Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YpVuRcObq2ME27Fr5pTmCiy0FAQ.roa
File:                     YpVuRcObq2ME27Fr5pTmCiy0FAQ.roa (raw, json)
Hash identifier:          IMSkulVreEQB37P3tcWWlO/KDRpTzvTn36qOVGDlV5U=
Subject key identifier:   62:95:6E:45:C3:9B:AB:63:04:DB:B1:6B:E6:94:E6:0A:2C:B4:14:04
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       97E59B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YpVuRcObq2ME27Fr5pTmCiy0FAQ.roa
Signing time:             Sat 07 May 2022 06:31:41 +0000
ROA not before:           Sat 07 May 2022 06:31:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142111
IP address blocks:        185.106.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9954715 (0x97e59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: May  7 06:31:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62956e45c39bab6304dbb16be694e60a2cb41404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:f7:62:44:5b:30:44:5e:84:6c:22:3c:5a:
                    46:3a:eb:6e:6a:11:d6:59:bd:0a:24:1d:14:04:2b:
                    08:b5:36:bb:78:a7:22:a2:42:7e:9a:01:4e:19:02:
                    87:41:e6:59:14:b9:96:6b:de:59:e4:8c:c8:a2:2d:
                    18:32:b4:db:5a:d0:40:99:4a:ee:83:f5:71:ff:c3:
                    d0:51:af:be:50:78:07:92:c2:0f:36:8b:1a:19:a0:
                    20:7c:e2:37:23:8d:0e:ca:34:cd:e0:f9:43:bc:94:
                    92:03:d0:7b:47:a0:82:20:53:62:cb:12:be:61:58:
                    f2:84:12:95:ec:5d:5f:79:d5:84:d9:3c:d5:58:0d:
                    40:e4:97:ba:84:ea:bc:2a:13:d5:e7:a5:d3:34:48:
                    fe:86:64:4f:53:43:89:8e:73:6b:a9:59:39:b2:1e:
                    58:e7:49:e3:07:11:7c:f6:08:25:97:41:cc:18:21:
                    d3:ea:c4:43:01:94:c9:30:12:9e:1e:11:15:0b:5b:
                    98:3a:7f:53:f3:b5:ac:04:ee:22:73:9b:f4:d7:44:
                    b0:7c:9c:2e:cf:f4:90:1f:56:95:6c:d8:d7:c4:71:
                    79:1d:d3:f8:2a:a2:f0:a5:2c:cf:31:41:fd:bf:0f:
                    a3:c9:0e:71:0e:d6:df:b8:f1:17:43:22:e4:13:3e:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:95:6E:45:C3:9B:AB:63:04:DB:B1:6B:E6:94:E6:0A:2C:B4:14:04
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YpVuRcObq2ME27Fr5pTmCiy0FAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:44:9c:4b:c0:1b:74:d7:29:0c:2e:0b:c5:28:05:af:46:
         46:10:90:69:55:75:31:30:48:20:9d:40:e5:3b:f9:89:f1:77:
         56:95:96:ac:04:59:a1:d8:61:29:33:14:ce:c4:75:8c:0d:bc:
         6f:21:e1:1d:31:0d:38:2d:1c:3c:4b:c8:37:44:9c:20:cf:7d:
         52:b8:dc:15:d7:27:3c:38:b1:1c:73:07:f9:f2:5a:1f:43:b6:
         90:f1:91:e0:8c:84:51:fc:c3:69:b9:81:72:a5:b6:75:06:a1:
         c1:4c:44:e0:ec:75:1c:f7:d6:c0:68:9c:65:fa:43:b1:bf:48:
         4b:f1:be:a5:bb:4f:98:25:0b:0b:29:d5:95:8f:3b:25:3c:c6:
         7f:f1:5f:bd:66:a7:f1:4a:b5:c7:4c:c4:92:a0:7d:89:7f:12:
         83:67:e7:42:93:18:66:4f:18:e0:d0:dc:c8:e0:50:fc:c7:c4:
         d0:3c:2c:9e:30:0b:7e:e4:dd:8d:5c:b1:04:aa:90:5d:da:a8:
         11:a9:c4:c9:7d:b9:c5:dd:ea:fb:55:cb:93:9f:f5:75:91:76:
         27:a7:ed:40:27:bb:55:ad:80:1b:b3:28:ab:e7:5f:ea:30:52:
         51:78:87:95:bf:56:d4:72:82:f2:34:73:27:3d:74:27:38:ac:
         ac:06:78:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJflmzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmNjZTA2ZTcwZGY5NzBkOTBhYmZlM2NiZTdmYTg4MmY0NjdiMWU0MB4XDTIyMDUw
NzA2MzE0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjI5NTZlNDVjMzli
YWI2MzA0ZGJiMTZiZTY5NGU2MGEyY2I0MTQwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALt792JEWzBEXoRsIjxaRjrrbmoR1lm9CiQdFAQrCLU2u3in
IqJCfpoBThkCh0HmWRS5lmveWeSMyKItGDK021rQQJlK7oP1cf/D0FGvvlB4B5LC
DzaLGhmgIHziNyONDso0zeD5Q7yUkgPQe0eggiBTYssSvmFY8oQSlexdX3nVhNk8
1VgNQOSXuoTqvCoT1eel0zRI/oZkT1NDiY5za6lZObIeWOdJ4wcRfPYIJZdBzBgh
0+rEQwGUyTASnh4RFQtbmDp/U/O1rATuInOb9NdEsHycLs/0kB9WlWzY18RxeR3T
+Cqi8KUszzFB/b8Po8kOcQ7W37jxF0Mi5BM+kwECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRilW5Fw5urYwTbsWvmlOYKLLQUBDAfBgNVHSMEGDAWgBSGzOBucN+XDZCr
/jy+f6iC9Gex5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hzemdibkRmbHcyUXFfNDh2bi1vZ3ZSbnNlUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNjZmMDVjLTc0MWMtNDcyMC1iYzdlLTg5NzE0YTdlOGQ1OC8x
L1lwVnVSY09icTJNRTI3RnI1cFRtQ2l5MEZBUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NjZmMDVjLTc0MWMtNDcyMC1iYzdlLTg5NzE0YTdlOGQ1OC8xL2hzemdibkRmbHcy
UXFfNDh2bi1vZ3ZSbnNlUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAblqwjANBgkqhkiG9w0BAQsFAAOC
AQEAeTxEnEvAG3TXKQwuC8UoBa9GRhCQaVV1MTBIIJ1A5Tv5ifF3VpWWrARZodhh
KTMUzsR1jA28byHhHTENOC0cPEvIN0ScIM99UrjcFdcnPDixHHMH+fJaH0O2kPGR
4IyEUfzDabmBcqW2dQahwUxE4Ox1HPfWwGicZfpDsb9IS/G+pbtPmCULCynVlY87
JTzGf/FfvWan8Uq1x0zEkqB9iX8Sg2fnQpMYZk8Y4NDcyOBQ/MfE0DwsnjALfuTd
jVyxBKqQXdqoEanEyX25xd3q+1XLk5/1dZF2J6ftQCe7Va2AG7Moq+df6jBSUXiH
lb9W1HKC8jRzJz10JzisrAZ47g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org