Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/Jn5rSNip3shZ4sVmmfj4ilSLiKM.roa
File:                     Jn5rSNip3shZ4sVmmfj4ilSLiKM.roa (raw, json)
Hash identifier:          1i7cUQKnWLsgl/7lvrQ7CuKHUSh/iZyi45MquaCeWK0=
Subject key identifier:   26:7E:6B:48:D8:A9:DE:C8:59:E2:C5:66:99:F8:F8:8A:54:8B:88:A3
Certificate issuer:       /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial:       0183F952BAD8E6B1EA4793781A47863BB4DC
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/Jn5rSNip3shZ4sVmmfj4ilSLiKM.roa
Signing time:             Fri 21 Oct 2022 06:54:51 +0000
ROA not before:           Fri 21 Oct 2022 06:54:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        188.64.17.0/24 maxlen: 24
                          188.64.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f9:52:ba:d8:e6:b1:ea:47:93:78:1a:47:86:3b:b4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
        Validity
            Not Before: Oct 21 06:54:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=267e6b48d8a9dec859e2c56699f8f88a548b88a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:20:d0:98:b8:14:65:82:28:06:89:7d:70:
                    e6:d0:65:d0:c6:35:cb:53:d3:25:8f:32:57:33:33:
                    90:03:d9:fa:9e:eb:8a:47:ff:25:fa:d3:84:e3:1c:
                    9e:46:24:04:64:77:6c:f1:0a:84:6b:ab:2a:82:4b:
                    76:8a:b7:0b:13:e1:86:51:f6:da:60:cd:8b:20:37:
                    a5:dd:7c:7b:c5:9a:20:48:f4:02:2d:06:3f:5c:3f:
                    2d:09:a4:75:d1:cc:87:c8:63:7c:43:e4:cf:1d:e4:
                    af:dd:be:97:4f:f0:cf:02:3d:e9:8e:00:86:1e:21:
                    82:e6:48:d3:61:53:ba:3c:a4:cc:08:ce:11:9d:40:
                    6b:1f:ac:4f:5a:be:4a:be:e1:c8:7d:d2:97:27:95:
                    c0:11:9f:2e:70:49:2e:e7:02:60:6a:cf:62:4e:89:
                    00:b6:2c:4d:ca:52:40:0b:c3:c8:2d:31:2e:73:8e:
                    10:2f:65:56:b2:a7:bb:b1:ac:bb:b6:10:80:2e:c0:
                    2d:01:c8:11:73:9b:dd:f5:8e:26:4e:89:51:64:44:
                    1a:49:3d:13:b0:b2:68:7f:f6:77:4c:a2:57:25:55:
                    29:76:ad:89:44:09:05:dd:0d:32:1b:13:1d:c0:a2:
                    67:3f:4f:d2:c0:38:3e:f9:e8:9b:6b:9a:4f:b9:f4:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:6B:48:D8:A9:DE:C8:59:E2:C5:66:99:F8:F8:8A:54:8B:88:A3
            X509v3 Authority Key Identifier:
                keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/Jn5rSNip3shZ4sVmmfj4ilSLiKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.17.0-188.64.18.255

    Signature Algorithm: sha256WithRSAEncryption
         10:88:66:38:a3:01:d3:c0:65:94:8f:4f:d5:a1:0a:8e:c3:60:
         f3:bc:90:bd:c5:8f:86:20:b8:9b:d6:6e:a9:4f:36:12:19:74:
         5c:98:03:65:b5:cd:5b:97:a7:0a:01:71:4e:a7:2e:88:92:58:
         fd:6e:d8:0a:c5:db:ea:2f:1c:21:fb:99:50:7e:25:8e:2c:18:
         e1:d3:dd:10:83:54:fb:4b:ab:90:00:dc:16:3e:a7:a4:fc:39:
         42:9a:d6:3c:3b:65:e3:3a:2e:43:77:bd:46:53:e5:c6:b0:91:
         2e:73:d3:5a:fb:25:72:9a:8f:90:78:8a:bf:14:6d:9b:1f:42:
         ed:f1:76:cc:2b:57:c3:a4:9a:ed:f7:ba:06:17:63:4f:fc:46:
         89:b7:35:a1:36:ae:53:07:e2:9c:37:f0:c9:16:77:31:64:b8:
         09:2f:80:a9:66:00:32:c6:22:20:37:53:6d:d2:73:a6:fb:e7:
         82:e7:54:a7:5f:d6:95:ba:8b:13:2e:35:78:93:93:6d:09:58:
         1e:58:ae:1d:69:26:23:4c:22:35:af:6a:1b:5c:e7:67:63:48:
         40:55:41:0a:32:44:77:60:71:98:db:c8:5b:9c:eb:cf:e1:7a:
         0a:9e:97:f6:46:51:5d:b1:aa:15:01:c2:d4:e1:b2:5a:25:97:
         b5:0b:e8:2e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYP5UrrY5rHqR5N4GkeGO7TcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3
NmUzNzUwHhcNMjIxMDIxMDY1NDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdlNmI0OGQ4YTlkZWM4NTllMmM1NjY5OWY4Zjg4YTU0OGI4OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM4g0Ji4FGWCKAaJfXDm0GXQxjXL
U9MljzJXMzOQA9n6nuuKR/8l+tOE4xyeRiQEZHds8QqEa6sqgkt2ircLE+GGUfba
YM2LIDel3Xx7xZogSPQCLQY/XD8tCaR10cyHyGN8Q+TPHeSv3b6XT/DPAj3pjgCG
HiGC5kjTYVO6PKTMCM4RnUBrH6xPWr5KvuHIfdKXJ5XAEZ8ucEku5wJgas9iTokA
tixNylJAC8PILTEuc44QL2VWsqe7say7thCALsAtAcgRc5vd9Y4mTolRZEQaST0T
sLJof/Z3TKJXJVUpdq2JRAkF3Q0yGxMdwKJnP0/SwDg++eiba5pPufQpuwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCZ+a0jYqd7IWeLFZpn4+IpUi4ijMB8GA1UdIwQY
MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt
NmE4YzNiNjc2YjU3LzEvSm41clNOaXAzc2haNHNWbW1majRpbFNMaUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3
LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC8QBED
BAC8QBIwDQYJKoZIhvcNAQELBQADggEBABCIZjijAdPAZZSPT9WhCo7DYPO8kL3F
j4YguJvWbqlPNhIZdFyYA2W1zVuXpwoBcU6nLoiSWP1u2ArF2+ovHCH7mVB+JY4s
GOHT3RCDVPtLq5AA3BY+p6T8OUKa1jw7ZeM6LkN3vUZT5cawkS5z01r7JXKaj5B4
ir8UbZsfQu3xdswrV8Okmu33ugYXY0/8Rom3NaE2rlMH4pw38MkWdzFkuAkvgKlm
ADLGIiA3U23Sc6b754LnVKdf1pW6ixMuNXiTk20JWB5Yrh1pJiNMIjWvahtc52dj
SEBVQQoyRHdgcZjbyFuc68/hegqel/ZGUV2xqhUBwtThsloll7UL6C4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:25 2024 by rpki-client on console-ams.rpki-client.org