Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/hrxfAEScTa6a7j0AcW0zowbjWyA.roa
File:                     hrxfAEScTa6a7j0AcW0zowbjWyA.roa (raw, json)
Hash identifier:          OsLgRkbLpyoYFhmrISe4jryWRkUzqCVBMb85Z6wjL4w=
Subject key identifier:   86:BC:5F:00:44:9C:4D:AE:9A:EE:3D:00:71:6D:33:A3:06:E3:5B:20
Certificate issuer:       /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial:       018476EE125E9BA827B37CCF5E4E6D69C92B
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/hrxfAEScTa6a7j0AcW0zowbjWyA.roa
Signing time:             Mon 14 Nov 2022 16:17:04 +0000
ROA not before:           Mon 14 Nov 2022 16:17:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51661
IP address blocks:        185.160.20.0/24 maxlen: 24
                          185.160.23.0/24 maxlen: 24
                          185.160.21.0/24 maxlen: 24
                          2a02:1d0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:ee:12:5e:9b:a8:27:b3:7c:cf:5e:4e:6d:69:c9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
        Validity
            Not Before: Nov 14 16:17:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=86bc5f00449c4dae9aee3d00716d33a306e35b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:7f:08:f1:e5:82:53:4a:cc:cf:ea:75:53:
                    4f:c1:3a:db:39:fd:a7:6a:c4:fc:40:8f:cf:fc:cd:
                    cb:8c:07:38:f8:16:06:a6:c4:66:2e:f4:9e:16:d0:
                    ec:46:95:94:31:0d:00:fa:30:f6:ac:7c:06:9b:6f:
                    49:c3:5a:ec:a6:e2:69:06:33:c9:81:1f:5b:56:fc:
                    a0:82:c4:88:32:12:8d:07:f0:73:e5:e8:c8:fa:d0:
                    03:7c:3d:18:22:4c:23:1b:0a:f6:9f:5d:a7:5e:3b:
                    0c:0a:5a:08:4d:9e:5d:be:b1:2e:93:36:17:cb:3b:
                    e2:f6:89:4c:62:19:90:41:55:21:a8:f3:48:a3:df:
                    26:2e:4f:f7:6a:42:31:41:0c:0b:6e:10:96:99:3f:
                    01:1c:65:cd:6f:dc:d5:1e:ef:22:b0:08:be:37:5b:
                    c7:52:5f:57:7f:86:20:d9:ff:55:a5:46:27:51:5f:
                    05:b7:7d:c3:5a:56:5d:ee:33:cc:be:96:43:ac:e1:
                    92:06:23:d7:78:7e:96:da:d5:db:85:f3:31:f9:f2:
                    7f:7c:f7:9c:f6:f5:20:89:70:51:a6:89:50:9a:a4:
                    06:92:ec:14:4a:42:10:17:4f:18:bb:73:07:00:bd:
                    f4:02:93:4c:fd:ef:69:c4:71:f1:97:28:cc:c6:77:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BC:5F:00:44:9C:4D:AE:9A:EE:3D:00:71:6D:33:A3:06:E3:5B:20
            X509v3 Authority Key Identifier:
                keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/hrxfAEScTa6a7j0AcW0zowbjWyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.20.0/23
                  185.160.23.0/24
                IPv6:
                  2a02:1d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:1b:43:9a:b8:6b:cd:aa:8f:d3:5e:f7:fd:ed:5b:5e:6b:bf:
         8b:90:94:7b:e5:85:58:a4:95:de:1e:ec:e8:32:5a:53:00:cd:
         f5:a6:53:41:69:29:e8:f5:12:54:0d:c7:16:32:e3:04:ee:7d:
         ed:22:2c:c8:9f:4a:53:8e:df:e7:b0:a6:99:61:90:c5:5c:94:
         53:ff:a1:bd:2d:d3:15:9b:4f:78:f7:85:6b:46:3a:0a:24:0e:
         18:e2:4c:39:f0:00:08:a7:9e:cb:12:5e:2d:20:d8:25:d4:86:
         72:ed:cc:5a:56:e4:cb:c5:36:2a:8e:bc:d8:f5:60:d2:9a:93:
         e1:1d:89:af:40:69:5f:86:2c:21:d2:12:4e:51:1e:04:30:ea:
         1d:de:42:b8:70:5c:3d:e8:87:55:29:45:f6:71:98:14:1d:0e:
         0c:d5:66:c3:4c:b3:d9:49:4b:1f:ee:4f:45:9f:32:8a:d3:c4:
         bf:29:6d:c7:34:ab:a6:39:d5:32:c2:bf:55:1c:9e:57:2b:0e:
         9b:7a:2a:27:e2:4d:3e:bc:4f:7b:f8:98:2d:ec:88:b7:28:e4:
         57:6b:3d:9f:fe:3f:d9:c8:90:d0:85:ad:a1:dc:3b:ff:5b:4e:
         e3:a5:03:7f:a2:c9:3d:1d:72:82:4e:ad:62:f1:dd:bd:1f:f6:
         80:a3:2e:f6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYR27hJem6gns3zPXk5tackrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0
ZDk3ZjAwHhcNMjIxMTE0MTYxNzA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJjNWYwMDQ0OWM0ZGFlOWFlZTNkMDA3MTZkMzNhMzA2ZTM1YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixZ/CPHlglNKzM/qdVNPwTrbOf2n
asT8QI/P/M3LjAc4+BYGpsRmLvSeFtDsRpWUMQ0A+jD2rHwGm29Jw1rspuJpBjPJ
gR9bVvyggsSIMhKNB/Bz5ejI+tADfD0YIkwjGwr2n12nXjsMCloITZ5dvrEukzYX
yzvi9olMYhmQQVUhqPNIo98mLk/3akIxQQwLbhCWmT8BHGXNb9zVHu8isAi+N1vH
Ul9Xf4Yg2f9VpUYnUV8Ft33DWlZd7jPMvpZDrOGSBiPXeH6W2tXbhfMx+fJ/fPec
9vUgiXBRpolQmqQGkuwUSkIQF08Yu3MHAL30ApNM/e9pxHHxlyjMxnctZQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIa8XwBEnE2umu49AHFtM6MG41sgMB8GA1UdIwQY
MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt
MDM1ODY1MjNiMTMzLzEvaHJ4ZkFFU2NUYTZhN2owQWNXMHpvd2JqV3lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz
LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuaAUAwQA
uaAXMA0EAgACMAcDBQAqAgHQMA0GCSqGSIb3DQEBCwUAA4IBAQCOG0OauGvNqo/T
Xvf97Vtea7+LkJR75YVYpJXeHuzoMlpTAM31plNBaSno9RJUDccWMuME7n3tIizI
n0pTjt/nsKaZYZDFXJRT/6G9LdMVm09494VrRjoKJA4Y4kw58AAIp57LEl4tINgl
1IZy7cxaVuTLxTYqjrzY9WDSmpPhHYmvQGlfhiwh0hJOUR4EMOod3kK4cFw96IdV
KUX2cZgUHQ4M1WbDTLPZSUsf7k9FnzKK08S/KW3HNKumOdUywr9VHJ5XKw6beion
4k0+vE97+Jgt7Ii3KORXaz2f/j/ZyJDQha2h3Dv/W07jpQN/osk9HXKCTq1i8d29
H/aAoy72
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:18 2024 by rpki-client on console-ams.rpki-client.org