Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3135302e3234332e302f32342d3234203d3e203537353738.roa
File:                     34352e3135302e3234332e302f32342d3234203d3e203537353738.roa (raw, json)
Hash identifier:          SHNGbN+wfei6tc5kCxTPNjGHVaN3Ptq2MGkhKXh2BsA=
Subject key identifier:   96:2F:4A:F8:6C:57:BD:FB:BF:E9:25:8C:EA:49:1C:B4:02:B9:FA:24
Certificate issuer:       /CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Certificate serial:       6BC580C76DBD8BD8CDB35F7B5F446903B33B02F3
Authority key identifier: E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234332e302f32342d3234203d3e203537353738.roa
Signing time:             Tue 14 Jun 2022 23:15:01 +0000
ROA not before:           Tue 14 Jun 2022 23:10:01 +0000
ROA not after:            Tue 13 Jun 2023 23:15:01 +0000
asID:                     57578
IP address blocks:        45.150.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c5:80:c7:6d:bd:8b:d8:cd:b3:5f:7b:5f:44:69:03:b3:3b:02:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
        Validity
            Not Before: Jun 14 23:10:01 2022 GMT
            Not After : Jun 13 23:15:01 2023 GMT
        Subject: CN=962F4AF86C57BDFBBFE9258CEA491CB402B9FA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0b:b8:eb:8c:cb:a0:a4:ad:64:e8:c0:75:01:
                    f7:b8:3a:0a:19:7b:b9:1e:9f:89:97:f8:86:7e:ff:
                    4f:89:06:e6:33:c3:c3:a0:de:a5:a7:04:f0:f3:54:
                    2b:28:28:e5:eb:29:d9:9b:36:27:af:a4:be:ec:f1:
                    12:0b:10:5d:13:08:b2:e7:c5:eb:8d:14:b4:71:01:
                    e2:71:b2:b5:65:95:95:1b:62:63:99:3f:0c:d8:8a:
                    d4:f7:0f:ca:ff:d1:76:52:51:a4:96:93:80:d2:72:
                    9f:70:c4:f3:7e:9e:44:f0:5c:b3:3f:5e:71:4c:0a:
                    aa:8b:74:bf:e6:a2:f6:3c:9d:f0:b1:02:61:6c:08:
                    b1:07:e1:a9:d3:23:6d:98:80:6a:d1:3f:81:a2:e2:
                    c7:cb:0f:d6:7c:7d:75:13:56:cf:fe:61:fc:2c:8e:
                    00:c9:68:f0:b8:15:9c:ef:66:41:b3:e7:4c:ee:40:
                    78:1b:b8:e8:fc:60:44:c8:07:7d:72:a7:9a:60:2f:
                    f9:90:14:d8:93:0b:47:94:cd:20:c5:21:7f:0e:7a:
                    51:37:a1:59:09:ac:a4:7e:33:e9:95:df:8b:10:9c:
                    da:9e:11:20:dd:cb:ad:6f:43:dc:64:88:a0:66:36:
                    81:41:aa:88:d4:3d:51:1f:54:92:a4:0f:62:1d:e8:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2F:4A:F8:6C:57:BD:FB:BF:E9:25:8C:EA:49:1C:B4:02:B9:FA:24
            X509v3 Authority Key Identifier:
                keyid:E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/E36A3CBCB6635D140F694B0CD99D1CD62456DE2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234332e302f32342d3234203d3e203537353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b7:8f:27:de:56:f4:77:97:ab:85:88:b9:a1:d4:62:ee:af:
         f6:01:2d:ed:1e:df:d3:76:0a:bb:38:b6:4f:9b:ec:ea:41:e8:
         dc:dd:24:56:cb:c8:98:52:54:d4:bf:24:dc:94:f6:b6:64:d3:
         11:54:b3:3d:48:18:4a:cd:31:b3:7d:37:41:76:6a:bc:8d:c2:
         22:49:8a:53:a1:8e:53:9e:e7:4f:c2:5e:13:3e:cd:8a:07:98:
         1c:cd:d1:82:e4:8d:fd:cb:bd:9e:ba:20:a8:da:16:aa:ae:a8:
         04:3d:0f:04:b7:34:35:d8:fc:ec:ba:90:0e:16:67:47:72:7e:
         1f:a6:65:66:3c:40:a8:1f:13:15:81:40:d2:0b:c4:64:61:c3:
         29:68:2a:b6:c2:be:ef:3d:b0:5d:a7:2a:d1:3b:65:e3:81:a9:
         aa:21:9c:ea:91:5d:e2:03:fe:64:74:d9:25:78:81:a3:46:ed:
         5a:aa:16:14:ae:c4:86:e9:ef:81:a5:57:17:4a:db:d7:ac:90:
         aa:90:b3:02:1c:74:6f:db:80:2c:8c:91:69:4c:c9:82:15:74:
         87:26:57:c6:cf:0e:29:32:eb:5e:ca:f6:1f:48:17:9e:83:b4:
         4a:49:04:1b:34:5b:b9:6d:43:1f:02:1d:ac:80:fb:cd:60:8d:
         bc:a9:18:a7
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUa8WAx229i9jNs197X0RpA7M7AvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTM2YTNjYmNiNjYzNWQxNDBmNjk0YjBjZDk5ZDFjZDYy
NDU2ZGUyZTAeFw0yMjA2MTQyMzEwMDFaFw0yMzA2MTMyMzE1MDFaMDMxMTAvBgNV
BAMTKDk2MkY0QUY4NkM1N0JERkJCRkU5MjU4Q0VBNDkxQ0I0MDJCOUZBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxC7jrjMugpK1k6MB1Afe4OgoZ
e7ken4mX+IZ+/0+JBuYzw8Og3qWnBPDzVCsoKOXrKdmbNievpL7s8RILEF0TCLLn
xeuNFLRxAeJxsrVllZUbYmOZPwzYitT3D8r/0XZSUaSWk4DScp9wxPN+nkTwXLM/
XnFMCqqLdL/movY8nfCxAmFsCLEH4anTI22YgGrRP4Gi4sfLD9Z8fXUTVs/+Yfws
jgDJaPC4FZzvZkGz50zuQHgbuOj8YETIB31yp5pgL/mQFNiTC0eUzSDFIX8OelE3
oVkJrKR+M+mV34sQnNqeESDdy61vQ9xkiKBmNoFBqojUPVEfVJKkD2Id6DtNAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUli9K+GxXvfu/6SWM6kkctAK5+iQwHwYDVR0j
BBgwFoAU42o8vLZjXRQPaUsM2Z0c1iRW3i4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
L0UzNkEzQ0JDQjY2MzVEMTQwRjY5NEIwQ0Q5OUQxQ0Q2MjQ1NkRFMkUuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC80Mm84dkxaalhSUVBhVXNNMlowYzFpUlczaTQu
Y2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzQzNTJlMzEzNTMwMmUzMjM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM3MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZbzMA0GCSqG
SIb3DQEBCwUAA4IBAQBWt48n3lb0d5erhYi5odRi7q/2AS3tHt/Tdgq7OLZPm+zq
Qejc3SRWy8iYUlTUvyTclPa2ZNMRVLM9SBhKzTGzfTdBdmq8jcIiSYpToY5TnudP
wl4TPs2KB5gczdGC5I39y72euiCo2haqrqgEPQ8EtzQ12PzsupAOFmdHcn4fpmVm
PECoHxMVgUDSC8RkYcMpaCq2wr7vPbBdpyrRO2XjgamqIZzqkV3iA/5kdNkleIGj
Ru1aqhYUrsSG6e+BpVcXStvXrJCqkLMCHHRv24AsjJFpTMmCFXSHJlfGzw4pMute
yvYfSBeeg7RKSQQbNFu5bUMfAh2sgPvNYI28qRin
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org