:c7:41:de:f1:4e:b2:07:
                    a3:6b:29:5b:69:b0:4e:b2:7f:e0:04:9d:4a:1b:fa:
                    47:7a:40:7f:ca:a6:7e:d8:04:62:9e:ff:51:c8:2d:
                    2f:8d:3c:f8:00:0f:04:fb:d0:c3:e4:84:3c:60:1d:
                    28:2e:b7:3f:6b:6b:ec:50:4f:90:12:ba:4d:0b:d8:
                    cf:b7:50:a8:5e:07:be:a7:a3:8b:69:cc:6a:19:3f:
                    c7:c5:c3:5a:f9:77:c0:06:26:97:60:dc:af:3a:da:
                    f0:0a:13:c9:7a:23:ef:bb:20:0a:df:05:7c:f1:47:
                    32:a9:88:09:44:8d:8e:f5:40:e5:bb:fc:75:42:e5:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1B:B6:65:E1:62:AA:FC:91:38:A0:43:6A:35:CD:BF:FC:06:9C:F0
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/gxu2ZeFiqvyROKBDajXNv_wGnPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:3b:fb:63:38:85:e7:80:c1:50:fb:ea:24:e2:77:5a:02:18:
         11:ff:01:1b:79:73:e8:f7:94:17:6c:77:93:d6:e8:d7:d4:c4:
         9b:92:cc:ff:fc:b2:9b:a8:15:dd:65:f2:c6:3a:16:0d:cf:4e:
         51:d2:eb:27:fc:b8:d4:a7:a2:bb:43:be:a9:3b:a4:54:eb:56:
         33:d9:8a:2f:8f:5b:7d:f2:21:74:27:58:3e:35:7e:1a:6a:2c:
         49:7f:c9:0e:4a:5c:ca:c1:c7:9c:18:62:4f:bd:62:a9:d0:8c:
         ce:6f:4b:b1:85:e5:f6:d4:dd:c5:60:01:fe:97:87:5d:b2:74:
         54:b3:76:a9:58:01:e9:14:3f:a3:63:7c:52:ed:72:dd:87:3c:
         a4:25:d7:ae:b0:bb:92:ee:c1:15:9f:c9:01:1b:ea:29:a7:ac:
         f9:50:7c:f5:b9:58:ab:3c:73:74:c8:8f:c9:db:37:df:67:e0:
         05:4e:92:91:bf:34:45:c7:cc:1f:01:89:75:1a:4e:72:bf:94:
         76:ed:c3:a5:2d:09:c2:24:9d:3d:6a:11:79:5b:f8:05:8d:d3:
         cb:41:c7:f8:4a:a1:8b:5e:7d:c2:bc:bb:2a:81:89:2f:ec:aa:
         e6:fd:2c:13:48:9d:fc:38:7c:e0:34:ff:47:4c:6c:79:5e:8b:
         5d:4f:b7:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNjQ0tnr6exlVAjsf5kwQDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjIwOTIyMDMzNDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzFiYjY2NWUxNjJhYWZjOTEzOGEwNDM2YTM1Y2RiZmZjMDY5Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiahskTlMASdjTXLzy/HEzWj0sGj
iN81a99shxbmlhm96kHfv5lAXwLYoRUN4nXeQCUwDlSoc/5t/amDMppQGfkwNCKW
UJ1hORsdAEKskEpWg3dtyxn9XR0XCWemLM/ZjvykOzwnciPEBXcIVnYZ+AsXyel2
JY3WXzcxShsHLsdB3vFOsgejaylbabBOsn/gBJ1KG/pHekB/yqZ+2ARinv9RyC0v
jTz4AA8E+9DD5IQ8YB0oLrc/a2vsUE+QErpNC9jPt1CoXge+p6OLacxqGT/HxcNa
+XfABiaXYNyvOtrwChPJeiPvuyAK3wV88UcyqYgJRI2O9UDlu/x1QuVEYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMbtmXhYqr8kTigQ2o1zb/8BpzwMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvZ3h1MlplRmlxdnlST0tCRGFqWE52X3dHblBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuekQMA0G
CSqGSIb3DQEBCwUAA4IBAQBIO/tjOIXngMFQ++ok4ndaAhgR/wEbeXPo95QXbHeT
1ujX1MSbksz//LKbqBXdZfLGOhYNz05R0usn/LjUp6K7Q76pO6RU61Yz2Yovj1t9
8iF0J1g+NX4aaixJf8kOSlzKwcecGGJPvWKp0IzOb0uxheX21N3FYAH+l4ddsnRU
s3apWAHpFD+jY3xS7XLdhzykJdeusLuS7sEVn8kBG+opp6z5UHz1uVirPHN0yI/J
2zffZ+AFTpKRvzRFx8wfAYl1Gk5yv5R27cOlLQnCJJ09ahF5W/gFjdPLQcf4SqGL
Xn3CvLsqgYkv7Krm/SwTSJ38OHzgNP9HTGx5XotdT7ci
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org