Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/vurAmjLTUQd5JGyQBKUstU3ZZ8k.roa
File:                     vurAmjLTUQd5JGyQBKUstU3ZZ8k.roa (raw, json)
Hash identifier:          bFcWyT1aLTdclRR4FmKidrQWal4zyGOGT9fQ4jrnZEg=
Subject key identifier:   BE:EA:C0:9A:32:D3:51:07:79:24:6C:90:04:A5:2C:B5:4D:D9:67:C9
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       02123A9C
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/vurAmjLTUQd5JGyQBKUstU3ZZ8k.roa
Signing time:             Sat 01 Jan 2022 03:02:00 +0000
ROA not before:           Sat 01 Jan 2022 03:02:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201720
IP address blocks:        185.56.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34749084 (0x2123a9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: Jan  1 03:02:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=beeac09a32d3510779246c9004a52cb54dd967c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:33:ad:90:84:17:95:00:e3:78:c5:48:39:
                    41:d2:e2:d7:82:12:10:c9:b7:2e:fa:1a:13:a5:2d:
                    86:de:33:4b:1e:47:c1:d7:40:45:18:6b:b2:6f:aa:
                    33:72:04:5a:cd:5c:3b:d7:ee:54:bf:0d:dc:23:2b:
                    69:c4:e2:2f:be:f2:66:2c:10:e9:a6:99:3a:00:eb:
                    00:ef:ab:11:1b:ce:6e:80:dd:c0:28:7a:98:8a:e4:
                    eb:dc:cf:e7:3c:b6:b5:6a:ef:0a:be:e6:51:a7:a2:
                    55:e7:e9:3a:77:43:aa:32:fb:4e:b6:e0:68:a4:a4:
                    12:bb:5d:88:95:24:8d:11:95:d1:17:0f:0d:86:e5:
                    3e:1b:eb:bc:c6:7f:8b:55:cc:59:20:6c:b5:0d:15:
                    0b:37:88:46:af:a4:11:18:13:ed:57:a2:1c:80:ee:
                    50:1e:16:ce:53:4f:9b:8e:2d:80:d7:ee:88:4b:67:
                    06:fe:43:cf:28:67:ee:9d:91:ff:9f:37:ba:3d:5c:
                    f8:06:59:92:60:27:8a:37:f6:39:13:fe:4b:cf:38:
                    06:70:fb:1c:9f:5b:7d:7c:8c:67:96:3f:eb:3d:9c:
                    ff:02:52:2a:7c:94:26:8d:dc:1d:23:26:92:8c:49:
                    a9:87:23:8d:e9:be:ae:60:f7:75:64:c7:4e:ee:12:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:C0:9A:32:D3:51:07:79:24:6C:90:04:A5:2C:B5:4D:D9:67:C9
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/vurAmjLTUQd5JGyQBKUstU3ZZ8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:0a:a3:3f:e8:31:c3:a9:dd:65:ae:04:a3:ee:29:4c:9e:24:
         a4:cb:05:3f:f6:4a:72:da:aa:31:5d:ce:9b:75:56:00:b4:3b:
         b6:1f:52:c8:1c:b8:1b:05:54:23:a2:70:9e:12:d2:40:b5:c8:
         ba:8d:41:40:f9:2b:f5:66:9e:8d:84:cf:e9:68:7b:b6:ef:e3:
         ed:38:8a:65:e0:cc:54:a2:a3:11:98:40:b7:37:07:bd:fe:1a:
         94:80:e5:8c:71:ba:a4:bd:11:3e:5e:9f:5b:70:f5:39:1f:40:
         20:02:12:8f:80:63:66:af:70:9c:c4:22:f5:5b:1c:92:56:55:
         b0:b4:4d:12:10:03:cf:0b:ad:ed:9a:2b:0d:16:cc:f2:5e:d5:
         42:09:6d:cb:c4:68:b6:c0:c8:0c:15:5c:30:8c:5b:cb:2a:aa:
         5d:7b:a7:6b:da:77:d9:9b:fa:b7:57:ee:40:64:11:35:4b:8f:
         0a:13:54:29:54:47:9a:b2:3f:07:f7:6a:fe:2d:b7:a4:32:22:
         cb:16:70:2d:d2:41:9a:d2:c9:94:62:f4:e1:22:d8:2a:84:5f:
         da:7f:4f:87:58:2e:d0:29:59:d5:6b:ca:a8:a8:27:df:5d:72:
         49:ec:09:50:1c:90:84:b1:e1:d4:e3:23:82:8b:50:69:59:5c:
         db:24:32:d7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAhI6nDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NDAwZjk1M2FkYmZkYjUyYjc4ODE1ZmVjZmMwZThjZGUwOTc2MmMzMB4XDTIyMDEw
MTAzMDIwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmVlYWMwOWEzMmQz
NTEwNzc5MjQ2YzkwMDRhNTJjYjU0ZGQ5NjdjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdxM62QhBeVAON4xUg5QdLi14ISEMm3LvoaE6Utht4zSx5H
wddARRhrsm+qM3IEWs1cO9fuVL8N3CMracTiL77yZiwQ6aaZOgDrAO+rERvOboDd
wCh6mIrk69zP5zy2tWrvCr7mUaeiVefpOndDqjL7TrbgaKSkErtdiJUkjRGV0RcP
DYblPhvrvMZ/i1XMWSBstQ0VCzeIRq+kERgT7VeiHIDuUB4WzlNPm44tgNfuiEtn
Bv5Dzyhn7p2R/583uj1c+AZZkmAnijf2ORP+S884BnD7HJ9bfXyMZ5Y/6z2c/wJS
KnyUJo3cHSMmkoxJqYcjjem+rmD3dWTHTu4Sq30CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+6sCaMtNRB3kkbJAEpSy1TdlnyTAfBgNVHSMEGDAWgBRkAPlTrb/bUreI
Ff7PwOjN4JdiwzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pBRDVVNjJfMjFLM2lCWC16OERvemVDWFlzTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvODMwOGZmLWZlYzgtNDhjYi05NDg1LTU2M2MxMGRlYzgwZC8x
L3Z1ckFtakxUVVFkNUpHeVFCS1VzdFUzWlo4ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
ODMwOGZmLWZlYzgtNDhjYi05NDg1LTU2M2MxMGRlYzgwZC8xL1pBRDVVNjJfMjFL
M2lCWC16OERvemVDWFlzTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArk4pDANBgkqhkiG9w0BAQsFAAOC
AQEAcgqjP+gxw6ndZa4Eo+4pTJ4kpMsFP/ZKctqqMV3Om3VWALQ7th9SyBy4GwVU
I6JwnhLSQLXIuo1BQPkr9WaejYTP6Wh7tu/j7TiKZeDMVKKjEZhAtzcHvf4alIDl
jHG6pL0RPl6fW3D1OR9AIAISj4BjZq9wnMQi9VscklZVsLRNEhADzwut7ZorDRbM
8l7VQglty8RotsDIDBVcMIxbyyqqXXuna9p32Zv6t1fuQGQRNUuPChNUKVRHmrI/
B/dq/i23pDIiyxZwLdJBmtLJlGL04SLYKoRf2n9Ph1gu0ClZ1WvKqKgn311ySewJ
UByQhLHh1OMjgotQaVlc2yQy1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:16 2024 by rpki-client on console-ams.rpki-client.org