Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/zjI6YHml4__V8okwlAr1gZHGHhg.roa
File:                     zjI6YHml4__V8okwlAr1gZHGHhg.roa (raw, json)
Hash identifier:          iFNWAij2mxmT78kdB1DE2WLDWx+IwaxJZDSa9H8G44o=
Subject key identifier:   CE:32:3A:60:79:A5:E3:FF:D5:F2:89:30:94:0A:F5:81:91:C6:1E:18
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       17B2C820
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/zjI6YHml4__V8okwlAr1gZHGHhg.roa
Signing time:             Tue 22 Mar 2022 08:56:11 +0000
ROA not before:           Tue 22 Mar 2022 08:56:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24774
IP address blocks:        37.230.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397592608 (0x17b2c820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Mar 22 08:56:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce323a6079a5e3ffd5f28930940af58191c61e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:72:4e:e3:0d:c9:37:d5:a6:56:b0:57:00:
                    6a:3c:b5:78:fd:d0:a6:c1:cc:6e:b8:60:be:33:66:
                    ee:8b:6e:f1:fb:7a:64:4e:a5:e5:92:0a:ba:be:46:
                    46:20:e3:41:4b:6f:85:b3:ce:3e:3d:74:e3:d1:7d:
                    72:00:35:d3:da:c1:69:84:21:e6:31:56:f6:cc:c2:
                    28:02:14:9a:6b:a8:fe:5c:29:d7:07:cc:ba:78:7b:
                    1b:a8:7f:8e:d1:1c:ef:e0:85:ff:a1:97:4f:26:dd:
                    ad:b9:44:7e:a4:9a:3b:38:ce:c8:80:1d:44:3d:4f:
                    10:b9:61:36:32:f0:a8:be:5c:96:66:5e:0e:cc:7c:
                    b6:43:d6:d9:f7:d9:5d:e6:8f:11:57:a5:13:a4:8b:
                    43:b5:4b:23:f8:16:db:e8:ce:99:46:3c:ac:37:71:
                    4a:26:6b:7e:60:15:43:59:b2:1e:c0:5b:20:ed:c7:
                    98:36:4f:ee:e6:28:bb:f7:08:e7:08:2d:3e:7a:3d:
                    2a:db:db:6a:76:1e:0e:15:0f:1e:82:f4:08:09:4d:
                    7c:6d:90:c4:98:27:8b:91:7d:01:25:25:97:e1:37:
                    f3:84:64:96:cf:93:03:a8:5b:a6:03:ad:b7:80:d6:
                    6a:f5:0c:1a:eb:e8:96:1b:ab:13:ce:a1:45:a8:7b:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:32:3A:60:79:A5:E3:FF:D5:F2:89:30:94:0A:F5:81:91:C6:1E:18
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/zjI6YHml4__V8okwlAr1gZHGHhg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:48:4d:48:44:56:cb:4d:fb:4f:3a:21:3f:ed:15:f9:13:
         de:59:c3:bf:6a:41:7a:e9:28:c9:cc:1f:df:36:d9:33:fb:53:
         ca:70:c5:7a:d7:01:93:e7:bf:54:74:cf:d5:ed:fa:c6:91:24:
         12:fe:e5:11:4c:6f:cf:6f:de:3e:42:aa:87:f4:8b:76:61:60:
         3a:b4:de:88:e6:ac:fe:40:2a:f7:aa:db:36:80:5f:89:18:4a:
         8e:f1:83:2b:ec:79:b7:e8:4d:63:b6:1b:f8:2f:29:0d:08:27:
         f2:18:dd:68:85:49:33:61:73:58:2a:b2:e0:b3:a0:db:ca:1c:
         c4:fd:b8:52:92:14:ec:e3:b4:87:1b:89:4d:38:e7:f1:51:65:
         62:c5:f6:5d:d0:d8:41:66:5b:50:43:9f:cd:6c:39:86:1e:04:
         22:88:76:13:a8:fe:9e:cf:b7:11:02:f3:b5:b1:2f:85:d8:ab:
         b7:b9:0d:9f:29:d8:41:f5:d5:87:f6:1a:34:8d:ca:9c:76:54:
         e5:27:9c:24:54:93:e7:a2:bd:a4:12:65:e2:5f:eb:bd:35:a7:
         ae:5a:34:12:04:4d:cb:2c:c9:d1:a5:c4:6e:7a:9f:6e:44:04:
         15:37:1f:54:11:cd:94:0c:0f:a8:42:b6:e4:3e:7b:b0:8f:60:
         1f:67:57:cf
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF7LIIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDMy
MjA4NTYxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2UzMjNhNjA3OWE1
ZTNmZmQ1ZjI4OTMwOTQwYWY1ODE5MWM2MWUxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJQmck7jDck31aZWsFcAajy1eP3QpsHMbrhgvjNm7otu8ft6
ZE6l5ZIKur5GRiDjQUtvhbPOPj1049F9cgA109rBaYQh5jFW9szCKAIUmmuo/lwp
1wfMunh7G6h/jtEc7+CF/6GXTybdrblEfqSaOzjOyIAdRD1PELlhNjLwqL5clmZe
Dsx8tkPW2ffZXeaPEVelE6SLQ7VLI/gW2+jOmUY8rDdxSiZrfmAVQ1myHsBbIO3H
mDZP7uYou/cI5wgtPno9KtvbanYeDhUPHoL0CAlNfG2QxJgni5F9ASUll+E384Rk
ls+TA6hbpgOtt4DWavUMGuvolhurE86hRah7+EUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOMjpgeaXj/9XyiTCUCvWBkcYeGDAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L3pqSTZZSG1sNF9fVjhva3dsQXIxZ1pIR0hoZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmoTANBgkqhkiG9w0BAQsFAAOC
AQEAm+VITUhEVstN+086IT/tFfkT3lnDv2pBeukoycwf3zbZM/tTynDFetcBk+e/
VHTP1e36xpEkEv7lEUxvz2/ePkKqh/SLdmFgOrTeiOas/kAq96rbNoBfiRhKjvGD
K+x5t+hNY7Yb+C8pDQgn8hjdaIVJM2FzWCqy4LOg28ocxP24UpIU7OO0hxuJTTjn
8VFlYsX2XdDYQWZbUEOfzWw5hh4EIoh2E6j+ns+3EQLztbEvhdirt7kNnynYQfXV
h/YaNI3KnHZU5SecJFST56K9pBJl4l/rvTWnrlo0EgRNyyzJ0aXEbnqfbkQEFTcf
VBHNlAwPqEK25D57sI9gH2dXzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org