Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/e0KBvyCzPwXU_hGLelXyVzcvWkU.roa
File:                     e0KBvyCzPwXU_hGLelXyVzcvWkU.roa (raw, json)
Hash identifier:          XgqA1anJX6dl1gJN6is5EUt738L9skLC1C+Bfm6Bbcg=
Subject key identifier:   7B:42:81:BF:20:B3:3F:05:D4:FE:11:8B:7A:55:F2:57:37:2F:5A:45
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       018262C6F891B4F882A7DE311E1BE0471C84
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/e0KBvyCzPwXU_hGLelXyVzcvWkU.roa
Signing time:             Wed 03 Aug 2022 08:16:23 +0000
ROA not before:           Wed 03 Aug 2022 08:16:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15828
IP address blocks:        46.148.38.0/24 maxlen: 24
                          46.148.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:62:c6:f8:91:b4:f8:82:a7:de:31:1e:1b:e0:47:1c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Aug  3 08:16:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b4281bf20b33f05d4fe118b7a55f257372f5a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:56:a1:ab:a8:f4:6e:72:a2:89:bf:20:99:
                    90:c2:46:7c:2b:17:a3:c5:38:44:d2:68:e0:19:90:
                    32:12:21:97:22:04:e4:73:68:e4:de:a1:b2:bf:24:
                    97:5f:c8:df:86:3f:c8:a2:e1:3e:b1:cb:86:81:57:
                    4b:08:f4:28:4d:28:91:b9:e8:ef:e4:0d:ba:60:73:
                    be:b8:13:a7:b5:24:a1:d2:f2:95:a4:af:a6:bf:74:
                    88:c6:d6:eb:e0:db:c6:8e:b9:39:b9:d1:ba:6d:3c:
                    cb:b0:fb:83:7c:5a:02:a8:fd:ed:af:52:cb:3b:6b:
                    e4:56:5a:4b:e9:cc:cc:49:ba:08:8d:2a:c0:04:ad:
                    c0:2a:b5:15:bc:41:ed:89:b9:4e:b0:2a:f5:b1:bb:
                    17:b4:88:0d:30:cb:c9:7f:e4:29:8b:c1:2c:f8:95:
                    4b:85:c0:06:bb:b6:1e:f4:fb:47:fb:b9:11:41:60:
                    9f:29:31:3f:49:4d:a5:80:42:60:13:ca:66:47:c9:
                    fb:e3:e7:69:2b:9a:14:aa:cb:15:a2:df:41:98:38:
                    e4:a7:32:20:f4:78:ee:08:3a:2b:76:ca:90:01:d4:
                    48:6d:98:79:5b:18:74:d8:36:d3:ed:af:1e:a3:f6:
                    98:b9:4c:1b:56:fd:bb:55:f9:ba:28:bc:4e:1d:68:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:81:BF:20:B3:3F:05:D4:FE:11:8B:7A:55:F2:57:37:2F:5A:45
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/e0KBvyCzPwXU_hGLelXyVzcvWkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.38.0/24
                  46.148.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:05:73:12:c9:1d:c1:ca:9b:6a:72:b6:a2:9e:2e:40:b8:54:
         12:af:a7:11:16:fd:38:4f:29:56:9a:85:3a:f3:ad:3e:cd:1c:
         2d:a9:7e:42:90:cf:a0:1f:37:7e:38:bb:53:ca:6a:d8:fe:9f:
         61:3c:66:54:1b:38:80:00:da:c9:b2:a6:a3:ef:ef:50:43:4b:
         56:51:63:27:73:43:d0:24:75:84:6d:f0:0c:6b:be:92:33:b4:
         6f:ce:42:2b:02:f7:96:f7:f0:46:2b:20:d4:41:58:82:30:0c:
         69:e9:db:f4:34:63:9e:b7:bf:9a:59:f5:be:83:0a:2b:d3:25:
         35:73:56:13:17:07:fc:9d:0e:47:2a:f1:e6:c5:20:f6:fd:c8:
         8d:fb:00:85:8c:26:a5:3d:fd:68:c5:50:18:e5:22:b7:47:38:
         83:fe:b4:4b:5c:70:42:8f:93:9f:33:2c:55:81:df:ec:6f:fc:
         3f:c0:12:10:5d:cb:35:0a:eb:d8:cd:db:36:93:08:a5:e7:ff:
         76:8c:21:7c:24:c0:7a:15:12:33:20:ba:e4:30:5a:f1:3f:2f:
         75:6b:71:9d:06:b8:b4:40:a1:02:c0:6b:3e:ae:5f:c0:36:b1:
         07:4b:c2:ec:4a:e4:cf:5e:33:1d:59:9b:0e:a2:77:00:a3:cf:
         21:97:47:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJixviRtPiCp94xHhvgRxyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjIwODAzMDgxNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjQyODFiZjIwYjMzZjA1ZDRmZTExOGI3YTU1ZjI1NzM3MmY1YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJBWoauo9G5yoom/IJmQwkZ8Kxej
xThE0mjgGZAyEiGXIgTkc2jk3qGyvySXX8jfhj/IouE+scuGgVdLCPQoTSiRuejv
5A26YHO+uBOntSSh0vKVpK+mv3SIxtbr4NvGjrk5udG6bTzLsPuDfFoCqP3tr1LL
O2vkVlpL6czMSboIjSrABK3AKrUVvEHtiblOsCr1sbsXtIgNMMvJf+Qpi8Es+JVL
hcAGu7Ye9PtH+7kRQWCfKTE/SU2lgEJgE8pmR8n74+dpK5oUqssVot9BmDjkpzIg
9HjuCDordsqQAdRIbZh5Wxh02DbT7a8eo/aYuUwbVv27Vfm6KLxOHWhMMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHtCgb8gsz8F1P4Ri3pV8lc3L1pFMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEvZTBLQnZ5Q3pQd1hVX2hHTGVsWHlWemN2V2tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALpQmAwQA
LpQoMA0GCSqGSIb3DQEBCwUAA4IBAQAiBXMSyR3Byptqcraini5AuFQSr6cRFv04
TylWmoU6860+zRwtqX5CkM+gHzd+OLtTymrY/p9hPGZUGziAANrJsqaj7+9QQ0tW
UWMnc0PQJHWEbfAMa76SM7RvzkIrAveW9/BGKyDUQViCMAxp6dv0NGOet7+aWfW+
gwor0yU1c1YTFwf8nQ5HKvHmxSD2/ciN+wCFjCalPf1oxVAY5SK3RziD/rRLXHBC
j5OfMyxVgd/sb/w/wBIQXcs1CuvYzds2kwil5/92jCF8JMB6FRIzILrkMFrxPy91
a3GdBri0QKECwGs+rl/ANrEHS8LsSuTPXjMdWZsOoncAo88hl0dV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org