Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/1-Vl5UcecAV7dZD-GVX5CDE2S6Tw.roa
File:                     1-Vl5UcecAV7dZD-GVX5CDE2S6Tw.roa (raw, json)
Hash identifier:          E/fAsyUdeZgnOR2MNKo69WV3H3H3HjSNl67DAxvZZcM=
Subject key identifier:   F9:59:79:51:C7:9C:01:5E:DD:64:3F:86:55:7E:42:0C:4D:92:E9:3C
Certificate issuer:       /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial:       054D5A97
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/1-Vl5UcecAV7dZD-GVX5CDE2S6Tw.roa
Signing time:             Sat 01 Jan 2022 14:58:26 +0000
ROA not before:           Sat 01 Jan 2022 14:58:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212641
IP address blocks:        185.179.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88955543 (0x54d5a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
        Validity
            Not Before: Jan  1 14:58:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9597951c79c015edd643f86557e420c4d92e93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:ea:a8:37:fa:de:90:0c:ab:ab:52:e2:19:
                    00:2e:2a:60:0b:76:74:d7:70:6c:fc:63:c3:63:75:
                    b3:4b:4d:63:8b:35:d3:12:99:8f:55:04:39:dc:ff:
                    d2:32:9a:5e:66:93:0a:70:50:68:f2:ad:9f:65:60:
                    da:91:30:67:75:68:34:47:57:e0:1c:ec:ab:40:79:
                    34:2e:04:e6:89:03:c1:de:34:fa:4b:b6:84:b2:2d:
                    2c:46:b8:1d:ae:41:91:07:46:c8:37:3d:00:1c:d0:
                    c8:b4:aa:23:9b:33:c0:79:b8:b5:4f:ae:d9:cb:c0:
                    59:93:a2:a6:05:0b:a4:e9:05:ae:a4:59:33:6b:ad:
                    1c:8c:c5:f6:7f:24:b3:b9:90:c6:a9:b8:0d:0e:fd:
                    1d:a2:c1:62:75:6d:86:88:98:03:90:f4:24:84:af:
                    6a:23:89:62:89:93:a9:7c:f1:f0:d0:78:ae:8c:d7:
                    3c:26:9c:7d:be:fc:04:a4:a8:76:9f:5b:28:fc:79:
                    0d:c5:50:41:99:be:8a:21:43:d2:ba:aa:a8:93:48:
                    54:7f:0c:19:94:6a:a3:a7:13:87:77:02:b1:33:80:
                    cb:46:bb:43:5e:0c:45:b1:e9:a0:6d:b1:39:bb:fc:
                    e4:45:8f:8d:b8:12:fa:ac:63:2a:b3:63:18:2b:43:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:79:51:C7:9C:01:5E:DD:64:3F:86:55:7E:42:0C:4D:92:E9:3C
            X509v3 Authority Key Identifier:
                keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/1-Vl5UcecAV7dZD-GVX5CDE2S6Tw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:d8:5b:bc:81:c2:d6:7d:3f:bf:d6:57:a1:89:4d:f0:64:5c:
         73:ec:5d:ab:e4:cb:30:9a:51:90:b8:5a:51:22:f0:c8:6c:13:
         30:0f:7b:17:56:95:37:05:39:52:34:08:eb:76:18:fe:82:d8:
         4e:9e:65:7a:b1:8e:d8:df:18:da:99:db:8c:7a:fe:49:d6:59:
         40:c4:ce:69:de:ca:26:d7:04:f2:f5:20:bd:af:3e:d3:f5:f5:
         6b:56:f1:0e:91:00:74:0d:72:fd:1f:e7:98:b6:b7:9b:e7:6b:
         c9:35:73:4f:8f:52:34:c1:8d:c4:6d:a2:fa:ae:cb:f5:ec:1c:
         63:71:a7:14:04:ea:54:c6:c9:54:77:64:51:8c:03:8c:74:25:
         2b:90:7f:0b:08:80:65:50:a6:13:b2:1b:99:86:cb:e4:09:3f:
         94:de:81:de:46:8b:38:5e:8b:d5:0f:2b:64:ed:f1:d7:d3:79:
         1e:1f:19:85:d2:ff:67:d1:76:80:ac:02:88:a0:1e:e1:4a:44:
         39:14:11:46:bc:77:f4:1a:fe:e2:a9:5e:64:36:aa:ee:2c:cc:
         2d:f0:d4:29:e1:bd:d3:ee:a3:e8:57:58:a1:58:16:6e:9a:33:
         da:02:c4:43:b9:74:50:2e:f2:8f:93:d0:e9:b3:b7:3b:7e:29:
         78:b6:2d:82
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBU1alzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NzMyMTA3OGYzNTlkNzk5MDI3NmRhYmIwZjhjMzAwNzBlNjg1OTYzMB4XDTIyMDEw
MTE0NTgyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjk1OTc5NTFjNzlj
MDE1ZWRkNjQzZjg2NTU3ZTQyMGM0ZDkyZTkzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzs6qg3+t6QDKurUuIZAC4qYAt2dNdwbPxjw2N1s0tNY4s1
0xKZj1UEOdz/0jKaXmaTCnBQaPKtn2Vg2pEwZ3VoNEdX4Bzsq0B5NC4E5okDwd40
+ku2hLItLEa4Ha5BkQdGyDc9ABzQyLSqI5szwHm4tU+u2cvAWZOipgULpOkFrqRZ
M2utHIzF9n8ks7mQxqm4DQ79HaLBYnVthoiYA5D0JISvaiOJYomTqXzx8NB4rozX
PCacfb78BKSodp9bKPx5DcVQQZm+iiFD0rqqqJNIVH8MGZRqo6cTh3cCsTOAy0a7
Q14MRbHpoG2xObv85EWPjbgS+qxjKrNjGCtD08MCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5WXlRx5wBXt1kP4ZVfkIMTZLpPDAfBgNVHSMEGDAWgBQnMhB481nXmQJ2
2rsPjDAHDmhZYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0p6SVFlUE5aMTVrQ2R0cTdENHd3Qnc1b1dXTS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvZWIyN2YyLWUzNjktNGIwNy04ZDFkLWMzNDMxZDMyMDQwNi8x
LzEtVmw1VWNlY0FWN2RaRC1HVlg1Q0RFMlM2VHcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0
L2ViMjdmMi1lMzY5LTRiMDctOGQxZC1jMzQzMWQzMjA0MDYvMS9KeklRZVBOWjE1
a0NkdHE3RDR3d0J3NW9XV00uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5s9YwDQYJKoZIhvcNAQELBQAD
ggEBAC3YW7yBwtZ9P7/WV6GJTfBkXHPsXavkyzCaUZC4WlEi8MhsEzAPexdWlTcF
OVI0COt2GP6C2E6eZXqxjtjfGNqZ24x6/knWWUDEzmneyibXBPL1IL2vPtP19WtW
8Q6RAHQNcv0f55i2t5vna8k1c0+PUjTBjcRtovquy/XsHGNxpxQE6lTGyVR3ZFGM
A4x0JSuQfwsIgGVQphOyG5mGy+QJP5Tegd5Gizhei9UPK2Tt8dfTeR4fGYXS/2fR
doCsAoigHuFKRDkUEUa8d/Qa/uKpXmQ2qu4szC3w1CnhvdPuo+hXWKFYFm6aM9oC
xEO5dFAu8o+T0Omztzt+KXi2LYI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:17 2024 by rpki-client on console-ams.rpki-client.org