Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CkS0ltxTOspBZA2PrLEk4ZSSryU.roa
File:                     CkS0ltxTOspBZA2PrLEk4ZSSryU.roa (raw, json)
Hash identifier:          +be7ixlKrCYPiC0SIVEc81dKvAqVERY8wdcE4bhDjqQ=
Subject key identifier:   0A:44:B4:96:DC:53:3A:CA:41:64:0D:8F:AC:B1:24:E1:94:92:AF:25
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       08B6C7DF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CkS0ltxTOspBZA2PrLEk4ZSSryU.roa
Signing time:             Mon 14 Mar 2022 19:00:27 +0000
ROA not before:           Mon 14 Mar 2022 19:00:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398464
IP address blocks:        178.253.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146196447 (0x8b6c7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Mar 14 19:00:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a44b496dc533aca41640d8facb124e19492af25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:47:9b:7f:3b:77:5b:b0:20:da:22:1c:46:
                    dd:11:3c:b2:a3:4e:39:a4:e7:fb:31:e1:65:9d:e2:
                    a7:01:86:21:8a:59:7f:00:b2:9f:30:18:48:b0:13:
                    48:20:06:e4:84:0c:03:7c:1f:78:28:66:2c:17:3b:
                    2d:1b:47:e9:79:6f:76:9a:7f:3a:6b:82:61:fe:9d:
                    2c:42:98:72:98:64:04:ab:8f:ef:40:67:16:1a:ff:
                    90:94:7d:5b:42:9e:41:f6:8b:8b:46:2d:a0:7f:06:
                    cd:5c:be:f9:55:f6:84:a5:0d:59:87:ef:9e:c6:eb:
                    af:c3:7e:16:96:31:ea:78:66:b0:13:fa:27:39:d9:
                    18:4d:e5:87:bb:23:42:c0:39:f5:40:7a:a6:2f:bd:
                    c2:cd:b9:99:2b:9b:83:67:ed:cb:9e:22:65:18:d9:
                    d4:40:82:ca:98:54:48:10:a9:f8:44:42:1e:d0:33:
                    b8:e9:7e:28:f0:cf:18:98:19:f8:06:77:19:20:4d:
                    bc:02:59:6c:df:7b:2c:1a:92:fd:54:78:d7:b6:eb:
                    b0:38:b6:2b:ba:d2:ed:9f:ea:a2:f6:d4:b6:16:06:
                    7e:c1:1d:c0:36:d6:8f:1f:56:76:d8:d3:91:5f:c4:
                    0f:7b:e9:0b:7c:ef:a1:1a:bd:56:37:e4:b8:11:8e:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:44:B4:96:DC:53:3A:CA:41:64:0D:8F:AC:B1:24:E1:94:92:AF:25
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CkS0ltxTOspBZA2PrLEk4ZSSryU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d6:e5:db:44:50:4a:d8:3f:d0:e8:0a:d2:e1:cb:c3:9d:65:
         fc:e0:ea:d7:c7:35:3e:ae:75:e5:d4:18:66:36:7e:f8:c6:5b:
         31:69:56:30:01:80:91:6d:96:85:bc:62:22:de:7b:29:b3:f8:
         66:56:3c:03:88:41:23:1f:aa:b6:65:75:06:da:52:49:b6:39:
         ed:ba:59:8d:0a:39:f3:27:78:0f:55:7c:4b:97:d0:cd:24:bb:
         53:38:2c:fe:9f:be:a7:bb:63:b8:e9:5d:2d:dc:86:97:64:f8:
         45:28:4f:59:19:e5:01:45:ce:c1:e0:5c:35:66:4b:86:ba:04:
         d9:c5:b8:75:63:e4:90:c1:53:ba:24:4b:22:36:32:f3:49:c9:
         d5:3f:23:61:51:5f:00:6f:d8:66:e0:f8:9c:a1:5a:8c:5c:da:
         ef:8d:94:77:6c:b3:24:0a:8d:6a:d0:c8:d5:a5:7e:ea:ef:78:
         2e:22:72:b2:5e:7a:88:81:58:3a:51:f2:b0:85:d4:dd:ed:a2:
         c5:0c:36:fe:94:e3:ad:4f:68:36:79:b1:28:eb:9f:4f:f3:81:
         27:c2:43:c8:cc:d4:47:bd:08:66:91:19:7f:aa:da:8a:11:0d:
         99:ca:80:eb:17:d3:ec:6a:4c:b9:af:d0:3f:78:b5:62:21:be:
         f9:0d:39:6e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECLbH3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDMx
NDE5MDAyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE0NGI0OTZkYzUz
M2FjYTQxNjQwZDhmYWNiMTI0ZTE5NDkyYWYyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkxR5t/O3dbsCDaIhxG3RE8sqNOOaTn+zHhZZ3ipwGGIYpZ
fwCynzAYSLATSCAG5IQMA3wfeChmLBc7LRtH6Xlvdpp/OmuCYf6dLEKYcphkBKuP
70BnFhr/kJR9W0KeQfaLi0YtoH8GzVy++VX2hKUNWYfvnsbrr8N+FpYx6nhmsBP6
JznZGE3lh7sjQsA59UB6pi+9ws25mSubg2fty54iZRjZ1ECCyphUSBCp+ERCHtAz
uOl+KPDPGJgZ+AZ3GSBNvAJZbN97LBqS/VR417brsDi2K7rS7Z/qovbUthYGfsEd
wDbWjx9WdtjTkV/ED3vpC3zvoRq9VjfkuBGOL+UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKRLSW3FM6ykFkDY+ssSThlJKvJTAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L0NrUzBsdHhUT3NwQlpBMlByTEVrNFpTU3J5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALL9NzANBgkqhkiG9w0BAQsFAAOC
AQEAktbl20RQStg/0OgK0uHLw51l/ODq18c1Pq515dQYZjZ++MZbMWlWMAGAkW2W
hbxiIt57KbP4ZlY8A4hBIx+qtmV1BtpSSbY57bpZjQo58yd4D1V8S5fQzSS7Uzgs
/p++p7tjuOldLdyGl2T4RShPWRnlAUXOweBcNWZLhroE2cW4dWPkkMFTuiRLIjYy
80nJ1T8jYVFfAG/YZuD4nKFajFza742Ud2yzJAqNatDI1aV+6u94LiJysl56iIFY
OlHysIXU3e2ixQw2/pTjrU9oNnmxKOufT/OBJ8JDyMzUR70IZpEZf6raihENmcqA
6xfT7GpMua/QP3i1YiG++Q05bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org