Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gMURQqHN6o7A0Y99Yz2x899oxO8.roa
File:                     gMURQqHN6o7A0Y99Yz2x899oxO8.roa (raw, json)
Hash identifier:          Wh4TjsLVelEf+1w227pZccdbOwAu4jP05kyoKdwmufI=
Subject key identifier:   80:C5:11:42:A1:CD:EA:8E:C0:D1:8F:7D:63:3D:B1:F3:DF:68:C4:EF
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       08757695
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gMURQqHN6o7A0Y99Yz2x899oxO8.roa
Signing time:             Sat 01 Jan 2022 00:53:32 +0000
ROA not before:           Sat 01 Jan 2022 00:53:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199527
IP address blocks:        82.135.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141915797 (0x8757695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Jan  1 00:53:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80c51142a1cdea8ec0d18f7d633db1f3df68c4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:ea:bc:8c:db:ad:76:ac:18:de:09:62:99:
                    78:ae:75:92:82:48:dc:bf:a1:30:6e:f6:2b:56:6f:
                    8b:05:8c:68:ee:52:98:ca:34:09:e9:10:79:f0:61:
                    ed:52:94:70:df:51:de:0b:29:12:d9:1d:f6:4f:dd:
                    58:56:a1:ad:2a:c2:59:b6:b4:61:49:4b:c2:7d:ed:
                    c6:11:5f:a3:c3:7d:0d:2b:9e:83:4b:88:98:b2:50:
                    3a:57:a2:77:49:f4:9a:3e:fa:f3:c0:57:f2:00:91:
                    a0:f6:f1:60:97:d8:d0:ad:0e:d4:41:70:99:f3:62:
                    20:e7:5c:95:5b:45:f7:fa:a5:90:bd:cf:9c:1e:ad:
                    9f:a1:c9:9b:68:d3:03:1a:3d:fe:31:80:09:75:a3:
                    5b:84:e5:53:62:6e:c4:95:70:58:41:87:58:5f:27:
                    66:be:9c:80:a5:ec:dd:91:dd:43:74:e2:67:4f:de:
                    05:d3:28:f0:70:59:21:2b:1f:cf:45:54:48:74:70:
                    8f:9c:49:46:a7:ac:7c:16:05:f7:87:bb:46:cb:9b:
                    d9:cb:1d:15:60:db:41:d4:e0:77:09:ff:d1:b1:de:
                    53:30:09:05:23:5e:d0:fe:1c:6a:22:82:69:70:29:
                    85:b3:22:6e:fb:b4:1d:45:96:ee:e6:ff:f3:c4:40:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C5:11:42:A1:CD:EA:8E:C0:D1:8F:7D:63:3D:B1:F3:DF:68:C4:EF
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gMURQqHN6o7A0Y99Yz2x899oxO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.135.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:70:6b:a8:78:d4:ca:e1:1e:a5:d8:f6:7f:31:2a:4d:96:
         97:72:26:71:ba:fa:73:6b:39:19:8a:f5:92:5c:06:2f:51:79:
         73:c3:6f:cb:cb:e0:f7:8c:84:a5:eb:3e:06:8d:57:af:52:bb:
         a7:f8:b2:fc:4d:a1:8c:09:7d:e3:00:9d:9e:55:de:9b:80:02:
         44:c5:22:31:db:9d:22:78:37:40:5e:44:23:43:be:53:44:cf:
         14:0c:a2:4d:76:82:ea:11:4f:d0:ed:cc:ef:29:2f:ca:ca:84:
         dc:7d:c7:a5:13:4c:53:6d:17:a1:a3:b2:36:51:7d:56:ab:3a:
         3a:2f:86:00:cc:74:02:8d:ed:b3:55:c6:0d:4c:fe:9a:77:cf:
         41:07:1c:5c:ee:ba:20:85:e7:c3:74:9b:ee:67:00:8c:3e:8d:
         c0:56:40:75:09:43:e5:b6:17:3b:b8:aa:d1:3e:a2:b9:90:f0:
         de:d8:ce:41:fc:e9:94:36:5c:b1:5e:6c:e7:e9:6b:de:4f:1d:
         78:33:9d:c6:aa:60:dc:5b:18:97:09:4f:78:65:8d:74:30:1d:
         48:ec:68:2e:c2:d1:17:bf:db:fd:4e:4d:d1:f8:c2:41:c7:6b:
         42:4b:20:38:3f:5b:41:a2:57:a4:b5:94:44:e4:8d:73:97:3e:
         17:15:03:92
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECHV2lTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Yjk4NzI0NDYxMWI1MjMwNTM2NzQ0YjZhODlmMDQ0ZjMyZjQ2MmVhMB4XDTIyMDEw
MTAwNTMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODBjNTExNDJhMWNk
ZWE4ZWMwZDE4ZjdkNjMzZGIxZjNkZjY4YzRlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9w6ryM2612rBjeCWKZeK51koJI3L+hMG72K1ZviwWMaO5S
mMo0CekQefBh7VKUcN9R3gspEtkd9k/dWFahrSrCWba0YUlLwn3txhFfo8N9DSue
g0uImLJQOleid0n0mj7688BX8gCRoPbxYJfY0K0O1EFwmfNiIOdclVtF9/qlkL3P
nB6tn6HJm2jTAxo9/jGACXWjW4TlU2JuxJVwWEGHWF8nZr6cgKXs3ZHdQ3TiZ0/e
BdMo8HBZISsfz0VUSHRwj5xJRqesfBYF94e7Rsub2csdFWDbQdTgdwn/0bHeUzAJ
BSNe0P4caiKCaXAphbMibvu0HUWW7ub/88RAKhECAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBSAxRFCoc3qjsDRj31jPbHz32jE7zAfBgNVHSMEGDAWgBT7mHJEYRtSMFNn
RLaonwRPMvRi6jAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3YWEv
MS9nTVVSUXFITjZvN0EwWTk5WXoyeDg5OW94Tzgucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0
LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3YWEvMS8xLTVoeVJHRWJV
akJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUoe4MA0GCSqGSIb3DQEBCwUA
A4IBAQCbQHBrqHjUyuEepdj2fzEqTZaXciZxuvpzazkZivWSXAYvUXlzw2/Ly+D3
jISl6z4GjVevUrun+LL8TaGMCX3jAJ2eVd6bgAJExSIx250ieDdAXkQjQ75TRM8U
DKJNdoLqEU/Q7czvKS/KyoTcfcelE0xTbReho7I2UX1Wqzo6L4YAzHQCje2zVcYN
TP6ad89BBxxc7roghefDdJvuZwCMPo3AVkB1CUPlthc7uKrRPqK5kPDe2M5B/OmU
NlyxXmzn6WveTx14M53GqmDcWxiXCU94ZY10MB1I7GguwtEXv9v9Tk3R+MJBx2tC
SyA4P1tBolektZRE5I1zlz4XFQOS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org