Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/IYBILHUM7w4BvzYO4xm_7Dgp5mw.roa
File:                     IYBILHUM7w4BvzYO4xm_7Dgp5mw.roa (raw, json)
Hash identifier:          PuaqG0uTqyrS3KIG+l7JitvYzvyGemhp1bGT8tk361o=
Subject key identifier:   21:80:48:2C:75:0C:EF:0E:01:BF:36:0E:E3:19:BF:EC:38:29:E6:6C
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       04C34E13
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/IYBILHUM7w4BvzYO4xm_7Dgp5mw.roa
Signing time:             Sat 01 Jan 2022 08:56:14 +0000
ROA not before:           Sat 01 Jan 2022 08:56:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58152
IP address blocks:        185.187.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79908371 (0x4c34e13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Jan  1 08:56:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2180482c750cef0e01bf360ee319bfec3829e66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:bd:31:59:ce:76:12:2c:8b:88:30:b7:5b:
                    7d:88:44:f9:45:9c:a0:ae:e5:34:d7:11:05:fa:44:
                    ea:46:ab:77:6b:fb:52:31:10:5a:da:c1:a2:fb:94:
                    bc:8a:e7:4b:f2:f5:ec:1c:4e:22:28:9d:37:b9:07:
                    c5:69:66:02:95:09:b4:fa:44:be:74:80:b3:8a:1a:
                    8d:f8:89:19:58:a4:e6:16:33:e6:67:61:01:2d:d9:
                    8c:13:55:25:cb:b9:6d:b5:78:3d:77:93:bd:e2:32:
                    63:ab:26:53:bf:cb:15:28:94:7b:f5:9b:40:05:17:
                    6e:30:9c:0d:0b:c0:6b:35:30:24:a8:7d:d6:99:a3:
                    8d:11:2e:c8:2a:4e:ad:13:6b:be:e1:48:ba:88:0b:
                    80:2c:d2:7b:52:53:c4:c9:62:34:c3:6b:2c:06:e0:
                    43:75:cd:84:ce:50:87:5a:2c:a1:88:a2:83:e8:64:
                    bb:9b:f1:bd:c3:ed:f4:f2:d6:b8:85:6a:4b:e8:21:
                    e6:1e:e5:70:92:b5:80:4d:1e:21:e8:10:83:aa:a9:
                    73:47:b8:6a:b4:43:fe:f2:81:c0:fe:ae:10:01:47:
                    f1:6f:70:a8:35:61:75:e1:6b:aa:d0:bc:46:a3:60:
                    7a:88:70:b3:8f:62:26:b5:79:52:84:57:81:13:9c:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:48:2C:75:0C:EF:0E:01:BF:36:0E:E3:19:BF:EC:38:29:E6:6C
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/IYBILHUM7w4BvzYO4xm_7Dgp5mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:6a:d6:4e:05:5f:34:a6:a2:09:71:a5:86:fb:2a:98:d5:f7:
         2d:4d:e6:0c:43:ab:9d:4d:4d:d9:54:69:c3:2a:4a:97:70:bb:
         59:7b:94:0d:88:a5:43:bf:05:33:06:88:90:9b:72:7e:17:88:
         cb:be:35:33:cb:25:23:17:aa:8b:c5:89:db:4e:e3:1e:65:0a:
         29:38:d8:23:85:0f:32:6b:e2:9d:b3:2e:07:23:b0:98:b3:39:
         02:84:3a:85:b3:2e:30:5d:3b:9c:a7:d9:19:e6:80:df:5c:67:
         a0:8f:39:1a:d3:e6:f7:07:24:d1:a7:a1:5a:02:3d:d2:72:ad:
         45:da:ac:02:6d:76:20:3e:47:3c:76:71:e9:a4:a5:f6:9d:50:
         a4:ac:75:e5:62:8b:51:21:6b:9a:fc:36:51:5c:72:25:6d:bf:
         ed:49:c6:ce:e8:03:ae:9e:82:21:43:01:ce:ea:b5:f9:37:bf:
         81:57:bd:d9:8b:c8:a2:63:72:ef:8a:8e:54:03:7c:55:61:1e:
         cc:b7:ce:bd:c0:1f:0a:f2:57:39:04:c0:c9:de:f1:29:ff:32:
         33:d4:b5:dc:3b:3a:0b:e9:ad:b1:bb:2b:fe:53:52:2c:2c:12:
         a6:53:47:68:cc:7b:52:d3:52:51:d5:ec:fa:68:8c:33:10:d6:
         43:05:fc:22
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBMNOEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NTg4ZDhiNGM3YWE0NWE5YjJjZDczN2M2MTQ4NzFlYjcxODFiYWJlMB4XDTIyMDEw
MTA4NTYxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjE4MDQ4MmM3NTBj
ZWYwZTAxYmYzNjBlZTMxOWJmZWMzODI5ZTY2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMDIvTFZznYSLIuIMLdbfYhE+UWcoK7lNNcRBfpE6kard2v7
UjEQWtrBovuUvIrnS/L17BxOIiidN7kHxWlmApUJtPpEvnSAs4oajfiJGVik5hYz
5mdhAS3ZjBNVJcu5bbV4PXeTveIyY6smU7/LFSiUe/WbQAUXbjCcDQvAazUwJKh9
1pmjjREuyCpOrRNrvuFIuogLgCzSe1JTxMliNMNrLAbgQ3XNhM5Qh1osoYiig+hk
u5vxvcPt9PLWuIVqS+gh5h7lcJK1gE0eIegQg6qpc0e4arRD/vKBwP6uEAFH8W9w
qDVhdeFrqtC8RqNgeohws49iJrV5UoRXgROcYt8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQhgEgsdQzvDgG/Ng7jGb/sOCnmbDAfBgNVHSMEGDAWgBSViNi0x6pFqbLN
c3xhSHHrcYG6vjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xZall0TWVxUmFteXpYTjhZVWh4NjNHQnVyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvMDBjM2FiLTRhN2YtNGY3NC1iNTU2LWE0ODhiZDQyMDI0Zi8x
L0lZQklMSFVNN3c0QnZ6WU80eG1fN0RncDVtdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
MDBjM2FiLTRhN2YtNGY3NC1iNTU2LWE0ODhiZDQyMDI0Zi8xL2xZall0TWVxUmFt
eXpYTjhZVWh4NjNHQnVyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm7MjANBgkqhkiG9w0BAQsFAAOC
AQEAxGrWTgVfNKaiCXGlhvsqmNX3LU3mDEOrnU1N2VRpwypKl3C7WXuUDYilQ78F
MwaIkJtyfheIy741M8slIxeqi8WJ207jHmUKKTjYI4UPMmvinbMuByOwmLM5AoQ6
hbMuMF07nKfZGeaA31xnoI85GtPm9wck0aehWgI90nKtRdqsAm12ID5HPHZx6aSl
9p1QpKx15WKLUSFrmvw2UVxyJW2/7UnGzugDrp6CIUMBzuq1+Te/gVe92YvIomNy
74qOVAN8VWEezLfOvcAfCvJXOQTAyd7xKf8yM9S13Ds6C+mtsbsr/lNSLCwSplNH
aMx7UtNSUdXs+miMMxDWQwX8Ig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:11 2024 by rpki-client on console-ams.rpki-client.org