Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/qsXR3s1B8SH8ouB3hrzuzW_eRkM.roa
File:                     qsXR3s1B8SH8ouB3hrzuzW_eRkM.roa (raw, json)
Hash identifier:          HM/Haohh1F8WNIgPbJjVrx6Vq/bjGNtPe2qS5rcsBX4=
Subject key identifier:   AA:C5:D1:DE:CD:41:F1:21:FC:A2:E0:77:86:BC:EE:CD:6F:DE:46:43
Certificate issuer:       /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial:       1C55B4E9
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/qsXR3s1B8SH8ouB3hrzuzW_eRkM.roa
Signing time:             Sat 01 Jan 2022 06:58:38 +0000
ROA not before:           Sat 01 Jan 2022 06:58:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62291
IP address blocks:        178.251.48.0/22 maxlen: 24
                          178.251.54.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475378921 (0x1c55b4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
        Validity
            Not Before: Jan  1 06:58:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aac5d1decd41f121fca2e07786bceecd6fde4643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:a4:0f:45:bd:2f:79:a9:9c:02:2f:eb:ac:
                    27:6c:30:5d:e6:75:de:14:37:48:2c:a3:51:19:43:
                    bb:19:03:60:76:8a:a5:04:8e:2f:ee:2f:42:1d:ad:
                    53:fc:9d:8a:b3:72:ca:17:9f:80:59:3f:22:4e:57:
                    c1:d2:de:29:4f:a2:30:2a:cf:14:f0:e6:3a:f2:a1:
                    37:cb:d0:ae:f9:cd:a8:cd:c0:47:74:02:99:e5:31:
                    35:1e:aa:fe:05:76:30:cf:3c:14:63:a5:cd:58:da:
                    49:27:87:bc:6e:62:35:97:e9:a9:ff:08:7d:42:f0:
                    44:0a:97:9c:6a:bb:0e:2b:d6:d4:68:0a:2d:be:73:
                    dd:b7:da:82:0a:62:3d:a5:89:ee:38:60:59:d8:2e:
                    9b:2c:33:c9:d0:cd:6a:b3:b4:8a:8b:c6:1a:4a:0a:
                    d9:7d:ea:31:09:7d:28:74:be:7f:e1:11:3d:59:60:
                    2b:c8:c5:80:cc:4b:3b:30:9a:bd:a8:b5:62:ad:17:
                    00:7a:33:9b:4b:4a:c2:29:86:08:28:d6:2b:48:8e:
                    4b:e6:0e:89:30:3d:cd:3b:90:5d:0b:e0:f0:31:e4:
                    3e:69:78:11:97:04:fd:ef:52:7f:fe:de:4e:91:8d:
                    0b:6a:f8:e0:17:e7:ce:33:49:ee:cc:39:06:70:58:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C5:D1:DE:CD:41:F1:21:FC:A2:E0:77:86:BC:EE:CD:6F:DE:46:43
            X509v3 Authority Key Identifier:
                keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/qsXR3s1B8SH8ouB3hrzuzW_eRkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.251.48.0/22
                  178.251.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:55:73:85:ab:8b:7d:b5:54:d8:54:74:bf:23:d8:af:55:1f:
         f6:76:33:aa:8a:70:6e:09:02:1e:fc:a7:79:bc:c0:ff:53:6b:
         41:00:9c:bc:6e:00:ae:4b:8a:73:f7:83:b2:7f:a7:60:89:db:
         23:c0:89:d8:d2:3a:31:0d:c5:6a:74:d5:c4:d4:e5:a2:cb:b1:
         e7:bf:31:6c:8a:64:52:1a:a1:2b:7d:57:ff:8e:95:b5:3b:7c:
         5b:cd:77:b4:1d:18:b4:4e:bb:4d:6d:8f:c2:64:83:4e:d7:48:
         37:f4:44:73:70:3f:78:77:69:83:57:60:60:44:9b:5a:dc:42:
         76:72:7c:29:21:ff:2c:62:42:2a:37:a7:85:61:c1:7e:08:96:
         75:b9:33:f9:1b:4b:45:12:cb:30:05:61:d6:db:10:08:22:a8:
         d2:1c:fe:58:63:af:34:ea:25:05:72:72:60:bf:14:69:32:a4:
         73:bf:b6:09:8d:4c:52:d7:2b:7f:75:fe:aa:0d:31:77:de:f1:
         79:07:b3:7a:d1:22:ca:00:f7:28:0b:de:2f:1d:a8:c6:ad:fb:
         e8:f7:3c:f8:57:6f:3e:29:e6:16:d1:f7:97:5f:38:f0:ed:21:
         2e:73:e2:b5:b8:ee:13:6f:17:bd:ba:f9:e1:11:37:a5:c5:41:
         4d:88:ad:f4
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHFW06TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
N2VkYWRjNzY1ZmE4ZjJmYTE5ZWIyMDk2M2NmNWJkMjM1ZDAxYjQzMB4XDTIyMDEw
MTA2NTgzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWFjNWQxZGVjZDQx
ZjEyMWZjYTJlMDc3ODZiY2VlY2Q2ZmRlNDY0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI8XpA9FvS95qZwCL+usJ2wwXeZ13hQ3SCyjURlDuxkDYHaK
pQSOL+4vQh2tU/ydirNyyhefgFk/Ik5XwdLeKU+iMCrPFPDmOvKhN8vQrvnNqM3A
R3QCmeUxNR6q/gV2MM88FGOlzVjaSSeHvG5iNZfpqf8IfULwRAqXnGq7DivW1GgK
Lb5z3bfaggpiPaWJ7jhgWdgumywzydDNarO0iovGGkoK2X3qMQl9KHS+f+ERPVlg
K8jFgMxLOzCavai1Yq0XAHozm0tKwimGCCjWK0iOS+YOiTA9zTuQXQvg8DHkPml4
EZcE/e9Sf/7eTpGNC2r44BfnzjNJ7sw5BnBYeScCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSqxdHezUHxIfyi4HeGvO7Nb95GQzAfBgNVHSMEGDAWgBRn7a3HZfqPL6Ge
sgljz1vSNdAbQzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1otMnR4Mlg2anktaG5ySUpZODliMGpYUUcwTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNjYzYzZjLTEzYmYtNDQwMC04NDgyLTIxZTBhNjZkNTQ0NC8x
L3FzWFIzczFCOFNIOG91QjNocnp1eldfZVJrTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NjYzYzZjLTEzYmYtNDQwMC04NDgyLTIxZTBhNjZkNTQ0NC8xL1otMnR4Mlg2ankt
aG5ySUpZODliMGpYUUcwTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArL7MAMEAbL7NjANBgkqhkiG9w0B
AQsFAAOCAQEAsVVzhauLfbVU2FR0vyPYr1Uf9nYzqopwbgkCHvynebzA/1NrQQCc
vG4ArkuKc/eDsn+nYInbI8CJ2NI6MQ3FanTVxNTlosux578xbIpkUhqhK31X/46V
tTt8W813tB0YtE67TW2PwmSDTtdIN/REc3A/eHdpg1dgYESbWtxCdnJ8KSH/LGJC
KjenhWHBfgiWdbkz+RtLRRLLMAVh1tsQCCKo0hz+WGOvNOolBXJyYL8UaTKkc7+2
CY1MUtcrf3X+qg0xd97xeQezetEiygD3KAveLx2oxq376Pc8+FdvPinmFtH3l184
8O0hLnPitbjuE28Xvbr54RE3pcVBTYit9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:35 2024 by rpki-client on console-ams.rpki-client.org