Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/N5miFwpGUlyw7ryCEoCcHi9GaFY.roa
File:                     N5miFwpGUlyw7ryCEoCcHi9GaFY.roa (raw, json)
Hash identifier:          YEy25hTYEWvi1cDlmW15Pm1OW5GRj8d+NfHqtl28RLs=
Subject key identifier:   37:99:A2:17:0A:46:52:5C:B0:EE:BC:82:12:80:9C:1E:2F:46:68:56
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       073A2756
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/N5miFwpGUlyw7ryCEoCcHi9GaFY.roa
Signing time:             Thu 28 Apr 2022 15:59:57 +0000
ROA not before:           Thu 28 Apr 2022 15:59:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62329
IP address blocks:        194.61.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121251670 (0x73a2756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: Apr 28 15:59:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3799a2170a46525cb0eebc8212809c1e2f466856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:a4:5b:64:fd:69:6a:c7:93:f2:98:99:18:
                    b3:8f:21:21:25:1f:65:96:76:4f:99:48:8b:7c:e8:
                    1c:94:50:41:59:40:e1:59:5c:90:77:2c:ac:cf:4e:
                    01:57:86:3c:67:9c:bd:18:c6:3b:8e:3b:08:db:0e:
                    e7:e6:13:84:8a:ca:2b:4f:de:11:74:e1:3e:d2:a0:
                    48:1a:d6:a0:95:a7:85:1a:4c:e7:70:9b:a0:4b:c3:
                    27:13:fe:95:68:d0:2d:d6:31:25:a9:68:1e:e7:6b:
                    dd:98:d6:d4:b3:8c:5f:a3:89:dc:90:6b:2f:37:b8:
                    1f:ab:10:fd:b2:2a:50:83:87:d1:d5:76:54:dc:51:
                    3f:bd:3d:37:74:3a:09:ec:8f:26:7f:a8:ac:f2:83:
                    dc:9f:f5:b5:6c:8d:27:c0:bb:e3:81:66:f6:50:24:
                    dc:22:6c:f8:c4:f8:13:a3:b2:c7:88:a4:2c:ee:87:
                    3b:f2:f5:91:49:e9:b8:52:72:63:81:19:22:6d:a2:
                    0b:80:d6:00:df:03:c3:19:42:94:c4:d2:10:3f:94:
                    91:41:72:f0:d3:b1:31:20:44:2d:be:23:ba:5d:c4:
                    08:a7:e7:19:f8:31:21:e3:ca:8a:b2:e6:57:89:b7:
                    8b:bd:e1:03:cf:05:1b:b3:04:4c:e8:31:07:1c:3b:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:99:A2:17:0A:46:52:5C:B0:EE:BC:82:12:80:9C:1E:2F:46:68:56
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/N5miFwpGUlyw7ryCEoCcHi9GaFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:a4:b4:95:92:57:ec:45:06:ad:57:cc:0d:81:7a:85:09:
         23:53:9d:93:df:81:64:0c:98:5e:a3:27:d1:98:ed:e2:4a:39:
         3e:13:73:f5:dd:51:9b:7a:62:64:28:78:9e:84:a6:8c:f5:ab:
         d3:3a:0c:5b:aa:f0:74:89:dd:5a:e0:42:fe:59:5d:b6:7e:e9:
         ed:71:b7:a9:54:cc:31:2f:0c:51:6e:42:9e:38:09:9a:9e:f7:
         8d:01:ce:68:7b:e3:26:a5:b9:29:f8:fb:59:9d:93:ce:b7:1f:
         d6:8f:6c:bb:70:1f:e1:25:a5:81:ad:c1:7f:27:16:66:7c:e5:
         66:d7:ea:35:0c:26:f8:ef:97:af:d9:a0:ed:f8:17:55:33:91:
         4a:d4:0b:49:e6:0c:f3:32:ce:0b:60:9b:60:22:69:aa:0e:96:
         51:8e:6d:3b:45:60:16:25:c4:27:ef:eb:3e:31:d7:a8:b6:e8:
         8c:67:e6:e1:ac:a8:d2:95:4b:10:9c:a6:29:c0:b0:ca:38:74:
         85:8d:19:9e:67:67:81:06:89:d0:78:5e:20:3d:87:6b:91:44:
         46:56:8c:95:c8:30:95:11:e4:b4:c0:ae:ed:01:d5:84:bf:b3:
         b0:2d:11:9a:84:d3:85:c3:6d:72:1b:48:17:ba:1a:0c:77:1a:
         c4:d6:ab:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBzonVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NGU4ODhhNzZlOTk4NTFiMDFmYjg2Y2VjNTM3ZDRkOGU2MTBkZTE2MB4XDTIyMDQy
ODE1NTk1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc5OWEyMTcwYTQ2
NTI1Y2IwZWViYzgyMTI4MDljMWUyZjQ2Njg1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVmpFtk/Wlqx5PymJkYs48hISUfZZZ2T5lIi3zoHJRQQVlA
4VlckHcsrM9OAVeGPGecvRjGO447CNsO5+YThIrKK0/eEXThPtKgSBrWoJWnhRpM
53CboEvDJxP+lWjQLdYxJaloHudr3ZjW1LOMX6OJ3JBrLze4H6sQ/bIqUIOH0dV2
VNxRP709N3Q6CeyPJn+orPKD3J/1tWyNJ8C744Fm9lAk3CJs+MT4E6Oyx4ikLO6H
O/L1kUnpuFJyY4EZIm2iC4DWAN8DwxlClMTSED+UkUFy8NOxMSBELb4jul3ECKfn
GfgxIePKirLmV4m3i73hA88FG7METOgxBxw7mS8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ3maIXCkZSXLDuvIISgJweL0ZoVjAfBgNVHSMEGDAWgBRE6IinbpmFGwH7
hs7FN9TY5hDeFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JPaUlwMjZaaFJzQi00Yk94VGZVMk9ZUTNoWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzEvODJlMmJhLTQ0MmMtNDJiMC05MzE1LWJjMGRiYTkzMmIzNS8x
L041bWlGd3BHVWx5dzdyeUNFb0NjSGk5R2FGWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEv
ODJlMmJhLTQ0MmMtNDJiMC05MzE1LWJjMGRiYTkzMmIzNS8xL1JPaUlwMjZaaFJz
Qi00Yk94VGZVMk9ZUTNoWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI9UjANBgkqhkiG9w0BAQsFAAOC
AQEAYdCktJWSV+xFBq1XzA2BeoUJI1Odk9+BZAyYXqMn0Zjt4ko5PhNz9d1Rm3pi
ZCh4noSmjPWr0zoMW6rwdIndWuBC/lldtn7p7XG3qVTMMS8MUW5CnjgJmp73jQHO
aHvjJqW5Kfj7WZ2Tzrcf1o9su3Af4SWlga3BfycWZnzlZtfqNQwm+O+Xr9mg7fgX
VTORStQLSeYM8zLOC2CbYCJpqg6WUY5tO0VgFiXEJ+/rPjHXqLbojGfm4ayo0pVL
EJymKcCwyjh0hY0ZnmdngQaJ0HheID2Ha5FERlaMlcgwlRHktMCu7QHVhL+zsC0R
moTThcNtchtIF7oaDHcaxNarXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:22 2024 by rpki-client on console-ams.rpki-client.org