Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dcT35Kve8QLH2x0Egvh_NkiWFOg.roa
File:                     dcT35Kve8QLH2x0Egvh_NkiWFOg.roa (raw, json)
Hash identifier:          0comMeWlyr1S/kqudthPT+B0RaiZvVqp/N7gITX+3kw=
Subject key identifier:   75:C4:F7:E4:AB:DE:F1:02:C7:DB:1D:04:82:F8:7F:36:48:96:14:E8
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1E34BA4E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dcT35Kve8QLH2x0Egvh_NkiWFOg.roa
Signing time:             Tue 07 Jun 2022 08:57:20 +0000
ROA not before:           Tue 07 Jun 2022 08:57:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        195.178.140.0/24 maxlen: 24
                          195.178.141.0/24 maxlen: 24
                          77.47.181.0/24 maxlen: 24
                          77.47.182.0/24 maxlen: 24
                          77.47.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506772046 (0x1e34ba4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jun  7 08:57:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75c4f7e4abdef102c7db1d0482f87f36489614e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:2c:9a:e8:b1:c4:8e:71:ed:8e:af:94:b9:
                    a3:d2:20:77:32:60:f7:32:b7:f3:b3:15:0c:f8:03:
                    c1:83:f3:08:b9:57:bb:39:12:23:f7:0e:97:01:93:
                    32:22:5a:53:39:4d:02:71:8c:e7:de:7b:a8:f3:e4:
                    5e:f6:b5:2e:26:98:00:0f:e0:1a:8e:dc:41:a0:a4:
                    c4:37:62:49:6a:33:1b:89:1c:9c:6f:8f:a6:d1:ad:
                    3a:32:b3:72:a5:e0:de:a2:0d:06:0b:e3:9b:ce:8b:
                    a7:5e:98:05:83:cd:14:cf:e4:7a:36:c8:a0:99:0e:
                    59:37:99:87:20:e8:0a:b5:9a:1e:2b:ee:cc:fb:bc:
                    81:c7:7b:2d:88:a2:ab:8d:4e:56:c8:ee:df:64:7b:
                    54:d1:41:70:e6:f3:f3:02:2b:ec:be:eb:71:13:93:
                    21:ba:5c:15:20:bd:35:60:47:9d:05:16:14:6d:ba:
                    6f:71:11:df:52:b6:f8:27:2d:53:f9:d8:58:9e:5e:
                    d1:b0:c5:26:40:2a:1d:11:1a:24:49:c3:ab:3e:80:
                    4f:38:83:f3:71:27:3c:61:99:4b:a5:6f:f1:e4:bb:
                    ac:06:83:bd:d2:b7:31:15:8b:f1:3a:9f:91:e8:7a:
                    66:2e:2f:33:f3:34:2c:a9:a1:46:ce:f5:96:fd:dc:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C4:F7:E4:AB:DE:F1:02:C7:DB:1D:04:82:F8:7F:36:48:96:14:E8
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dcT35Kve8QLH2x0Egvh_NkiWFOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.181.0-77.47.183.255
                  195.178.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:80:c9:14:b5:20:c6:19:67:5d:ef:09:52:99:a4:9f:85:2f:
         e1:3f:13:39:d7:97:08:ee:53:24:34:11:c1:0a:e2:16:a6:b7:
         f8:fc:a3:32:12:d3:bd:b8:7d:ec:32:f2:38:0b:28:fc:5b:18:
         cc:06:ad:e6:f6:50:d1:8e:b1:ca:6a:0e:11:4f:88:22:92:7a:
         27:c1:1a:e5:d7:d7:20:b1:53:39:b4:e6:cd:22:65:e9:9c:66:
         ae:68:b5:c7:bb:6e:95:bd:8e:b7:bb:1e:0e:46:7b:38:47:ad:
         7f:b4:80:f4:17:b3:14:d9:c2:45:dd:ce:dc:3b:7f:30:1b:76:
         56:b3:c8:78:00:61:b1:8f:0f:9b:73:ef:7c:9e:49:6b:f1:de:
         73:4f:4a:5d:e7:54:26:56:c6:8d:5e:57:62:57:1f:b2:8c:41:
         15:55:e2:a9:95:21:4e:5c:f6:cf:bb:fe:38:7f:ae:3e:76:be:
         d7:b8:72:d4:af:09:7b:ca:ae:d3:72:a4:b4:0a:b6:db:33:29:
         96:c4:32:71:b1:19:42:e0:3e:34:80:f1:22:a9:6a:9c:9e:63:
         11:50:d6:94:36:c5:02:8a:4a:e9:8c:8e:88:a8:ca:dc:f0:b9:
         4a:cc:8b:44:b2:47:50:79:76:d5:8a:7d:c1:11:db:45:95:50:
         61:81:41:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEHjS6TjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDYw
NzA4NTcyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzVjNGY3ZTRhYmRl
ZjEwMmM3ZGIxZDA0ODJmODdmMzY0ODk2MTRlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJORLJroscSOce2Or5S5o9IgdzJg9zK387MVDPgDwYPzCLlX
uzkSI/cOlwGTMiJaUzlNAnGM5957qPPkXva1LiaYAA/gGo7cQaCkxDdiSWozG4kc
nG+PptGtOjKzcqXg3qINBgvjm86Lp16YBYPNFM/kejbIoJkOWTeZhyDoCrWaHivu
zPu8gcd7LYiiq41OVsju32R7VNFBcObz8wIr7L7rcROTIbpcFSC9NWBHnQUWFG26
b3ER31K2+CctU/nYWJ5e0bDFJkAqHREaJEnDqz6ATziD83EnPGGZS6Vv8eS7rAaD
vdK3MRWL8Tqfkeh6Zi4vM/M0LKmhRs71lv3cyJUCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBR1xPfkq97xAsfbHQSC+H82SJYU6DAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L2RjVDM1S3ZlOFFMSDJ4MEVndmhfTmtpV0ZPZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQATS+1AwQDTS+wAwQBw7KMMA0G
CSqGSIb3DQEBCwUAA4IBAQAFgMkUtSDGGWdd7wlSmaSfhS/hPxM515cI7lMkNBHB
CuIWprf4/KMyEtO9uH3sMvI4Cyj8WxjMBq3m9lDRjrHKag4RT4giknonwRrl19cg
sVM5tObNImXpnGauaLXHu26VvY63ux4ORns4R61/tID0F7MU2cJF3c7cO38wG3ZW
s8h4AGGxjw+bc+98nklr8d5zT0pd51QmVsaNXldiVx+yjEEVVeKplSFOXPbPu/44
f64+dr7XuHLUrwl7yq7TcqS0CrbbMymWxDJxsRlC4D40gPEiqWqcnmMRUNaUNsUC
ikrpjI6IqMrc8LlKzItEskdQeXbVin3BEdtFlVBhgUFD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org