Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/79ZHRsxWuC9u8oY4tLhRaEL_iU8.roa
File:                     79ZHRsxWuC9u8oY4tLhRaEL_iU8.roa (raw, json)
Hash identifier:          OleE1U9v7GUfqNfM9q2l+/ApJjQ4WnyT6vE4IE8YqjE=
Subject key identifier:   EF:D6:47:46:CC:56:B8:2F:6E:F2:86:38:B4:B8:51:68:42:FF:89:4F
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       01837AE7B560E005E4C602CE1204B279122D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/79ZHRsxWuC9u8oY4tLhRaEL_iU8.roa
Signing time:             Mon 26 Sep 2022 17:45:49 +0000
ROA not before:           Mon 26 Sep 2022 17:45:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     395517
IP address blocks:        178.253.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7a:e7:b5:60:e0:05:e4:c6:02:ce:12:04:b2:79:12:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Sep 26 17:45:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efd64746cc56b82f6ef28638b4b8516842ff894f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:54:bf:7b:b1:8f:57:ae:21:1a:f5:16:27:
                    95:d1:80:fe:14:42:91:86:37:21:ec:7a:e3:4c:73:
                    3a:0c:d6:f2:7c:5c:ee:f6:a7:c1:00:8b:0b:34:bb:
                    62:7f:7d:56:47:0f:d1:cd:bf:e0:8b:ae:3f:95:2b:
                    d9:ba:98:b5:a6:fa:06:67:36:2c:49:f9:ec:c1:87:
                    63:b5:2e:9b:f5:4c:93:a1:1f:a5:19:85:20:e7:1b:
                    a0:36:9d:05:d2:1f:3e:65:47:a1:2b:fd:fd:47:f5:
                    e1:82:40:17:71:92:11:54:19:65:5f:21:31:3e:86:
                    a4:33:9e:3a:ee:af:41:cc:b4:3f:b1:98:d9:0c:8f:
                    0b:e1:e3:81:24:d5:29:dd:70:e5:15:e9:10:40:86:
                    ac:16:e8:08:01:35:b8:6f:f8:51:08:f5:bd:dd:e9:
                    a6:7c:a6:87:22:3f:91:6b:cc:87:ba:ac:58:75:a9:
                    cd:3d:29:e9:25:56:7f:db:b5:4d:ee:3a:cb:13:2c:
                    29:6a:cc:7c:a8:27:a9:16:32:7d:d3:69:c3:9b:c8:
                    c9:55:d5:e9:1e:eb:f8:5b:97:41:b6:3a:00:7c:4a:
                    06:85:6b:a2:cc:95:13:5d:92:3d:6d:6a:65:70:54:
                    f9:84:21:b4:6a:cb:79:58:3f:07:2e:c0:0e:fe:2d:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:47:46:CC:56:B8:2F:6E:F2:86:38:B4:B8:51:68:42:FF:89:4F
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/79ZHRsxWuC9u8oY4tLhRaEL_iU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:ca:8f:c6:e5:f0:9a:c6:5e:d0:87:26:71:89:2b:5e:48:
         e8:43:9f:d4:50:a4:71:4a:c1:d7:fd:72:59:f9:94:54:53:fe:
         ff:22:ba:33:0d:39:3a:b0:fb:c6:b4:ab:91:e1:06:2d:f8:84:
         d3:48:10:0e:64:00:0c:e1:a4:ed:8b:be:9a:8a:94:13:64:58:
         46:a6:33:5c:fd:b8:68:bd:12:e3:3b:3d:8b:2e:9d:63:20:15:
         e5:0e:63:bd:09:c0:9e:90:1d:2a:d8:e4:8f:79:e0:95:dc:fd:
         87:ff:fe:8c:2e:e9:55:7a:90:69:24:73:4e:fe:b2:27:5f:db:
         47:92:c3:f0:4b:bc:f0:f3:11:49:7b:d2:e1:6d:e7:81:1c:2f:
         61:79:04:4f:7d:33:c3:71:bd:e2:23:5a:22:4e:97:04:a4:f7:
         b4:c1:8b:04:31:f2:2e:65:53:48:67:a7:a2:9c:3e:73:a5:bb:
         31:d4:01:f9:c5:33:f9:c3:fc:69:b0:50:73:79:b7:f0:e1:ae:
         66:dc:a5:84:08:98:a0:35:03:7c:70:88:5d:3b:ca:a0:24:a5:
         7e:cc:c6:c2:30:da:ca:11:81:b0:90:73:4b:e9:61:09:2b:c8:
         66:c2:31:7b:98:3d:79:9c:d0:7a:26:ab:ca:dd:d8:7f:e9:af:
         ee:67:07:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN657Vg4AXkxgLOEgSyeRItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIwOTI2MTc0NTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmQ2NDc0NmNjNTZiODJmNmVmMjg2MzhiNGI4NTE2ODQyZmY4OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1clUv3uxj1euIRr1FieV0YD+FEKR
hjch7HrjTHM6DNbyfFzu9qfBAIsLNLtif31WRw/Rzb/gi64/lSvZupi1pvoGZzYs
SfnswYdjtS6b9UyToR+lGYUg5xugNp0F0h8+ZUehK/39R/XhgkAXcZIRVBllXyEx
PoakM5467q9BzLQ/sZjZDI8L4eOBJNUp3XDlFekQQIasFugIATW4b/hRCPW93emm
fKaHIj+Ra8yHuqxYdanNPSnpJVZ/27VN7jrLEywpasx8qCepFjJ902nDm8jJVdXp
Huv4W5dBtjoAfEoGhWuizJUTXZI9bWplcFT5hCG0ast5WD8HLsAO/i3sAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/WR0bMVrgvbvKGOLS4UWhC/4lPMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvNzlaSFJzeFd1Qzl1OG9ZNHRMaFJhRUxfaVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv0QMA0G
CSqGSIb3DQEBCwUAA4IBAQA6LMqPxuXwmsZe0IcmcYkrXkjoQ5/UUKRxSsHX/XJZ
+ZRUU/7/IrozDTk6sPvGtKuR4QYt+ITTSBAOZAAM4aTti76aipQTZFhGpjNc/bho
vRLjOz2LLp1jIBXlDmO9CcCekB0q2OSPeeCV3P2H//6MLulVepBpJHNO/rInX9tH
ksPwS7zw8xFJe9LhbeeBHC9heQRPfTPDcb3iI1oiTpcEpPe0wYsEMfIuZVNIZ6ei
nD5zpbsx1AH5xTP5w/xpsFBzebfw4a5m3KWECJigNQN8cIhdO8qgJKV+zMbCMNrK
EYGwkHNL6WEJK8hmwjF7mD15nNB6JqvK3dh/6a/uZwdT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org