Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/_OYH2zl2FiDt7dhcPjJrlnJeSHE.roa
File:                     _OYH2zl2FiDt7dhcPjJrlnJeSHE.roa (raw, json)
Hash identifier:          f+ENzCfwoWXfaVQ64nZRCUllaoxIkTmMUmVyHjQksAw=
Subject key identifier:   FC:E6:07:DB:39:76:16:20:ED:ED:D8:5C:3E:32:6B:96:72:5E:48:71
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       081E0122
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/_OYH2zl2FiDt7dhcPjJrlnJeSHE.roa
Signing time:             Sat 01 Jan 2022 04:56:32 +0000
ROA not before:           Sat 01 Jan 2022 04:56:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212698
IP address blocks:        37.208.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136184098 (0x81e0122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Jan  1 04:56:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fce607db39761620ededd85c3e326b96725e4871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:04:fb:7f:4f:b6:49:e7:7a:8f:df:bf:b6:
                    75:90:67:58:dc:34:63:e6:0f:68:fe:23:ac:19:7e:
                    f5:45:e8:95:41:8c:e6:70:f8:b5:eb:1a:8e:3a:1c:
                    ce:3a:2b:e1:5f:14:68:ee:ff:65:60:87:1b:b6:23:
                    f3:55:f0:9b:88:50:16:c4:c6:ee:a5:b2:f7:f9:b6:
                    03:b9:36:da:c7:dd:35:17:33:d7:f3:07:65:c7:93:
                    a5:e2:e3:a2:8e:4a:04:c1:2b:91:dc:ce:ea:9c:31:
                    bd:7b:d8:8e:14:62:07:bf:7b:ec:da:27:3d:f4:41:
                    2e:21:b1:93:dd:df:b9:06:b2:7c:8a:c1:4a:97:70:
                    9f:99:a0:a8:18:ec:f6:5f:e8:a3:1a:86:ba:13:dd:
                    4c:8c:86:4a:ce:49:36:61:28:f8:2d:06:9f:f0:96:
                    df:4f:ba:4b:7f:a8:56:de:ec:a7:28:84:ee:f7:20:
                    f8:fe:26:fb:76:3d:06:be:ab:64:47:c4:86:b6:cd:
                    07:11:8a:31:d3:0f:24:9d:36:62:71:5f:9d:a0:9b:
                    6b:d7:c1:0c:c7:03:ab:8e:af:f4:35:fd:d1:37:38:
                    f9:31:99:79:ab:60:55:5a:c3:91:96:bb:49:28:93:
                    92:1f:be:52:16:af:71:a6:13:0c:78:42:81:3a:9d:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:07:DB:39:76:16:20:ED:ED:D8:5C:3E:32:6B:96:72:5E:48:71
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/_OYH2zl2FiDt7dhcPjJrlnJeSHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.208.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:55:3c:39:8e:22:fa:93:07:57:ef:34:a2:fd:2f:fb:89:
         37:94:73:7b:81:db:76:7a:6b:a8:e5:41:67:fb:50:2a:63:3e:
         7a:a1:60:21:21:8e:3e:e5:59:c3:bb:bf:7f:18:4d:a0:a6:29:
         85:8b:61:8b:62:82:e9:c1:74:9b:43:48:c6:9a:0b:3f:31:78:
         9a:0e:08:b8:94:e6:c8:e7:d3:62:f0:fb:9e:42:fe:01:2b:57:
         e0:94:30:7c:64:6b:5b:56:c3:5c:fe:5b:ec:d1:56:47:8b:87:
         12:37:d3:84:bd:d6:bc:df:13:22:97:81:53:47:a3:2e:33:68:
         09:dc:a1:db:7b:82:eb:08:14:a8:3b:57:0d:82:43:8a:68:c8:
         cc:5d:a8:2f:22:99:42:a3:c5:6c:be:e9:38:be:e2:44:ed:58:
         59:ff:2e:16:d8:2c:f0:75:8e:bc:67:fe:ae:f8:de:e2:da:ce:
         a5:80:34:78:57:68:cf:db:26:04:3e:46:b8:61:46:4c:a1:57:
         06:c8:5e:8e:ba:bd:43:9e:f8:40:80:c3:d8:e6:84:1d:14:20:
         ae:18:b8:32:89:91:ab:90:75:ff:51:3a:9b:e2:13:fb:04:03:
         a7:7a:08:81:ec:95:81:55:c0:2e:5c:d1:b9:be:b9:81:89:d4:
         1f:47:d1:fd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECB4BIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZWVlYzUyMzFkMjEyYjMxMDU3OWQ3OGZjNDE0NzljYTZlYzJhYTA3MB4XDTIyMDEw
MTA0NTYzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmNlNjA3ZGIzOTc2
MTYyMGVkZWRkODVjM2UzMjZiOTY3MjVlNDg3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOdMBPt/T7ZJ53qP37+2dZBnWNw0Y+YPaP4jrBl+9UXolUGM
5nD4tesajjoczjor4V8UaO7/ZWCHG7Yj81Xwm4hQFsTG7qWy9/m2A7k22sfdNRcz
1/MHZceTpeLjoo5KBMErkdzO6pwxvXvYjhRiB7977NonPfRBLiGxk93fuQayfIrB
Spdwn5mgqBjs9l/ooxqGuhPdTIyGSs5JNmEo+C0Gn/CW30+6S3+oVt7spyiE7vcg
+P4m+3Y9Br6rZEfEhrbNBxGKMdMPJJ02YnFfnaCba9fBDMcDq46v9DX90Tc4+TGZ
eatgVVrDkZa7SSiTkh++UhavcaYTDHhCgTqdr8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT85gfbOXYWIO3t2Fw+MmuWcl5IcTAfBgNVHSMEGDAWgBQu7sUjHSErMQV5
14/EFHnKbsKqBzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x1N0ZJeDBoS3pFRmVkZVB4QlI1eW03Q3FnYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvOGI4NTZhLTM4YWUtNGNmYi04MWQyLTI3MWE5NTc2ZWFlNy8x
L19PWUgyemwyRmlEdDdkaGNQakpybG5KZVNIRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
OGI4NTZhLTM4YWUtNGNmYi04MWQyLTI3MWE5NTc2ZWFlNy8xL0x1N0ZJeDBoS3pF
RmVkZVB4QlI1eW03Q3FnYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXQQzANBgkqhkiG9w0BAQsFAAOC
AQEABLdVPDmOIvqTB1fvNKL9L/uJN5Rze4HbdnprqOVBZ/tQKmM+eqFgISGOPuVZ
w7u/fxhNoKYphYthi2KC6cF0m0NIxpoLPzF4mg4IuJTmyOfTYvD7nkL+AStX4JQw
fGRrW1bDXP5b7NFWR4uHEjfThL3WvN8TIpeBU0ejLjNoCdyh23uC6wgUqDtXDYJD
imjIzF2oLyKZQqPFbL7pOL7iRO1YWf8uFtgs8HWOvGf+rvje4trOpYA0eFdoz9sm
BD5GuGFGTKFXBshejrq9Q574QIDD2OaEHRQgrhi4MomRq5B1/1E6m+IT+wQDp3oI
geyVgVXALlzRub65gYnUH0fR/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:30 2024 by rpki-client on console-ams.rpki-client.org