Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tsa50J1uIZvk7YSLAjQQBixWy0Y.roa
File:                     Tsa50J1uIZvk7YSLAjQQBixWy0Y.roa (raw, json)
Hash identifier:          0YS6ys6WWnooz2GO2mhP42U7uLwW7LxWDZLkQNo/nv4=
Subject key identifier:   4E:C6:B9:D0:9D:6E:21:9B:E4:ED:84:8B:02:34:10:06:2C:56:CB:46
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       286155EB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tsa50J1uIZvk7YSLAjQQBixWy0Y.roa
Signing time:             Sat 01 Jan 2022 16:10:22 +0000
ROA not before:           Sat 01 Jan 2022 16:10:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212432
IP address blocks:        93.170.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677467627 (0x286155eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:10:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ec6b9d09d6e219be4ed848b023410062c56cb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:46:cf:7e:05:67:16:31:8f:f3:95:4c:61:
                    c1:47:51:45:ee:91:36:40:8c:43:97:0b:ea:42:0d:
                    bb:bd:a8:67:e9:67:c3:d0:ca:12:98:de:0c:f5:ae:
                    45:67:05:1e:99:84:eb:7d:fc:33:ff:a6:34:6c:8d:
                    32:01:31:59:5c:7d:0b:62:9e:af:97:ea:34:2f:42:
                    59:a8:ba:cf:0c:37:ea:40:91:f0:a8:5a:0b:30:f3:
                    88:15:58:d7:51:a6:c1:25:52:63:f4:f1:f6:dc:4d:
                    15:6d:93:07:a9:25:e0:87:71:39:45:59:10:01:47:
                    e3:7e:58:db:72:0f:75:8e:cf:ea:e7:41:cd:df:54:
                    00:d4:24:52:d8:9c:33:d1:f4:08:ba:a3:a9:0e:80:
                    2f:46:14:1f:de:54:ff:9f:4c:e5:1d:56:d5:46:c4:
                    60:a8:d9:bd:56:18:64:ee:54:03:c6:ad:3a:2a:b5:
                    d8:b7:42:54:93:37:dd:8d:81:72:e3:74:04:6a:7c:
                    38:bb:bb:04:f5:0f:53:96:a4:59:5d:39:90:48:78:
                    ed:cb:7f:9f:92:86:92:86:94:99:38:a9:a4:4b:b7:
                    c5:86:58:f8:27:3d:06:bd:ca:73:f0:c9:f4:d4:a8:
                    ac:02:7b:4f:b6:5f:68:de:13:de:a1:55:b1:e1:99:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:B9:D0:9D:6E:21:9B:E4:ED:84:8B:02:34:10:06:2C:56:CB:46
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tsa50J1uIZvk7YSLAjQQBixWy0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6a:35:49:f5:f4:cc:d0:9d:d1:54:97:c5:6f:9a:20:4a:b6:
         67:1d:85:07:d2:eb:f3:1d:55:b2:d0:1c:2e:6e:b1:4a:a5:f4:
         fa:9d:c5:3e:6c:3c:1d:58:d1:d5:a5:e1:fa:5a:9f:90:f5:ea:
         ee:f4:7a:8b:88:2f:63:f2:1b:b7:90:8d:37:63:cc:23:a2:ee:
         b1:f4:4d:e6:8a:4f:84:f6:f9:8b:24:aa:0e:e8:62:ee:d6:09:
         28:32:8a:19:25:d0:ff:f2:1b:2a:ed:44:d6:b6:78:35:f4:91:
         85:9c:3c:7b:39:11:93:86:5a:2e:7d:cd:82:b9:b7:76:8b:d0:
         ec:27:b5:bd:02:75:d3:ec:7a:5c:df:05:ae:30:22:e9:8e:36:
         3d:69:63:cd:21:fb:93:03:a5:65:97:30:ef:8b:f2:8f:d1:9c:
         be:f7:43:a5:54:63:65:4c:6f:b1:e9:64:3f:7d:d9:d5:03:ab:
         6a:c8:4b:61:f2:31:10:80:8f:e7:5d:c9:43:78:db:83:41:fb:
         cd:c1:7b:e4:71:38:4b:26:01:ca:b2:21:17:08:e0:3c:22:a3:
         d7:3e:6d:9f:19:d0:46:0a:02:c0:8f:9d:53:c5:b5:2b:dc:af:
         03:bd:6d:92:af:60:b5:a3:8d:34:e1:67:69:59:db:87:09:df:
         72:da:16:1e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKGFV6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MTAyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGVjNmI5ZDA5ZDZl
MjE5YmU0ZWQ4NDhiMDIzNDEwMDYyYzU2Y2I0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJ6Rs9+BWcWMY/zlUxhwUdRRe6RNkCMQ5cL6kINu72oZ+ln
w9DKEpjeDPWuRWcFHpmE6338M/+mNGyNMgExWVx9C2Ker5fqNC9CWai6zww36kCR
8KhaCzDziBVY11GmwSVSY/Tx9txNFW2TB6kl4IdxOUVZEAFH435Y23IPdY7P6udB
zd9UANQkUticM9H0CLqjqQ6AL0YUH95U/59M5R1W1UbEYKjZvVYYZO5UA8atOiq1
2LdCVJM33Y2BcuN0BGp8OLu7BPUPU5akWV05kEh47ct/n5KGkoaUmTippEu3xYZY
+Cc9Br3Kc/DJ9NSorAJ7T7ZfaN4T3qFVseGZ9IsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBROxrnQnW4hm+TthIsCNBAGLFbLRjAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1RzYTUwSjF1SVp2azdZU0xBalFRQml4V3kwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2qujANBgkqhkiG9w0BAQsFAAOC
AQEArWo1SfX0zNCd0VSXxW+aIEq2Zx2FB9Lr8x1VstAcLm6xSqX0+p3FPmw8HVjR
1aXh+lqfkPXq7vR6i4gvY/Ibt5CNN2PMI6LusfRN5opPhPb5iySqDuhi7tYJKDKK
GSXQ//IbKu1E1rZ4NfSRhZw8ezkRk4ZaLn3Ngrm3dovQ7Ce1vQJ10+x6XN8FrjAi
6Y42PWljzSH7kwOlZZcw74vyj9GcvvdDpVRjZUxvselkP33Z1QOrashLYfIxEICP
513JQ3jbg0H7zcF75HE4SyYByrIhFwjgPCKj1z5tnxnQRgoCwI+dU8W1K9yvA71t
kq9gtaONNOFnaVnbhwnfctoWHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org