Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JadC0mz2jCA1PjWZIXRRXdzLOoU.roa
File:                     JadC0mz2jCA1PjWZIXRRXdzLOoU.roa (raw, json)
Hash identifier:          vuzp9O19Jw/2qP/3d3vDUHlpdmVcO3NrVmvPZL7txVM=
Subject key identifier:   25:A7:42:D2:6C:F6:8C:20:35:3E:35:99:21:74:51:5D:DC:CB:3A:85
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       03EA12EC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JadC0mz2jCA1PjWZIXRRXdzLOoU.roa
Signing time:             Sat 01 Jan 2022 13:04:13 +0000
ROA not before:           Sat 01 Jan 2022 13:04:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212097
IP address blocks:        185.227.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65671916 (0x3ea12ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 13:04:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=25a742d26cf68c20353e35992174515ddccb3a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:7d:d2:e9:9f:2c:49:b6:ca:3b:d8:cd:bf:
                    5c:01:01:fc:b0:9e:fd:83:43:2f:1e:a8:2d:49:e9:
                    19:99:08:ee:88:41:95:77:8c:c9:4a:c8:59:0d:be:
                    6a:87:46:4d:8b:c4:d6:b6:a5:74:e1:d2:c0:63:c0:
                    a5:aa:30:47:7c:19:d0:0d:0b:5c:4c:71:07:ef:99:
                    8b:f5:03:de:99:7e:14:c0:67:fa:bb:04:60:65:51:
                    36:35:f9:49:95:dd:ed:8f:a9:02:55:c5:35:21:e2:
                    db:60:e8:93:a5:ac:0f:c2:f7:03:b5:78:2a:10:a2:
                    59:bf:da:ba:45:07:bf:1c:23:b0:a4:95:6c:be:40:
                    5c:df:e8:7f:1c:50:ca:25:d0:59:c1:6a:6d:5f:25:
                    c6:c6:bd:2d:bb:7f:59:42:4e:98:b2:31:82:4f:77:
                    1a:51:63:90:d6:35:31:03:7f:62:03:a9:93:b5:52:
                    35:59:25:cd:17:30:e1:7a:02:78:e6:ff:dc:fb:ec:
                    c0:f7:a0:1f:30:bf:d5:50:07:ae:50:53:88:e8:a1:
                    ac:01:c5:81:fb:e4:b2:be:dd:14:7f:42:51:67:ef:
                    22:e6:e3:f0:dd:62:9b:65:c5:77:6e:d0:e6:bf:04:
                    5f:4a:bf:2e:1f:b8:1f:13:21:b9:cd:20:5f:7d:d9:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:42:D2:6C:F6:8C:20:35:3E:35:99:21:74:51:5D:DC:CB:3A:85
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JadC0mz2jCA1PjWZIXRRXdzLOoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:a7:d5:f8:e4:4e:06:7b:e6:5e:61:a9:2f:6b:b3:51:d7:a7:
         49:43:e0:23:4c:dc:77:ef:8a:b9:9a:f7:af:74:87:f9:57:94:
         a7:ce:af:19:81:d7:f6:7e:1f:ba:89:8b:13:18:8d:1a:6a:7a:
         6f:9e:66:b8:39:ce:5e:2c:36:5b:d2:53:77:03:e3:cf:4c:ec:
         a8:2d:38:2c:a1:70:e1:77:37:a4:b8:55:e1:1c:c2:48:0b:d6:
         47:61:0c:93:5d:d1:99:33:76:ca:dc:40:59:d4:d4:d7:95:fc:
         a8:f9:70:80:d5:8f:eb:92:c7:68:4e:d6:95:bf:33:a7:44:2f:
         67:bd:d8:4f:74:97:04:c6:a0:54:92:b4:45:7e:a1:b3:f8:28:
         4e:64:db:c1:72:a7:e2:b4:6f:2b:bb:db:f3:d1:e9:34:21:ea:
         9b:da:a6:84:be:16:2f:9f:4b:32:1c:12:3c:58:21:e4:53:bb:
         2e:e4:bd:2d:d8:c0:80:35:28:21:94:42:ff:08:48:96:ae:1d:
         73:61:f3:de:c6:56:78:d5:b3:6c:15:d2:ae:3c:f7:9c:83:7c:
         75:b8:bc:29:fb:95:63:6e:e8:30:c7:67:aa:46:7f:6c:0a:78:
         a6:38:c1:82:77:6b:69:d5:2f:c7:b5:0c:f7:ea:a7:c5:0c:cc:
         90:e7:9e:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+oS7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDEw
MTEzMDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjVhNzQyZDI2Y2Y2
OGMyMDM1M2UzNTk5MjE3NDUxNWRkY2NiM2E4NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANnpfdLpnyxJtso72M2/XAEB/LCe/YNDLx6oLUnpGZkI7ohB
lXeMyUrIWQ2+aodGTYvE1raldOHSwGPApaowR3wZ0A0LXExxB++Zi/UD3pl+FMBn
+rsEYGVRNjX5SZXd7Y+pAlXFNSHi22Dok6WsD8L3A7V4KhCiWb/aukUHvxwjsKSV
bL5AXN/ofxxQyiXQWcFqbV8lxsa9Lbt/WUJOmLIxgk93GlFjkNY1MQN/YgOpk7VS
NVklzRcw4XoCeOb/3PvswPegHzC/1VAHrlBTiOihrAHFgfvksr7dFH9CUWfvIubj
8N1im2XFd27Q5r8EX0q/Lh+4HxMhuc0gX33ZvPMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQlp0LSbPaMIDU+NZkhdFFd3Ms6hTAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L0phZEMwbXoyakNBMVBqV1pJWFJSWGR6TE9vVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnjZjANBgkqhkiG9w0BAQsFAAOC
AQEAtafV+OROBnvmXmGpL2uzUdenSUPgI0zcd++KuZr3r3SH+VeUp86vGYHX9n4f
uomLExiNGmp6b55muDnOXiw2W9JTdwPjz0zsqC04LKFw4Xc3pLhV4RzCSAvWR2EM
k13RmTN2ytxAWdTU15X8qPlwgNWP65LHaE7Wlb8zp0QvZ73YT3SXBMagVJK0RX6h
s/goTmTbwXKn4rRvK7vb89HpNCHqm9qmhL4WL59LMhwSPFgh5FO7LuS9LdjAgDUo
IZRC/whIlq4dc2Hz3sZWeNWzbBXSrjz3nIN8dbi8KfuVY27oMMdnqkZ/bAp4pjjB
gndradUvx7UM9+qnxQzMkOeeaA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org