Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x5ruSlBVesjqfFrVYM2ncCZWUVY.roa
File:                     x5ruSlBVesjqfFrVYM2ncCZWUVY.roa (raw, json)
Hash identifier:          n1rx2Ygjwt7m+lMaEVcSgSnZZSb/tI9BYseIIfNyp8M=
Subject key identifier:   C7:9A:EE:4A:50:55:7A:C8:EA:7C:5A:D5:60:CD:A7:70:26:56:51:56
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0183F994A59703B7EF030B7A62AABFC24D37
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x5ruSlBVesjqfFrVYM2ncCZWUVY.roa
Signing time:             Fri 21 Oct 2022 08:06:51 +0000
ROA not before:           Fri 21 Oct 2022 08:06:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        82.153.132.0/24 maxlen: 24
                          82.152.178.0/24 maxlen: 24
                          82.152.179.0/24 maxlen: 24
                          82.153.243.0/24 maxlen: 24
                          82.153.245.0/24 maxlen: 24
                          82.153.69.0/24 maxlen: 24
                          82.153.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f9:94:a5:97:03:b7:ef:03:0b:7a:62:aa:bf:c2:4d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 21 08:06:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c79aee4a50557ac8ea7c5ad560cda77026565156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:f7:1d:38:58:74:86:ed:16:4b:4e:9e:36:
                    e8:8e:08:49:47:0a:f1:26:07:7e:fb:11:3f:57:38:
                    90:4a:af:de:0c:52:20:37:25:f0:a4:4f:c5:6a:6b:
                    7f:db:39:c1:fc:ab:30:15:4c:30:8f:6c:2e:6a:13:
                    9a:05:13:f3:b8:1e:67:9b:70:0d:05:11:e6:5c:10:
                    ea:63:0e:33:13:04:96:73:2e:d2:0d:b3:72:18:31:
                    89:ca:dc:22:e3:bf:df:03:31:33:21:32:3f:d7:8c:
                    53:77:6e:c0:1f:ed:b0:f8:6f:5d:19:53:f4:ae:76:
                    a4:d3:f0:c6:83:65:0d:1d:ec:24:e8:07:dd:7f:3a:
                    73:00:4a:cf:8e:35:8a:98:e0:68:08:16:68:da:49:
                    3e:82:df:c5:f7:7f:b1:54:da:bb:08:43:66:fe:6b:
                    85:cb:b7:60:d5:5a:16:c3:89:27:52:35:24:00:ac:
                    96:e0:90:70:56:2a:6c:a7:76:65:83:d1:ae:cf:66:
                    cd:59:1f:28:59:58:67:e3:c6:66:a5:5b:11:b1:d8:
                    ce:45:49:4d:b3:36:f5:3e:b0:fe:e8:fd:cc:d4:5d:
                    c4:1b:01:08:df:f9:d6:5e:01:f2:5c:bb:67:64:71:
                    e8:0f:5d:cb:22:55:e7:46:15:8f:6c:1e:1f:82:fb:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9A:EE:4A:50:55:7A:C8:EA:7C:5A:D5:60:CD:A7:70:26:56:51:56
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x5ruSlBVesjqfFrVYM2ncCZWUVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.178.0/23
                  82.153.10.0/24
                  82.153.69.0/24
                  82.153.132.0/24
                  82.153.243.0/24
                  82.153.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:b1:bc:68:27:3a:d8:e6:a0:20:a3:d0:a0:6b:51:5f:3f:
         9b:a2:f5:8c:2b:a2:1c:df:29:d3:d4:5f:02:9b:9d:15:d4:f1:
         cd:d8:68:9f:2b:5f:57:bf:54:5d:ff:4f:5f:20:12:45:85:12:
         f2:a5:30:b1:18:83:e1:65:e8:b0:f6:95:da:b2:84:84:40:67:
         99:17:0f:44:80:b6:82:b4:7a:2f:63:29:50:9a:c5:1c:54:cf:
         ab:9a:5a:91:a9:e3:cf:60:58:bb:01:72:0f:ee:b8:87:af:c5:
         74:98:32:7c:51:40:02:09:2f:23:57:26:3e:61:20:61:f6:da:
         da:1a:27:18:60:a0:64:8f:2f:d4:24:c3:41:a7:36:30:78:76:
         30:13:35:03:13:1d:19:a0:01:9b:c8:00:44:30:11:af:5a:f9:
         c2:43:bb:93:a1:42:b7:4b:45:10:2e:9c:20:4b:ef:89:0d:d1:
         a5:d2:96:d9:4b:9e:91:2f:c5:39:dc:5b:5c:f7:d7:34:75:97:
         21:ea:68:73:4e:2f:c1:c2:1a:99:fe:fc:6e:8c:3a:04:7e:f0:
         19:b0:95:8a:90:45:d0:77:c5:d4:d1:50:67:e7:14:14:9e:2b:
         89:28:b3:68:d1:42:8c:6f:6c:21:51:a7:dc:cf:44:6e:07:b1:
         fc:d7:f7:d5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYP5lKWXA7fvAwt6Yqq/wk03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjIxMDIxMDgwNjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzlhZWU0YTUwNTU3YWM4ZWE3YzVhZDU2MGNkYTc3MDI2NTY1MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVX3HThYdIbtFktOnjbojghJRwrx
Jgd++xE/VziQSq/eDFIgNyXwpE/Famt/2znB/KswFUwwj2wuahOaBRPzuB5nm3AN
BRHmXBDqYw4zEwSWcy7SDbNyGDGJytwi47/fAzEzITI/14xTd27AH+2w+G9dGVP0
rnak0/DGg2UNHewk6AfdfzpzAErPjjWKmOBoCBZo2kk+gt/F93+xVNq7CENm/muF
y7dg1VoWw4knUjUkAKyW4JBwVipsp3Zlg9Guz2bNWR8oWVhn48ZmpVsRsdjORUlN
szb1PrD+6P3M1F3EGwEI3/nWXgHyXLtnZHHoD13LIlXnRhWPbB4fgvvHtQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMea7kpQVXrI6nxa1WDNp3AmVlFWMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveDVydVNsQlZlc2pxZkZyVllNMm5jQ1pXVVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBUpiyAwQA
UpkKAwQAUplFAwQAUpmEAwQAUpnzAwQAUpn1MA0GCSqGSIb3DQEBCwUAA4IBAQBi
y7G8aCc62OagIKPQoGtRXz+bovWMK6Ic3ynT1F8Cm50V1PHN2GifK19Xv1Rd/09f
IBJFhRLypTCxGIPhZeiw9pXasoSEQGeZFw9EgLaCtHovYylQmsUcVM+rmlqRqePP
YFi7AXIP7riHr8V0mDJ8UUACCS8jVyY+YSBh9traGicYYKBkjy/UJMNBpzYweHYw
EzUDEx0ZoAGbyABEMBGvWvnCQ7uToUK3S0UQLpwgS++JDdGl0pbZS56RL8U53Ftc
99c0dZch6mhzTi/BwhqZ/vxujDoEfvAZsJWKkEXQd8XU0VBn5xQUniuJKLNo0UKM
b2whUafcz0RuB7H81/fV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org