Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/BS80yuSLdzZO_IMsq7Pw_u85IuY.roa
File:                     BS80yuSLdzZO_IMsq7Pw_u85IuY.roa (raw, json)
Hash identifier:          utyBco2HdeR+VM03jVVjYT/cn9ilQzZh77BN5bgKF2Q=
Subject key identifier:   05:2F:34:CA:E4:8B:77:36:4E:FC:83:2C:AB:B3:F0:FE:EF:39:22:E6
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       0182C9476AC0E1E08D71769C1679F5127F7C
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/BS80yuSLdzZO_IMsq7Pw_u85IuY.roa
Signing time:             Tue 23 Aug 2022 05:57:56 +0000
ROA not before:           Tue 23 Aug 2022 05:57:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        185.14.239.0/24 maxlen: 24
                          185.14.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:47:6a:c0:e1:e0:8d:71:76:9c:16:79:f5:12:7f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Aug 23 05:57:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=052f34cae48b77364efc832cabb3f0feef3922e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:7d:10:09:7e:39:be:f3:05:a5:08:79:c1:
                    03:05:24:95:fb:41:86:5c:90:27:c4:fa:f2:57:96:
                    fc:d5:55:9d:7e:7b:66:45:0a:6d:b5:f1:6c:ad:92:
                    c7:90:1e:bd:9f:e7:77:72:54:4b:db:4c:a7:34:62:
                    aa:9f:2a:e2:f1:7b:28:fc:5b:87:2b:79:ca:2b:d6:
                    25:18:e1:bd:5b:ee:5b:e1:27:31:2e:3a:68:f8:2f:
                    52:42:8c:8c:eb:bb:04:32:4e:b6:f0:4b:49:6d:a0:
                    c4:75:2d:41:71:38:30:e1:fa:a1:a8:b6:2f:48:0f:
                    99:3b:6b:53:4f:54:b6:c8:0a:21:07:9b:28:9a:50:
                    0b:0f:b1:61:09:97:37:59:3d:d5:22:90:cd:cf:4d:
                    d7:74:68:ca:1b:85:71:53:53:99:9a:8f:ef:ba:a5:
                    5d:d3:f5:0e:d0:fd:8c:b6:cc:e6:84:bc:8b:e9:71:
                    11:cc:41:ba:ee:2f:de:01:c6:14:fd:77:96:32:a9:
                    5d:53:c5:cb:96:c4:d1:9f:31:25:e8:09:cf:d3:01:
                    ed:51:d9:29:02:c4:d4:ed:9c:d1:54:32:6e:5d:a1:
                    be:4d:22:2a:50:a8:e9:f3:81:d6:18:75:87:0b:76:
                    b2:ad:38:ae:a0:ae:97:bc:ad:bb:5b:88:e4:2d:10:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:34:CA:E4:8B:77:36:4E:FC:83:2C:AB:B3:F0:FE:EF:39:22:E6
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/BS80yuSLdzZO_IMsq7Pw_u85IuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.14.237.0/24
                  185.14.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:07:df:e5:95:ab:e2:f2:e2:00:fd:78:f6:3b:e2:ad:d0:
         fe:c5:56:76:73:cc:fb:20:c6:bd:db:fd:8b:00:7f:40:d2:bf:
         22:89:53:b4:ea:f4:68:3e:48:78:05:c6:55:f7:63:b0:80:d2:
         76:c2:1b:59:67:ea:e2:07:74:de:67:66:04:49:5a:07:f7:34:
         2e:12:cf:5f:0e:22:54:3d:44:7f:1d:4a:8a:0a:fd:f0:22:8e:
         4a:d8:77:5f:c3:7a:76:02:ec:f6:73:1b:fc:88:ae:14:da:28:
         62:b0:a9:40:c3:20:e9:88:1e:d4:58:02:79:ad:20:8b:db:b7:
         f0:b4:51:20:a2:f9:2a:f2:74:ae:1a:a5:95:47:33:24:af:8f:
         92:5e:fb:38:eb:c7:70:ed:50:2c:62:1a:44:7f:88:99:ee:c7:
         9d:7d:ed:ba:4b:29:d0:bc:ac:89:1d:76:78:04:03:43:71:76:
         ec:c0:7d:4d:cb:45:38:88:f4:f2:11:2e:8f:5e:03:50:e2:f5:
         ca:1a:5a:25:5d:a5:2d:4b:22:60:81:61:ae:fa:05:86:57:f8:
         ec:66:01:dc:7c:af:d3:07:17:2b:ce:1f:f2:51:a2:af:4d:18:
         62:f4:75:bc:c1:21:de:46:11:34:90:a4:1f:70:16:d3:a4:b6:
         52:63:ab:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLJR2rA4eCNcXacFnn1En98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy
OWE1MmMwHhcNMjIwODIzMDU1NzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTJmMzRjYWU0OGI3NzM2NGVmYzgzMmNhYmIzZjBmZWVmMzkyMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuip9EAl+Ob7zBaUIecEDBSSV+0GG
XJAnxPryV5b81VWdfntmRQpttfFsrZLHkB69n+d3clRL20ynNGKqnyri8Xso/FuH
K3nKK9YlGOG9W+5b4ScxLjpo+C9SQoyM67sEMk628EtJbaDEdS1BcTgw4fqhqLYv
SA+ZO2tTT1S2yAohB5somlALD7FhCZc3WT3VIpDNz03XdGjKG4VxU1OZmo/vuqVd
0/UO0P2MtszmhLyL6XERzEG67i/eAcYU/XeWMqldU8XLlsTRnzEl6AnP0wHtUdkp
AsTU7ZzRVDJuXaG+TSIqUKjp84HWGHWHC3ayrTiuoK6XvK27W4jkLRBgTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAUvNMrki3c2TvyDLKuz8P7vOSLmMB8GA1UdIwQY
MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt
MmZjYzBiNzQ5YjMyLzEvQlM4MHl1U0xkelpPX0lNc3E3UHdfdTg1SXVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy
LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQ7tAwQA
uQ7vMA0GCSqGSIb3DQEBCwUAA4IBAQByTwff5ZWr4vLiAP149jvirdD+xVZ2c8z7
IMa92/2LAH9A0r8iiVO06vRoPkh4BcZV92OwgNJ2whtZZ+riB3TeZ2YESVoH9zQu
Es9fDiJUPUR/HUqKCv3wIo5K2Hdfw3p2Auz2cxv8iK4U2ihisKlAwyDpiB7UWAJ5
rSCL27fwtFEgovkq8nSuGqWVRzMkr4+SXvs468dw7VAsYhpEf4iZ7sedfe26SynQ
vKyJHXZ4BANDcXbswH1Ny0U4iPTyES6PXgNQ4vXKGlolXaUtSyJggWGu+gWGV/js
ZgHcfK/TBxcrzh/yUaKvTRhi9HW8wSHeRhE0kKQfcBbTpLZSY6sz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:04 2023 by rpki-client on console-fra.rpki-client.org