Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JjmHtDFZGivnTio2ZM5-uQhWJ1M.roa
File:                     JjmHtDFZGivnTio2ZM5-uQhWJ1M.roa (raw, json)
Hash identifier:          LgFfndASAY83WL5f83ss9jIRlWXSBZ9lTMDMoPlcX6g=
Subject key identifier:   26:39:87:B4:31:59:1A:2B:E7:4E:2A:36:64:CE:7E:B9:08:56:27:53
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0182F2B3783939B39CB7E0313851E4991A55
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JjmHtDFZGivnTio2ZM5-uQhWJ1M.roa
Signing time:             Wed 31 Aug 2022 07:00:24 +0000
ROA not before:           Wed 31 Aug 2022 07:00:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209737
IP address blocks:        178.253.40.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f2:b3:78:39:39:b3:9c:b7:e0:31:38:51:e4:99:1a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Aug 31 07:00:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=263987b431591a2be74e2a3664ce7eb908562753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:11:d9:b3:26:6c:a2:5d:05:de:58:f1:1f:
                    8b:f7:5b:7c:e7:54:d2:ff:7f:71:d6:ba:5f:8e:a5:
                    27:30:db:cf:cc:fb:52:bb:8d:8b:dd:e3:3a:86:ed:
                    39:b1:fd:08:cc:cf:4c:90:85:7b:71:d2:f5:c3:f5:
                    f3:48:c7:2b:c6:69:99:3e:ab:a1:62:cd:73:1c:eb:
                    b9:47:98:66:8f:fd:f0:f2:c0:31:e5:d7:21:e7:f5:
                    fe:5d:84:76:53:a9:67:17:f4:85:4e:6c:d5:5d:d3:
                    e1:69:59:25:9c:fb:ed:cb:27:2d:3f:77:b4:4f:af:
                    54:d8:c8:fb:49:50:df:90:44:73:56:af:fc:97:3b:
                    49:c7:c8:98:bf:10:d8:95:cb:eb:df:0b:51:63:4f:
                    b8:90:b8:fe:b5:83:89:d2:e5:54:cc:40:31:b0:04:
                    cf:57:c6:1d:55:d1:fe:3e:d1:d3:eb:af:d5:76:b8:
                    2a:e2:f6:1a:1a:3c:e7:b9:58:e1:f1:0a:28:ab:c8:
                    39:0c:01:7d:7e:64:d6:ed:9b:16:d1:50:0f:f8:88:
                    67:22:83:35:69:eb:e1:c8:2b:9d:89:74:63:c7:c2:
                    a9:83:a3:af:aa:d6:d3:6a:a2:ec:56:bd:db:9e:1f:
                    67:65:67:1d:f6:9d:c2:33:cc:65:f9:1c:fd:43:e7:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:39:87:B4:31:59:1A:2B:E7:4E:2A:36:64:CE:7E:B9:08:56:27:53
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JjmHtDFZGivnTio2ZM5-uQhWJ1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:dd:e4:97:ab:ce:a1:8f:92:49:09:e5:0c:09:40:fe:74:
         f5:90:90:34:cf:1e:15:05:3e:21:7e:dc:31:fd:b6:0c:39:5d:
         8c:3b:70:50:d4:3b:20:b7:09:dc:21:de:71:f9:0d:05:ff:9e:
         de:f5:d6:30:9c:00:02:42:9a:f1:87:60:da:da:06:f1:22:6f:
         e8:8a:5b:4e:f9:75:81:c2:60:c8:a0:cf:40:40:98:ba:38:03:
         ec:0b:4c:ce:5c:80:4e:5e:16:dd:ec:57:2d:b6:e0:b5:ed:bb:
         2f:07:d3:9c:c3:96:94:d2:65:d5:4d:4d:5f:25:88:5f:69:9e:
         a2:cf:0a:e8:4a:43:0e:af:90:e7:0c:d6:b5:d5:18:5d:02:f1:
         3f:bc:8b:57:76:c3:1b:99:9c:0a:a1:88:4c:06:36:da:ea:c5:
         4f:31:d7:d1:74:c6:b4:23:c2:13:5b:5d:09:f3:6a:f4:33:cc:
         c8:62:7c:bb:11:b2:72:1c:4b:4c:1b:59:a4:e5:f9:5f:4f:6f:
         96:e3:42:2e:bc:02:c2:b9:79:44:b3:1c:17:34:fb:81:64:59:
         ba:54:16:05:ab:6f:71:e8:94:24:b0:8e:0d:cd:cb:98:6a:35:
         84:a8:de:8d:a4:b1:d1:d5:2c:0b:b7:7f:9d:f5:62:e6:81:5d:
         b5:1a:61:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLys3g5ObOct+AxOFHkmRpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIwODMxMDcwMDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjM5ODdiNDMxNTkxYTJiZTc0ZTJhMzY2NGNlN2ViOTA4NTYyNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/UR2bMmbKJdBd5Y8R+L91t851TS
/39x1rpfjqUnMNvPzPtSu42L3eM6hu05sf0IzM9MkIV7cdL1w/XzSMcrxmmZPquh
Ys1zHOu5R5hmj/3w8sAx5dch5/X+XYR2U6lnF/SFTmzVXdPhaVklnPvtyyctP3e0
T69U2Mj7SVDfkERzVq/8lztJx8iYvxDYlcvr3wtRY0+4kLj+tYOJ0uVUzEAxsATP
V8YdVdH+PtHT66/Vdrgq4vYaGjznuVjh8Qooq8g5DAF9fmTW7ZsW0VAP+IhnIoM1
aevhyCudiXRjx8Kpg6OvqtbTaqLsVr3bnh9nZWcd9p3CM8xl+Rz9Q+eijwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCY5h7QxWRor504qNmTOfrkIVidTMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvSmptSHRERlpHaXZuVGlvMlpNNS11UWhXSjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsv0oMA0G
CSqGSIb3DQEBCwUAA4IBAQADyd3kl6vOoY+SSQnlDAlA/nT1kJA0zx4VBT4hftwx
/bYMOV2MO3BQ1DsgtwncId5x+Q0F/57e9dYwnAACQprxh2Da2gbxIm/oiltO+XWB
wmDIoM9AQJi6OAPsC0zOXIBOXhbd7FcttuC17bsvB9Ocw5aU0mXVTU1fJYhfaZ6i
zwroSkMOr5DnDNa11RhdAvE/vItXdsMbmZwKoYhMBjba6sVPMdfRdMa0I8ITW10J
82r0M8zIYny7EbJyHEtMG1mk5flfT2+W40IuvALCuXlEsxwXNPuBZFm6VBYFq29x
6JQksI4NzcuYajWEqN6NpLHR1SwLt3+d9WLmgV21GmET
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org