Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/1-G2jC_xM_XY5UlbvCE02CZbsz6A.roa
File:                     1-G2jC_xM_XY5UlbvCE02CZbsz6A.roa (raw, json)
Hash identifier:          0qRhQGawJBublZD85Ls36opvk3ty/nwjbcn7FvbSego=
Subject key identifier:   F8:6D:A3:0B:FC:4C:FD:76:39:52:56:EF:08:4D:36:09:96:EC:CF:A0
Certificate issuer:       /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial:       057EE314
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/1-G2jC_xM_XY5UlbvCE02CZbsz6A.roa
Signing time:             Sat 01 Jan 2022 04:58:34 +0000
ROA not before:           Sat 01 Jan 2022 04:58:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49764
IP address blocks:        185.218.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92201748 (0x57ee314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
        Validity
            Not Before: Jan  1 04:58:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f86da30bfc4cfd76395256ef084d360996eccfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:2e:c1:d4:30:62:65:da:06:0c:0e:52:08:
                    47:11:b9:8c:aa:22:36:7a:96:25:2c:1b:41:2e:f7:
                    f1:23:47:2f:6d:e3:d1:a9:29:76:c6:6a:eb:bb:bf:
                    d2:31:b0:ce:86:e8:2e:68:b4:8f:36:a9:97:15:e7:
                    61:6f:c6:a3:5e:c5:fb:9e:6f:bf:42:58:7e:ef:6e:
                    24:1f:63:8d:35:e2:28:9c:48:7d:65:c7:6b:8e:b8:
                    ba:33:83:73:c9:fb:27:44:40:92:4a:20:f0:8d:92:
                    58:0f:4a:aa:40:22:b4:64:25:80:04:4a:9f:6e:df:
                    45:33:82:ef:93:69:08:d5:16:a2:ad:65:c2:53:af:
                    42:62:02:da:53:03:09:7a:84:a3:e5:9e:c9:62:ae:
                    da:77:bb:25:a9:2b:e0:ee:93:ab:dd:a4:df:35:51:
                    4e:c1:bb:0c:7b:1d:6e:29:96:62:20:16:12:6f:5d:
                    54:a4:c3:eb:80:6c:76:ce:f8:02:f7:ac:36:f8:19:
                    56:63:90:6e:ce:27:71:09:b4:ba:fc:76:58:8d:b8:
                    de:ab:76:4d:a6:38:9e:58:82:46:6c:2d:0d:58:f5:
                    2b:cc:43:28:73:06:e9:95:09:87:47:c3:f0:7b:bb:
                    58:ac:c5:65:d7:74:85:40:5f:6a:f7:fa:61:3f:c1:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6D:A3:0B:FC:4C:FD:76:39:52:56:EF:08:4D:36:09:96:EC:CF:A0
            X509v3 Authority Key Identifier:
                keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/1-G2jC_xM_XY5UlbvCE02CZbsz6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:00:4e:2a:c4:fd:91:98:5e:09:86:11:c2:cc:4c:ba:7f:ab:
         da:5d:e4:cd:15:ba:49:7e:b5:63:0f:27:f4:bf:4b:1e:aa:36:
         04:af:8c:be:8f:11:8d:2a:69:a2:d9:01:63:9b:ee:94:69:1d:
         9c:4b:55:93:31:74:5b:b9:6a:08:e8:8f:37:f8:7b:a9:f5:76:
         45:4b:1f:ef:d4:26:fb:b6:b1:87:da:60:b9:c5:d1:d4:e2:0b:
         88:68:e9:8c:aa:26:4b:3a:58:5f:91:e5:81:84:c3:ec:8f:7a:
         46:8f:cf:4e:98:d5:7f:a5:76:bf:20:f7:88:3d:e7:a1:9e:c9:
         25:17:ae:db:30:df:b8:3d:ee:c6:b9:18:99:31:8b:c9:07:25:
         49:35:c6:7e:ed:1a:2f:8f:70:4c:02:d9:90:d8:56:7b:fd:64:
         e4:fd:bd:ed:d9:55:27:8e:cd:86:ac:d9:1d:89:51:52:36:89:
         08:cf:e4:e8:e6:1c:99:ac:90:aa:91:ae:58:8f:ba:ba:d8:26:
         c3:b5:09:82:6a:57:d4:fc:4d:18:e4:95:9f:bf:be:92:bf:1d:
         8b:70:df:de:c1:e9:a8:6d:14:6d:31:15:c3:c5:77:2c:74:4c:
         a2:39:ac:03:3b:94:33:a8:57:0f:0e:cc:a4:c4:36:64:65:52:
         1b:72:c3:e1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBX7jFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZGFkNjFkOGU4YzFhYmRhODU5NjkzMGUyMWYxODIxMWE1MTc2ODFmMB4XDTIyMDEw
MTA0NTgzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg2ZGEzMGJmYzRj
ZmQ3NjM5NTI1NmVmMDg0ZDM2MDk5NmVjY2ZhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLHLsHUMGJl2gYMDlIIRxG5jKoiNnqWJSwbQS738SNHL23j
0akpdsZq67u/0jGwzoboLmi0jzaplxXnYW/Go17F+55vv0JYfu9uJB9jjTXiKJxI
fWXHa464ujODc8n7J0RAkkog8I2SWA9KqkAitGQlgARKn27fRTOC75NpCNUWoq1l
wlOvQmIC2lMDCXqEo+WeyWKu2ne7Jakr4O6Tq92k3zVRTsG7DHsdbimWYiAWEm9d
VKTD64Bsds74AvesNvgZVmOQbs4ncQm0uvx2WI243qt2TaY4nliCRmwtDVj1K8xD
KHMG6ZUJh0fD8Hu7WKzFZdd0hUBfavf6YT/BtosCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT4baML/Ez9djlSVu8ITTYJluzPoDAfBgNVHSMEGDAWgBT9rWHY6MGr2oWW
kw4h8YIRpRdoHzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19hMWgyT2pCcTlxRmxwTU9JZkdDRWFVWGFCOC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvYTQ2Yzg2LTRiMDgtNDgyYi05MmNhLTg0ZWUyMmEzZWU1Yi8x
LzEtRzJqQ194TV9YWTVVbGJ2Q0UwMkNaYnN6NkEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3
L2E0NmM4Ni00YjA4LTQ4MmItOTJjYS04NGVlMjJhM2VlNWIvMS9fYTFoMk9qQnE5
cUZscE1PSWZHQ0VhVVhhQjguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC52kcwDQYJKoZIhvcNAQELBQAD
ggEBAHwATirE/ZGYXgmGEcLMTLp/q9pd5M0Vukl+tWMPJ/S/Sx6qNgSvjL6PEY0q
aaLZAWOb7pRpHZxLVZMxdFu5agjojzf4e6n1dkVLH+/UJvu2sYfaYLnF0dTiC4ho
6YyqJks6WF+R5YGEw+yPekaPz06Y1X+ldr8g94g956GeySUXrtsw37g97sa5GJkx
i8kHJUk1xn7tGi+PcEwC2ZDYVnv9ZOT9ve3ZVSeOzYas2R2JUVI2iQjP5OjmHJms
kKqRrliPurrYJsO1CYJqV9T8TRjklZ+/vpK/HYtw397B6ahtFG0xFcPFdyx0TKI5
rAM7lDOoVw8OzKTENmRlUhtyw+E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:03 2024 by rpki-client on console-ams.rpki-client.org