Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/yylh1DxzW1FTvJGYIIN7BO90T4Y.roa
File:                     yylh1DxzW1FTvJGYIIN7BO90T4Y.roa (raw, json)
Hash identifier:          05Zi3ZB0vOLW4uuEfbrZMnvhkhjYeZILClcHNLel0eo=
Subject key identifier:   CB:29:61:D4:3C:73:5B:51:53:BC:91:98:20:83:7B:04:EF:74:4F:86
Certificate issuer:       /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial:       E90D28
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/yylh1DxzW1FTvJGYIIN7BO90T4Y.roa
Signing time:             Sat 26 Feb 2022 16:17:39 +0000
ROA not before:           Sat 26 Feb 2022 16:17:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39650
IP address blocks:        31.130.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15273256 (0xe90d28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
        Validity
            Not Before: Feb 26 16:17:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb2961d43c735b5153bc919820837b04ef744f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:ec:33:93:31:1b:f9:b2:d2:32:a0:68:00:
                    b3:81:91:cd:d7:4e:83:42:cf:e2:b6:33:76:c5:a1:
                    18:01:e4:46:5d:53:4a:ed:fc:0e:8d:04:6f:b2:c9:
                    83:4a:c5:75:0c:ef:dc:06:fe:f8:d7:aa:13:b3:30:
                    65:fc:78:e5:cc:cc:dc:10:05:81:54:8b:01:53:f1:
                    2a:44:9a:a6:bf:a4:ee:19:de:63:19:dc:60:d4:c3:
                    0f:c6:db:b8:fd:4d:bc:96:4a:51:e8:ac:9d:a4:62:
                    f1:bc:be:e3:53:6b:98:a5:70:ea:3c:e4:39:00:74:
                    50:dc:c7:b2:d2:cf:cb:2b:00:1f:eb:22:90:c2:d2:
                    3a:04:82:57:2b:44:6e:e4:ae:17:55:4f:22:ad:59:
                    c9:93:22:38:7c:a3:8c:ec:01:7b:ac:61:2c:0f:d0:
                    50:a3:d7:24:1d:ae:17:99:05:56:39:71:c4:2c:16:
                    54:4c:dd:55:41:cf:f4:c9:29:08:ea:23:19:ea:d4:
                    07:94:56:c9:3e:b5:1f:aa:c1:41:13:0a:8f:eb:16:
                    8d:b4:d6:e2:9b:e3:ad:2a:40:e8:6c:ce:0e:3d:10:
                    da:46:aa:0c:7e:e0:6d:49:04:bf:29:17:34:5d:6b:
                    0d:98:1a:10:08:88:1f:f3:63:c5:94:dd:71:70:77:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:29:61:D4:3C:73:5B:51:53:BC:91:98:20:83:7B:04:EF:74:4F:86
            X509v3 Authority Key Identifier:
                keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/yylh1DxzW1FTvJGYIIN7BO90T4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.130.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:10:0c:fe:33:6e:8b:39:a9:40:81:9b:5a:70:5a:ce:e3:21:
         a6:76:5b:05:40:80:05:82:90:5f:4f:7b:26:b7:af:af:a1:12:
         71:06:54:74:5b:1a:b3:98:b3:bc:3e:ce:f4:8c:fa:1b:f0:7a:
         c1:f8:62:46:1b:d0:6a:89:b3:ad:fd:70:6b:bf:2e:4e:e3:e0:
         0d:d7:ba:72:e5:46:1e:66:33:d2:20:87:ce:2d:11:59:c4:44:
         78:1c:a0:da:fa:d0:8b:a1:4b:2b:a1:0c:0e:a6:13:52:e2:57:
         42:c9:79:b0:eb:5e:17:d6:c3:c7:f9:2d:07:8d:a8:74:4f:46:
         71:67:1c:85:23:a9:a7:4f:82:9c:ed:9e:17:7c:46:13:2e:7e:
         ad:42:49:0c:e3:28:07:7d:79:9c:f8:25:dc:59:68:0d:5f:34:
         69:56:01:37:78:65:95:0f:88:bd:9a:48:1a:8f:bb:76:d0:53:
         f6:be:88:45:06:e5:b2:28:38:a5:54:a8:31:81:cf:6d:f9:ca:
         07:ac:84:54:b0:b3:02:9f:cf:36:bb:46:2e:7f:8e:ab:47:02:
         ce:63:d8:4e:f1:dd:92:dd:e0:d9:54:d3:9d:8e:24:40:0e:c3:
         27:48:94:7b:b3:f6:70:77:17:75:ec:8b:30:7c:30:71:92:e4:
         b0:8c:d2:58
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOkNKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDgxZjg1NjAyYjExNjg5MjVkODNlYjNjYTYxNjA5ZjM1Nzk1NmE2MB4XDTIyMDIy
NjE2MTczOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2IyOTYxZDQzYzcz
NWI1MTUzYmM5MTk4MjA4MzdiMDRlZjc0NGY4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDV7DOTMRv5stIyoGgAs4GRzddOg0LP4rYzdsWhGAHkRl1T
Su38Do0Eb7LJg0rFdQzv3Ab++NeqE7MwZfx45czM3BAFgVSLAVPxKkSapr+k7hne
YxncYNTDD8bbuP1NvJZKUeisnaRi8by+41NrmKVw6jzkOQB0UNzHstLPyysAH+si
kMLSOgSCVytEbuSuF1VPIq1ZyZMiOHyjjOwBe6xhLA/QUKPXJB2uF5kFVjlxxCwW
VEzdVUHP9MkpCOojGerUB5RWyT61H6rBQRMKj+sWjbTW4pvjrSpA6GzODj0Q2kaq
DH7gbUkEvykXNF1rDZgaEAiIH/NjxZTdcXB3PaMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTLKWHUPHNbUVO8kZggg3sE73RPhjAfBgNVHSMEGDAWgBRAgfhWArEWiSXY
PrPKYWCfNXlWpjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FJSDRWZ0t4Rm9rbDJENnp5bUZnbnpWNVZxWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMjJjOTNjLTkwMDAtNGU3My1hMWM1LWMwM2YzZmRkZDRhYy8x
L3l5bGgxRHh6VzFGVHZKR1lJSU43Qk85MFQ0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
MjJjOTNjLTkwMDAtNGU3My1hMWM1LWMwM2YzZmRkZDRhYy8xL1FJSDRWZ0t4Rm9r
bDJENnp5bUZnbnpWNVZxWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB+CtTANBgkqhkiG9w0BAQsFAAOC
AQEAFBAM/jNuizmpQIGbWnBazuMhpnZbBUCABYKQX097Jrevr6EScQZUdFsas5iz
vD7O9Iz6G/B6wfhiRhvQaomzrf1wa78uTuPgDde6cuVGHmYz0iCHzi0RWcREeByg
2vrQi6FLK6EMDqYTUuJXQsl5sOteF9bDx/ktB42odE9GcWcchSOpp0+CnO2eF3xG
Ey5+rUJJDOMoB315nPgl3FloDV80aVYBN3hllQ+IvZpIGo+7dtBT9r6IRQblsig4
pVSoMYHPbfnKB6yEVLCzAp/PNrtGLn+Oq0cCzmPYTvHdkt3g2VTTnY4kQA7DJ0iU
e7P2cHcXdeyLMHwwcZLksIzSWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org