Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Vbmu8Fyf7edlD6g7oABHAgiz9UU.roa
File:                     Vbmu8Fyf7edlD6g7oABHAgiz9UU.roa (raw, json)
Hash identifier:          PYXMyy+DnjKAgnGCLrGQNBxZVfp3gg23Vs9q4yGPjVA=
Subject key identifier:   55:B9:AE:F0:5C:9F:ED:E7:65:0F:A8:3B:A0:00:47:02:08:B3:F5:45
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       063C4815
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Vbmu8Fyf7edlD6g7oABHAgiz9UU.roa
Signing time:             Sat 01 Jan 2022 06:52:34 +0000
ROA not before:           Sat 01 Jan 2022 06:52:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43618
IP address blocks:        193.37.66.0/24 maxlen: 24
                          193.37.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104613909 (0x63c4815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  1 06:52:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55b9aef05c9fede7650fa83ba000470208b3f545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:f5:a0:8c:3a:35:1e:fe:ca:6b:45:9b:06:
                    a8:da:af:8d:d1:45:c7:55:75:eb:e3:68:8f:0f:e9:
                    bc:8d:fa:d2:58:a8:52:9d:94:ec:43:6e:29:7f:3f:
                    41:5b:b3:64:35:81:3c:02:7b:d3:df:78:3d:57:b1:
                    69:8f:ad:49:5f:b8:8b:41:04:d4:01:9d:ac:5d:e8:
                    d5:6e:69:8e:d8:c9:84:a7:25:2c:20:6e:93:5c:7f:
                    f4:58:31:c4:c3:dd:6f:e3:94:3e:c1:53:ba:b9:8b:
                    d4:d2:b8:6b:4f:d2:c5:03:6f:6f:bf:10:e6:15:5d:
                    31:06:15:5f:54:86:20:7e:69:d8:4e:69:ce:0f:42:
                    af:b5:2c:a5:52:4e:f5:82:61:9b:e8:5e:10:15:03:
                    99:05:14:65:2e:b4:ee:1c:2c:9c:1c:af:07:54:36:
                    6a:f7:83:05:ba:d2:e9:9e:bd:e3:e9:fd:9e:08:10:
                    8b:87:14:3b:d9:ed:07:48:e7:39:38:09:12:61:ba:
                    c8:60:f1:1d:86:ae:d4:ef:fa:97:56:54:78:7f:fe:
                    95:cd:fd:57:08:63:20:73:3c:7c:00:d1:d9:e8:25:
                    e0:6f:d7:2e:34:52:43:19:6d:10:33:0b:6a:c2:38:
                    6a:63:78:7a:a4:21:c8:7f:88:7f:2a:20:78:de:28:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B9:AE:F0:5C:9F:ED:E7:65:0F:A8:3B:A0:00:47:02:08:B3:F5:45
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Vbmu8Fyf7edlD6g7oABHAgiz9UU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:ee:b7:ec:59:80:51:e7:30:2a:b9:53:66:1e:a4:e1:72:
         3f:1f:78:c0:ae:55:31:a0:af:f5:a6:1c:1a:b2:a6:4c:8f:1e:
         6d:54:a7:c1:0f:10:3e:a6:e8:34:05:da:13:07:4e:58:06:bc:
         ce:ef:e7:0b:a4:b2:05:04:2f:b0:57:d1:99:fb:42:15:60:f0:
         99:a0:44:74:20:5f:f3:ea:a6:ed:50:fb:32:b7:1e:91:db:a8:
         9e:85:08:76:46:8a:f9:56:44:1d:43:22:3c:4c:0e:ec:f3:82:
         88:8a:20:4a:1e:37:55:65:06:8a:08:50:6e:2e:19:a5:3f:e5:
         4c:02:8f:b4:6a:d2:44:79:59:47:23:bd:a8:24:9a:3f:d1:23:
         63:b3:cf:6b:7e:3e:99:2f:ee:1f:31:3f:fd:a8:fc:ae:79:ae:
         cf:54:a5:08:ca:8e:71:e6:aa:51:7d:70:ab:a6:cc:27:2a:37:
         60:22:48:83:e4:f3:d0:2c:f3:7f:d0:43:18:e4:b0:b5:ab:16:
         a1:4e:49:e1:21:a8:af:2d:0d:ea:c5:06:32:c1:e7:3d:fb:51:
         d0:ab:e6:34:c6:50:d6:1c:08:5b:25:f3:11:b2:62:99:32:73:
         6b:ef:7d:a9:2d:87:b9:1b:53:b4:04:22:8b:24:fb:71:d4:4a:
         a7:f6:f9:69
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBjxIFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDEw
MTA2NTIzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTViOWFlZjA1Yzlm
ZWRlNzY1MGZhODNiYTAwMDQ3MDIwOGIzZjU0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALer9aCMOjUe/sprRZsGqNqvjdFFx1V16+Nojw/pvI360lio
Up2U7ENuKX8/QVuzZDWBPAJ70994PVexaY+tSV+4i0EE1AGdrF3o1W5pjtjJhKcl
LCBuk1x/9FgxxMPdb+OUPsFTurmL1NK4a0/SxQNvb78Q5hVdMQYVX1SGIH5p2E5p
zg9Cr7UspVJO9YJhm+heEBUDmQUUZS607hwsnByvB1Q2aveDBbrS6Z694+n9nggQ
i4cUO9ntB0jnOTgJEmG6yGDxHYau1O/6l1ZUeH/+lc39VwhjIHM8fADR2egl4G/X
LjRSQxltEDMLasI4amN4eqQhyH+IfyogeN4oIecCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRVua7wXJ/t52UPqDugAEcCCLP1RTAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L1ZibXU4RnlmN2VkbEQ2ZzdvQUJIQWdpejlVVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcElQjANBgkqhkiG9w0BAQsFAAOC
AQEAHKzut+xZgFHnMCq5U2YepOFyPx94wK5VMaCv9aYcGrKmTI8ebVSnwQ8QPqbo
NAXaEwdOWAa8zu/nC6SyBQQvsFfRmftCFWDwmaBEdCBf8+qm7VD7MrcekduonoUI
dkaK+VZEHUMiPEwO7POCiIogSh43VWUGighQbi4ZpT/lTAKPtGrSRHlZRyO9qCSa
P9EjY7PPa34+mS/uHzE//aj8rnmuz1SlCMqOceaqUX1wq6bMJyo3YCJIg+Tz0Czz
f9BDGOSwtasWoU5J4SGory0N6sUGMsHnPftR0KvmNMZQ1hwIWyXzEbJimTJza+99
qS2HuRtTtAQiiyT7cdRKp/b5aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org