Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yLzMFKPslbO3UX6LwGMOL6eqd5U.roa
File:                     yLzMFKPslbO3UX6LwGMOL6eqd5U.roa (raw, json)
Hash identifier:          rJKvKKxlekHH1lFNSxfTnR7zrsDKBpBB0DTrHKc116s=
Subject key identifier:   C8:BC:CC:14:A3:EC:95:B3:B7:51:7E:8B:C0:63:0E:2F:A7:AA:77:95
Certificate issuer:       /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial:       177D5A90
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yLzMFKPslbO3UX6LwGMOL6eqd5U.roa
Signing time:             Sat 05 Mar 2022 21:46:47 +0000
ROA not before:           Sat 05 Mar 2022 21:46:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34849
IP address blocks:        80.250.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394091152 (0x177d5a90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
        Validity
            Not Before: Mar  5 21:46:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c8bccc14a3ec95b3b7517e8bc0630e2fa7aa7795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:c4:58:7b:d0:3a:81:cd:aa:d9:4e:f1:29:
                    50:d5:e6:8c:3f:a6:be:a2:6c:08:39:c2:6c:56:09:
                    12:a4:f9:9a:82:3e:36:41:9d:df:0c:a1:d1:f4:2e:
                    77:77:76:6e:df:7c:8d:b1:c9:38:ee:8b:51:71:91:
                    a1:b0:e2:f1:33:09:4f:59:b6:d3:b6:95:35:b5:34:
                    6e:90:a4:c4:c2:13:20:db:3f:f1:ee:92:b0:57:13:
                    9e:3d:41:5d:06:6f:ce:b8:99:6a:d9:58:42:0e:20:
                    cb:ed:fb:1c:70:32:d3:ba:d8:67:b2:00:80:59:16:
                    9f:af:3a:bf:d2:55:03:b3:df:15:2f:7a:fe:93:97:
                    1d:98:0d:af:94:fc:a1:0b:ce:e8:77:81:99:31:cf:
                    e6:ac:20:49:4a:28:10:e4:3b:dd:4a:4d:5c:1b:d7:
                    83:2c:df:4d:e6:65:41:1b:97:3b:f4:1f:db:2f:9b:
                    59:ff:f9:9d:c0:4e:27:aa:95:18:3d:c5:14:59:44:
                    e3:9c:7b:f9:d6:b1:b0:4b:0c:c4:7b:87:00:2c:69:
                    50:13:10:71:c4:05:12:5c:d2:a0:f8:eb:e9:66:e1:
                    13:5d:23:35:dd:f9:14:fd:74:c8:39:02:8e:e0:1f:
                    77:de:01:30:ab:6a:57:b5:41:bf:92:a3:8c:f0:b9:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BC:CC:14:A3:EC:95:B3:B7:51:7E:8B:C0:63:0E:2F:A7:AA:77:95
            X509v3 Authority Key Identifier:
                keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yLzMFKPslbO3UX6LwGMOL6eqd5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.250.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:94:64:71:a1:bc:db:14:b2:df:b5:db:28:0f:7b:60:a5:b2:
         d6:bf:33:45:c5:4c:73:18:12:13:23:fe:ba:ce:0c:d3:a3:23:
         20:a0:2e:a2:63:db:4b:cc:7e:ee:e8:07:c1:48:73:ed:66:85:
         08:66:ab:b6:66:ca:df:dd:5a:c6:d6:cb:2c:fb:0d:b6:c5:62:
         e4:7d:c5:84:c0:38:2f:69:05:8e:cf:58:1f:84:c1:4c:5c:ce:
         ca:70:21:94:b4:48:bc:7d:3c:60:17:6f:58:ba:1d:f6:33:54:
         f3:73:cd:e2:74:67:6b:44:8b:59:1d:6d:44:54:90:14:e1:84:
         52:19:63:90:61:b1:2b:5e:90:1e:7c:32:51:43:5c:9e:d9:98:
         18:81:ad:4d:74:b8:8b:5c:06:d4:66:bf:0c:be:0a:17:c0:9d:
         5a:15:cb:0b:46:49:b4:ba:6c:53:a0:9d:ed:9d:7f:9e:0a:21:
         a5:27:94:8c:63:c4:c0:c8:05:28:8d:c4:2e:41:c1:ec:68:5e:
         c6:8b:81:34:7f:d2:15:1f:0e:17:08:36:9c:b3:8b:26:19:c0:
         28:35:34:1f:0c:90:15:ac:eb:ca:27:45:33:1b:32:f4:f0:07:
         a1:79:13:0a:45:6d:50:48:34:6f:e4:31:56:75:0e:f7:00:00:
         ab:2f:ad:04
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF31akDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OGIyMjAyM2I2ZWFkNGMyOTY4M2E5ZmVkNDQ5M2QwM2RlZTJjNjg1MB4XDTIyMDMw
NTIxNDY0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzhiY2NjMTRhM2Vj
OTViM2I3NTE3ZThiYzA2MzBlMmZhN2FhNzc5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKuxFh70DqBzarZTvEpUNXmjD+mvqJsCDnCbFYJEqT5moI+
NkGd3wyh0fQud3d2bt98jbHJOO6LUXGRobDi8TMJT1m207aVNbU0bpCkxMITINs/
8e6SsFcTnj1BXQZvzriZatlYQg4gy+37HHAy07rYZ7IAgFkWn686v9JVA7PfFS96
/pOXHZgNr5T8oQvO6HeBmTHP5qwgSUooEOQ73UpNXBvXgyzfTeZlQRuXO/Qf2y+b
Wf/5ncBOJ6qVGD3FFFlE45x7+daxsEsMxHuHACxpUBMQccQFElzSoPjr6WbhE10j
Nd35FP10yDkCjuAfd94BMKtqV7VBv5KjjPC5g50CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTIvMwUo+yVs7dRfovAYw4vp6p3lTAfBgNVHSMEGDAWgBQ4siAjturUwpaD
qf7UST0D3uLGhTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09MSWdJN2JxMU1LV2c2bi0xRWs5QTk3aXhvVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8x
L3lMek1GS1BzbGJPM1VYNkx3R01PTDZlcWQ1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
ODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8xL09MSWdJN2JxMU1L
V2c2bi0xRWs5QTk3aXhvVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFD6rjANBgkqhkiG9w0BAQsFAAOC
AQEANZRkcaG82xSy37XbKA97YKWy1r8zRcVMcxgSEyP+us4M06MjIKAuomPbS8x+
7ugHwUhz7WaFCGartmbK391axtbLLPsNtsVi5H3FhMA4L2kFjs9YH4TBTFzOynAh
lLRIvH08YBdvWLod9jNU83PN4nRna0SLWR1tRFSQFOGEUhljkGGxK16QHnwyUUNc
ntmYGIGtTXS4i1wG1Ga/DL4KF8CdWhXLC0ZJtLpsU6Cd7Z1/ngohpSeUjGPEwMgF
KI3ELkHB7GhexouBNH/SFR8OFwg2nLOLJhnAKDU0HwyQFazryidFMxsy9PAHoXkT
CkVtUEg0b+QxVnUO9wAAqy+tBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org