Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/4LnwIpYBD8oTycyDJIYRhJvHZ8Q.roa
File:                     4LnwIpYBD8oTycyDJIYRhJvHZ8Q.roa (raw, json)
Hash identifier:          nt0sbAfhA/aSxPaRjIg6zVc04U85dMxSTp4QI56zqnc=
Subject key identifier:   E0:B9:F0:22:96:01:0F:CA:13:C9:CC:83:24:86:11:84:9B:C7:67:C4
Certificate issuer:       /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial:       06D11662
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/4LnwIpYBD8oTycyDJIYRhJvHZ8Q.roa
Signing time:             Sat 01 Jan 2022 03:59:26 +0000
ROA not before:           Sat 01 Jan 2022 03:59:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61244
IP address blocks:        46.236.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114366050 (0x6d11662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
        Validity
            Not Before: Jan  1 03:59:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0b9f02296010fca13c9cc83248611849bc767c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:a8:a7:a6:13:fc:0a:95:ef:23:9a:39:43:
                    07:17:ef:e4:c0:2a:95:c6:33:3a:8f:64:f2:db:1c:
                    db:10:7b:89:6b:48:f1:3c:db:09:5f:b5:dd:40:76:
                    e5:b9:64:34:94:a3:5f:28:60:09:20:38:6b:5f:e3:
                    10:a9:3a:55:c8:6c:88:55:6c:67:e0:c5:8c:48:f5:
                    7c:71:97:a5:88:0b:e7:cc:78:52:f2:b8:0c:dc:df:
                    c3:70:3b:4e:cd:07:25:ac:9b:39:de:75:90:8a:69:
                    cd:e3:b9:95:04:5b:c0:5c:a3:5d:8f:b0:78:88:2f:
                    b0:70:b7:a7:eb:e1:27:ab:3a:8b:45:7a:f3:b3:c0:
                    10:00:ca:56:88:0d:ba:65:67:58:d3:2c:d1:da:c9:
                    53:68:0a:1e:c4:c9:33:0d:bb:39:84:c7:2e:1b:62:
                    1b:62:db:e8:91:9b:f7:1b:51:56:3e:8f:3b:a4:a7:
                    03:9e:7a:c3:aa:cd:5c:7c:74:88:35:ce:8c:a7:d9:
                    1d:ed:65:f8:d8:6a:d6:18:4f:ad:ce:77:06:cc:63:
                    4d:09:2c:62:9e:1b:c9:a7:f4:6b:8c:de:5f:cd:a9:
                    aa:46:1a:77:01:ef:64:e2:f8:da:cc:29:d8:e1:1a:
                    80:94:ca:d0:e3:75:d5:fd:59:27:ef:7b:ec:31:c4:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B9:F0:22:96:01:0F:CA:13:C9:CC:83:24:86:11:84:9B:C7:67:C4
            X509v3 Authority Key Identifier:
                keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/4LnwIpYBD8oTycyDJIYRhJvHZ8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.236.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:81:6d:d1:6c:49:68:b5:ff:d3:b6:1b:1b:3a:fd:ea:00:14:
         25:59:21:e4:66:ec:a0:4f:eb:76:a8:5c:e4:c7:40:83:ae:f9:
         26:a8:63:5b:f0:0a:a1:c7:ae:55:88:d9:5f:8e:b9:5e:32:ce:
         6d:3f:46:06:e9:f4:17:da:86:ae:f4:0e:05:8f:86:f7:a6:6b:
         cb:f8:0e:6b:f5:9e:c8:90:a4:23:e9:b3:2a:9f:14:42:1e:7f:
         33:5a:ba:93:71:af:10:7a:bf:3e:93:53:24:0e:df:af:9c:9d:
         f5:ff:c5:11:b4:1a:a1:d4:c4:d6:b2:d7:32:8e:25:0f:50:9b:
         1b:28:48:37:42:ff:f2:35:68:3a:98:6d:8a:34:63:dc:5f:1e:
         8a:a4:34:e2:68:b2:76:39:4b:18:dc:71:20:42:7e:f6:cf:38:
         ff:ec:ad:ce:38:74:5d:30:f4:19:36:30:97:af:49:b2:47:ca:
         4d:d1:74:30:70:59:69:32:69:c9:e1:eb:05:5a:e2:65:83:72:
         d2:38:a9:1a:8a:69:53:77:03:e9:57:35:b1:1f:fe:97:16:83:
         4c:c3:07:c4:c3:b5:ff:b7:d9:20:43:93:34:0b:93:c9:6e:49:
         5a:b4:3d:b8:84:cb:69:64:4e:84:18:ce:1c:5a:12:ab:4e:6d:
         f9:5f:c0:01
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBtEWYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MmIxMmU4ZGYzYWJkNTU1OWY5Y2Y5NjgwYWY2NWRkMTY1ODlkZTg2MB4XDTIyMDEw
MTAzNTkyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTBiOWYwMjI5NjAx
MGZjYTEzYzljYzgzMjQ4NjExODQ5YmM3NjdjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJWhqKemE/wKle8jmjlDBxfv5MAqlcYzOo9k8tsc2xB7iWtI
8TzbCV+13UB25blkNJSjXyhgCSA4a1/jEKk6VchsiFVsZ+DFjEj1fHGXpYgL58x4
UvK4DNzfw3A7Ts0HJaybOd51kIppzeO5lQRbwFyjXY+weIgvsHC3p+vhJ6s6i0V6
87PAEADKVogNumVnWNMs0drJU2gKHsTJMw27OYTHLhtiG2Lb6JGb9xtRVj6PO6Sn
A556w6rNXHx0iDXOjKfZHe1l+Nhq1hhPrc53BsxjTQksYp4byaf0a4zeX82pqkYa
dwHvZOL42swp2OEagJTK0ON11f1ZJ+977DHEFzUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgufAilgEPyhPJzIMkhhGEm8dnxDAfBgNVHSMEGDAWgBSisS6N86vVVZ+c
+WgK9l3RZYnehjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29yRXVqZk9yMVZXZm5QbG9DdlpkMFdXSjNvWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZWM0NGVhLWVmNDMtNGIzYS1hNjlhLWI0Y2I2MzdkYThjMy8x
LzRMbndJcFlCRDhvVHljeURKSVlSaEp2SFo4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZWM0NGVhLWVmNDMtNGIzYS1hNjlhLWI0Y2I2MzdkYThjMy8xL29yRXVqZk9yMVZX
Zm5QbG9DdlpkMFdXSjNvWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBS7s4DANBgkqhkiG9w0BAQsFAAOC
AQEAToFt0WxJaLX/07YbGzr96gAUJVkh5GbsoE/rdqhc5MdAg675JqhjW/AKoceu
VYjZX465XjLObT9GBun0F9qGrvQOBY+G96Zry/gOa/WeyJCkI+mzKp8UQh5/M1q6
k3GvEHq/PpNTJA7fr5yd9f/FEbQaodTE1rLXMo4lD1CbGyhIN0L/8jVoOphtijRj
3F8eiqQ04miydjlLGNxxIEJ+9s84/+ytzjh0XTD0GTYwl69JskfKTdF0MHBZaTJp
yeHrBVriZYNy0jipGoppU3cD6Vc1sR/+lxaDTMMHxMO1/7fZIEOTNAuTyW5JWrQ9
uITLaWROhBjOHFoSq05t+V/AAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org