Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/mEFiCkVpzl8E0GD8_9KxxVMg-Hw.roa
File:                     mEFiCkVpzl8E0GD8_9KxxVMg-Hw.roa (raw, json)
Hash identifier:          qKVCz/Z3Enc102KYKQsNODNnWqp0JzE4Q0l/K1a57LA=
Subject key identifier:   98:41:62:0A:45:69:CE:5F:04:D0:60:FC:FF:D2:B1:C5:53:20:F8:7C
Certificate issuer:       /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial:       02DD7192
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/mEFiCkVpzl8E0GD8_9KxxVMg-Hw.roa
Signing time:             Sat 01 Jan 2022 12:05:50 +0000
ROA not before:           Sat 01 Jan 2022 12:05:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206454
IP address blocks:        185.183.226.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48066962 (0x2dd7192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
        Validity
            Not Before: Jan  1 12:05:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9841620a4569ce5f04d060fcffd2b1c55320f87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:c1:63:4e:12:9f:98:8c:9e:ce:81:24:03:
                    59:1e:a8:4b:1e:35:7c:aa:f3:1b:22:ae:45:68:83:
                    fd:8c:91:b7:bc:3f:37:5c:82:37:77:ad:e1:5e:82:
                    41:e9:84:46:02:7c:91:cb:fa:e9:e6:88:83:ca:e0:
                    4b:11:77:26:88:88:3f:55:5f:e7:d5:25:e8:70:42:
                    fb:22:60:d4:7d:c1:10:9e:03:3c:e5:90:a4:cd:98:
                    be:65:0a:0e:06:0d:ad:89:f2:2f:68:13:a6:bc:18:
                    f1:59:8c:47:db:86:bd:39:a9:4e:02:64:db:2a:ef:
                    a0:ab:1a:e0:3d:83:54:cb:01:d1:ab:57:b3:ad:6e:
                    72:63:33:87:1f:42:be:c0:51:a4:08:8d:ae:e3:12:
                    11:1c:0d:6c:7a:06:bd:ec:61:5b:6e:61:0b:a2:0f:
                    92:c0:be:4f:ed:d5:ad:33:26:45:01:bf:8d:69:88:
                    13:24:ef:b7:9c:33:18:8f:b3:c8:99:68:bf:51:f9:
                    33:81:2b:d4:58:87:aa:57:19:03:ce:38:92:58:e0:
                    cc:26:29:e8:92:32:2b:a6:97:d8:0c:27:62:61:cc:
                    58:ad:d5:96:e0:c4:21:81:7f:ca:49:66:dc:70:c0:
                    60:04:5d:9e:1e:53:52:30:4b:74:8d:6b:6d:1c:b3:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:41:62:0A:45:69:CE:5F:04:D0:60:FC:FF:D2:B1:C5:53:20:F8:7C
            X509v3 Authority Key Identifier:
                keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/mEFiCkVpzl8E0GD8_9KxxVMg-Hw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:10:b8:0b:03:ac:68:36:67:16:6f:ed:fe:92:3a:3e:61:21:
         6c:5e:d1:ac:03:06:ea:15:21:2c:f8:60:2e:e9:ac:61:16:bc:
         e6:04:74:a3:97:ed:77:06:ca:8b:eb:77:be:ea:c2:03:43:e8:
         5b:38:73:34:c5:54:c5:6a:ee:fc:24:61:0e:48:04:3b:ac:5d:
         5c:ae:3e:e8:3e:ff:fa:36:55:0a:9e:d4:43:bc:98:9d:b5:39:
         60:e9:f0:6f:09:4e:63:22:c7:7e:1a:bd:f4:d9:da:48:d6:18:
         ef:9f:43:09:8d:7b:7a:66:4d:26:1a:a5:ce:01:7c:53:7c:51:
         e1:94:0b:15:6b:3b:d5:73:84:7b:7a:b8:7f:a3:ca:27:ad:e4:
         d8:0e:02:18:10:97:fe:d7:8d:28:bf:0e:97:02:16:78:dd:3b:
         d1:7f:56:94:5e:59:aa:60:dd:8f:28:ba:ef:82:3f:c4:b5:1a:
         71:af:e7:f8:c7:ba:9c:39:82:1e:76:d1:a9:45:f3:51:b6:f6:
         54:ae:49:86:24:58:64:22:b5:db:eb:9c:bd:b6:0a:7c:89:3f:
         94:b7:12:31:fb:7b:e7:bf:be:43:83:5f:6f:bf:94:22:f1:7e:
         ea:11:63:fa:2e:95:b9:69:c8:54:44:df:a1:aa:3d:44:d5:61:
         4e:22:f1:a5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAt1xkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YTE4MjlhZDQ2N2I0ZTczZmZlNjkxZWMxNDZiNTZiMzY5MDlmNTFhMB4XDTIyMDEw
MTEyMDU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTg0MTYyMGE0NTY5
Y2U1ZjA0ZDA2MGZjZmZkMmIxYzU1MzIwZjg3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtGwWNOEp+YjJ7OgSQDWR6oSx41fKrzGyKuRWiD/YyRt7w/
N1yCN3et4V6CQemERgJ8kcv66eaIg8rgSxF3JoiIP1Vf59Ul6HBC+yJg1H3BEJ4D
POWQpM2YvmUKDgYNrYnyL2gTprwY8VmMR9uGvTmpTgJk2yrvoKsa4D2DVMsB0atX
s61ucmMzhx9CvsBRpAiNruMSERwNbHoGvexhW25hC6IPksC+T+3VrTMmRQG/jWmI
EyTvt5wzGI+zyJlov1H5M4Er1FiHqlcZA844kljgzCYp6JIyK6aX2AwnYmHMWK3V
luDEIYF/yklm3HDAYARdnh5TUjBLdI1rbRyzFQECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSYQWIKRWnOXwTQYPz/0rHFUyD4fDAfBgNVHSMEGDAWgBRaGCmtRntOc//m
kewUa1azaQn1GjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1doZ3ByVVo3VG5QXzVwSHNGR3RXczJrSjlSby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvMzJmNDUzLWY3OTctNDAxOS1hMDg2LTc0YjZmYWEzYzg3Ny8x
L21FRmlDa1Zwemw4RTBHRDhfOUt4eFZNZy1Idy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
MzJmNDUzLWY3OTctNDAxOS1hMDg2LTc0YjZmYWEzYzg3Ny8xL1doZ3ByVVo3VG5Q
XzVwSHNGR3RXczJrSjlSby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbm34jANBgkqhkiG9w0BAQsFAAOC
AQEAdhC4CwOsaDZnFm/t/pI6PmEhbF7RrAMG6hUhLPhgLumsYRa85gR0o5ftdwbK
i+t3vurCA0PoWzhzNMVUxWru/CRhDkgEO6xdXK4+6D7/+jZVCp7UQ7yYnbU5YOnw
bwlOYyLHfhq99NnaSNYY759DCY17emZNJhqlzgF8U3xR4ZQLFWs71XOEe3q4f6PK
J63k2A4CGBCX/teNKL8OlwIWeN070X9WlF5ZqmDdjyi674I/xLUaca/n+Me6nDmC
HnbRqUXzUbb2VK5JhiRYZCK12+ucvbYKfIk/lLcSMft757++Q4Nfb7+UIvF+6hFj
+i6VuWnIVETfoao9RNVhTiLxpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org