Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/TaEoFlw0wUEJ7Ax0kn-nIr8ENDQ.roa
File:                     TaEoFlw0wUEJ7Ax0kn-nIr8ENDQ.roa (raw, json)
Hash identifier:          4rq0FS3/5iGWTWKhhdD749GPxoDQWHy4xSKuqV3sd48=
Subject key identifier:   4D:A1:28:16:5C:34:C1:41:09:EC:0C:74:92:7F:A7:22:BF:04:34:34
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       018379797D460DAD41DDC66A6EA44537920D
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/TaEoFlw0wUEJ7Ax0kn-nIr8ENDQ.roa
Signing time:             Mon 26 Sep 2022 11:05:48 +0000
ROA not before:           Mon 26 Sep 2022 11:05:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39650
IP address blocks:        185.125.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:79:79:7d:46:0d:ad:41:dd:c6:6a:6e:a4:45:37:92:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Sep 26 11:05:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4da128165c34c14109ec0c74927fa722bf043434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:6d:f4:7f:da:97:d6:50:d6:9d:70:ea:44:
                    f7:54:d8:00:12:92:5f:d0:b9:e3:00:72:50:3b:0f:
                    45:c6:6f:89:e9:3f:bd:cc:9d:ff:44:d3:6d:41:2e:
                    4e:d6:5e:ec:1b:22:32:88:12:65:6f:85:22:19:1f:
                    7c:f1:84:5f:63:40:8d:04:20:d5:3a:50:04:69:b8:
                    e5:e7:72:06:f4:33:1b:21:54:be:f1:3f:03:43:39:
                    f3:fa:fe:6d:45:4c:51:14:9e:b3:ff:ae:36:9b:82:
                    fb:d3:96:31:7f:59:0f:09:15:96:24:27:9b:18:e1:
                    a8:ab:a8:0c:00:13:cf:07:e7:57:59:78:62:1b:51:
                    09:00:3f:ca:8b:93:44:0c:0e:bc:10:cf:32:4b:60:
                    b1:d2:85:4f:53:90:3d:23:b7:19:42:e1:61:3b:13:
                    c1:33:5b:dd:9b:dc:52:5b:2d:63:27:19:b6:44:f7:
                    02:c2:a9:62:b1:b9:f6:8f:58:5e:d7:97:0b:8f:ae:
                    11:63:2c:87:43:4c:87:ec:13:d2:4c:0b:74:f7:e5:
                    99:11:87:36:73:3c:9a:f3:54:e7:e3:60:6c:d2:02:
                    a7:c0:b8:31:05:da:7b:a7:2a:56:88:fe:68:d3:1c:
                    5b:d5:88:bd:31:ae:10:7b:99:ab:42:4f:26:b3:29:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A1:28:16:5C:34:C1:41:09:EC:0C:74:92:7F:A7:22:BF:04:34:34
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/TaEoFlw0wUEJ7Ax0kn-nIr8ENDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.125.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:67:7c:ad:df:12:77:2a:e6:d4:16:48:d4:ff:d3:0b:8d:
         75:bb:bb:db:d6:33:c7:0f:5a:fb:d8:25:f2:42:b2:9a:91:95:
         e2:55:5b:61:ef:f9:35:a3:80:f5:d4:16:6a:58:7a:36:62:85:
         58:1d:26:fd:a4:51:b8:47:97:5d:8a:d9:e8:fb:43:c4:a8:a0:
         89:06:07:95:aa:18:de:60:6e:0b:1c:d1:4d:6a:70:fb:81:ab:
         09:ef:fc:ec:20:87:d7:ab:23:0d:d7:67:41:79:c0:15:c1:83:
         62:a7:33:b3:27:dd:51:5e:e8:6c:8e:98:f8:54:74:36:8b:83:
         38:70:f3:2e:e0:9b:67:c5:0b:02:0b:c7:46:93:f9:5a:67:78:
         62:85:bf:e0:8f:11:b1:1a:eb:64:07:01:b9:ad:35:5b:0a:0b:
         b6:63:f9:4a:f4:bf:ef:86:5a:93:cd:59:58:0a:fe:12:6e:92:
         1a:89:56:69:7c:71:6d:57:f7:6d:ba:44:8f:36:b0:bc:d8:78:
         ad:5b:e3:78:c5:09:d5:2c:85:70:e9:f6:5f:e6:06:25:27:89:
         78:08:99:b7:8a:7b:45:bb:b1:d2:d8:30:82:06:71:c8:9b:f1:
         f0:db:f8:13:b8:01:69:4b:2a:ed:cd:ea:63:58:0b:54:d2:0b:
         9d:18:a2:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN5eX1GDa1B3cZqbqRFN5INMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjIwOTI2MTEwNTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGExMjgxNjVjMzRjMTQxMDllYzBjNzQ5MjdmYTcyMmJmMDQzNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl65t9H/al9ZQ1p1w6kT3VNgAEpJf
0LnjAHJQOw9Fxm+J6T+9zJ3/RNNtQS5O1l7sGyIyiBJlb4UiGR988YRfY0CNBCDV
OlAEabjl53IG9DMbIVS+8T8DQznz+v5tRUxRFJ6z/642m4L705Yxf1kPCRWWJCeb
GOGoq6gMABPPB+dXWXhiG1EJAD/Ki5NEDA68EM8yS2Cx0oVPU5A9I7cZQuFhOxPB
M1vdm9xSWy1jJxm2RPcCwqlisbn2j1he15cLj64RYyyHQ0yH7BPSTAt09+WZEYc2
czya81Tn42Bs0gKnwLgxBdp7pypWiP5o0xxb1Yi9Ma4Qe5mrQk8msyldHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2hKBZcNMFBCewMdJJ/pyK/BDQ0MB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvVGFFb0ZsdzB3VUVKN0F4MGtuLW5JcjhFTkRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX30MA0G
CSqGSIb3DQEBCwUAA4IBAQB8uWd8rd8Sdyrm1BZI1P/TC411u7vb1jPHD1r72CXy
QrKakZXiVVth7/k1o4D11BZqWHo2YoVYHSb9pFG4R5dditno+0PEqKCJBgeVqhje
YG4LHNFNanD7gasJ7/zsIIfXqyMN12dBecAVwYNipzOzJ91RXuhsjpj4VHQ2i4M4
cPMu4JtnxQsCC8dGk/laZ3hihb/gjxGxGutkBwG5rTVbCgu2Y/lK9L/vhlqTzVlY
Cv4SbpIaiVZpfHFtV/dtukSPNrC82HitW+N4xQnVLIVw6fZf5gYlJ4l4CJm3intF
u7HS2DCCBnHIm/Hw2/gTuAFpSyrtzepjWAtU0gudGKIp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org