Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/NsJ45f0Op4pS35xXzReGLjdHfGQ.roa
File:                     NsJ45f0Op4pS35xXzReGLjdHfGQ.roa (raw, json)
Hash identifier:          hLX8FP12z+hkd+PMm3a23Il9ehn9uvhezxHtqQgXYJ8=
Subject key identifier:   36:C2:78:E5:FD:0E:A7:8A:52:DF:9C:57:CD:17:86:2E:37:47:7C:64
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0667CC39
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/NsJ45f0Op4pS35xXzReGLjdHfGQ.roa
Signing time:             Thu 10 Mar 2022 17:02:24 +0000
ROA not before:           Thu 10 Mar 2022 17:02:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        185.179.218.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107465785 (0x667cc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Mar 10 17:02:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=36c278e5fd0ea78a52df9c57cd17862e37477c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:11:15:dd:cd:d3:aa:8e:a9:ad:75:de:49:
                    40:a1:15:7c:bc:b2:25:3c:e8:25:f7:2a:69:d2:59:
                    7d:d6:71:5d:c6:46:df:32:90:fd:2b:3a:7c:cd:79:
                    de:17:34:05:23:bb:b9:19:90:d5:0e:83:29:da:1c:
                    96:8c:7f:83:86:4d:91:9a:d1:62:58:8e:2f:09:ad:
                    f0:78:87:a9:3c:a2:bb:c2:9a:46:11:38:3a:6c:1b:
                    4d:33:7a:6a:51:4e:c7:0d:3e:f4:e9:24:97:7a:a5:
                    2d:e4:fc:85:cd:eb:d3:57:dd:94:82:6e:95:db:e3:
                    9c:6a:65:8d:05:73:01:42:34:1d:e6:a6:c1:ca:87:
                    47:6d:d8:05:53:45:e2:24:a6:92:4d:c7:f2:de:a9:
                    b6:e4:a3:e4:ba:57:90:a3:55:fc:e5:60:23:41:ae:
                    b9:a3:f8:6c:10:7a:36:bc:d3:80:38:72:9d:2e:09:
                    59:a8:98:71:45:84:6f:c3:1a:33:4b:6b:e2:e8:73:
                    f3:3e:b3:c4:60:c9:d4:8a:18:aa:35:85:2f:1e:6d:
                    56:e8:b8:7e:c0:7f:e4:96:ba:dd:6f:35:c5:76:c6:
                    d4:1a:2d:0a:85:c4:d0:a0:74:dd:c5:aa:15:ca:43:
                    a7:b4:2c:be:fc:70:69:a2:f4:e9:e5:87:99:8a:a1:
                    a0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C2:78:E5:FD:0E:A7:8A:52:DF:9C:57:CD:17:86:2E:37:47:7C:64
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/NsJ45f0Op4pS35xXzReGLjdHfGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:80:36:cb:75:d9:39:bb:ec:ca:a1:ad:aa:29:67:3b:6b:0a:
         dc:a1:80:7b:11:7d:7b:10:de:d9:f7:5d:a7:73:04:1d:5a:e3:
         a8:60:e7:5d:21:2e:ff:25:43:90:5a:8f:ed:dd:91:3b:34:4f:
         24:4d:01:28:d7:84:d8:f3:aa:0c:12:17:1f:cc:65:43:4f:87:
         1b:f9:fa:50:08:39:1e:0d:4e:4b:a8:48:3a:7b:5b:74:d5:f1:
         5e:2b:d3:9e:2a:3e:00:63:6c:ec:60:8e:77:db:33:40:48:b8:
         68:0e:5e:70:92:b0:67:10:af:df:ed:87:0a:3f:6b:e9:f6:58:
         01:f7:ad:80:09:bd:d7:8b:69:4f:2b:53:fe:9a:b8:ad:93:b6:
         8a:85:43:73:82:ff:20:3c:ac:a1:fc:2a:87:98:80:2d:3f:64:
         26:d7:3d:5b:60:f1:9a:96:02:9f:fb:d0:f1:2c:87:94:7f:6c:
         fe:99:bd:f0:2b:2b:d4:be:90:d4:5e:d1:2c:bf:7d:88:c0:be:
         11:8d:84:be:ac:7d:fb:8a:c7:77:fb:bc:28:65:23:a4:dd:5b:
         b1:d3:40:79:8b:dc:0b:cc:e8:db:23:3f:8c:bb:28:a3:a4:a4:
         bc:65:54:b0:74:49:18:1a:dd:36:b1:8e:71:ad:ca:9e:25:db:
         b0:35:8a:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBmfMOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ODEwMTc3MjI0ODk5NmI4N2Q5MDg0MGMyZDI3ZDYyNTQ5NDU4MTczMB4XDTIyMDMx
MDE3MDIyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzZjMjc4ZTVmZDBl
YTc4YTUyZGY5YzU3Y2QxNzg2MmUzNzQ3N2M2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALokERXdzdOqjqmtdd5JQKEVfLyyJTzoJfcqadJZfdZxXcZG
3zKQ/Ss6fM153hc0BSO7uRmQ1Q6DKdoclox/g4ZNkZrRYliOLwmt8HiHqTyiu8Ka
RhE4OmwbTTN6alFOxw0+9Okkl3qlLeT8hc3r01fdlIJuldvjnGpljQVzAUI0Heam
wcqHR23YBVNF4iSmkk3H8t6ptuSj5LpXkKNV/OVgI0GuuaP4bBB6NrzTgDhynS4J
WaiYcUWEb8MaM0tr4uhz8z6zxGDJ1IoYqjWFLx5tVui4fsB/5Ja63W81xXbG1Bot
CoXE0KB03cWqFcpDp7QsvvxwaaL06eWHmYqhoHMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ2wnjl/Q6nilLfnFfNF4YuN0d8ZDAfBgNVHSMEGDAWgBQYEBdyJImWuH2Q
hAwtJ9YlSUWBczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dCQVhjaVNKbHJoOWtJUU1MU2ZXSlVsRmdYTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvMjBhNWE1LTBiYTItNDA1Mi1iZWI0LTNjYzg1YWQzYzE5MC8x
L05zSjQ1ZjBPcDRwUzM1eFh6UmVHTGpkSGZHUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
MjBhNWE1LTBiYTItNDA1Mi1iZWI0LTNjYzg1YWQzYzE5MC8xL0dCQVhjaVNKbHJo
OWtJUU1MU2ZXSlVsRmdYTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmz2jANBgkqhkiG9w0BAQsFAAOC
AQEAUoA2y3XZObvsyqGtqilnO2sK3KGAexF9exDe2fddp3MEHVrjqGDnXSEu/yVD
kFqP7d2ROzRPJE0BKNeE2POqDBIXH8xlQ0+HG/n6UAg5Hg1OS6hIOntbdNXxXivT
nio+AGNs7GCOd9szQEi4aA5ecJKwZxCv3+2HCj9r6fZYAfetgAm914tpTytT/pq4
rZO2ioVDc4L/IDysofwqh5iALT9kJtc9W2DxmpYCn/vQ8SyHlH9s/pm98Csr1L6Q
1F7RLL99iMC+EY2Evqx9+4rHd/u8KGUjpN1bsdNAeYvcC8zo2yM/jLsoo6SkvGVU
sHRJGBrdNrGOca3KniXbsDWKRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org