Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/6OF_-sUz-TFmNy8s-e2queqIobc.roa
File:                     6OF_-sUz-TFmNy8s-e2queqIobc.roa (raw, json)
Hash identifier:          oyU2DNQ3H4X1JuZZTaAg8IJx468haLaHS5DHIQ/G5Ao=
Subject key identifier:   E8:E1:7F:FA:C5:33:F9:31:66:37:2F:2C:F9:ED:AA:B9:EA:88:A1:B7
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       16511056
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/6OF_-sUz-TFmNy8s-e2queqIobc.roa
Signing time:             Sat 01 Jan 2022 16:06:35 +0000
ROA not before:           Sat 01 Jan 2022 16:06:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        185.16.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374411350 (0x16511056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jan  1 16:06:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8e17ffac533f93166372f2cf9edaab9ea88a1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:55:9a:d3:bc:48:9e:05:9e:3b:80:7d:da:
                    3a:fa:ed:36:f9:71:f7:91:47:e9:bf:14:d5:0d:e1:
                    58:57:13:c9:85:77:46:52:57:c3:d5:ff:63:a1:97:
                    7b:23:25:61:4b:f5:d4:60:62:e6:f6:fa:31:48:63:
                    47:2e:2a:df:51:47:53:88:a4:7a:48:77:a3:84:a2:
                    ae:47:79:3a:ac:39:ff:d4:be:5f:28:9a:8b:51:88:
                    83:6e:26:5a:53:9c:57:ac:ba:98:27:61:93:4a:89:
                    2c:1c:31:0f:a0:29:2a:79:2f:ca:6f:39:a3:fb:e2:
                    7d:47:05:72:fc:be:63:65:ec:d7:27:c2:de:4d:83:
                    7a:f0:00:5b:16:7a:06:e9:aa:3b:d5:b6:d6:e5:c7:
                    44:38:3f:f6:7c:56:d9:3f:4b:2e:ee:c7:66:29:e6:
                    e5:8e:47:73:e0:0f:2e:65:03:b2:a9:f2:14:c8:5c:
                    65:c0:2d:96:21:a6:b3:8b:61:05:6a:99:27:9b:32:
                    d0:71:a5:2e:53:41:0b:ef:92:bf:a7:be:9b:83:87:
                    58:3e:1d:37:76:7c:0f:ef:9b:bd:dc:e9:c3:62:b7:
                    3b:14:97:72:25:8c:ea:0b:af:44:37:cb:34:00:15:
                    20:81:00:ba:51:f1:b6:24:b3:69:09:bd:4b:28:93:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:7F:FA:C5:33:F9:31:66:37:2F:2C:F9:ED:AA:B9:EA:88:A1:B7
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/6OF_-sUz-TFmNy8s-e2queqIobc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.16.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:11:18:20:a1:47:1d:2f:66:75:8f:a4:2d:63:2d:51:93:
         24:55:c9:36:78:81:bd:06:a9:63:ca:65:f3:61:20:f7:47:6f:
         7c:84:e2:2f:a5:5d:37:1d:f4:1d:cf:ac:ca:ea:5a:f8:fb:af:
         34:b4:c3:2a:ba:7d:08:a4:28:28:43:36:29:cd:1d:00:78:a5:
         ea:dd:ab:d3:61:15:d2:1b:4d:47:3d:2d:34:aa:e0:23:c9:83:
         2e:05:9a:e9:75:95:1d:6c:82:95:fb:09:ed:b2:06:4f:f2:41:
         c0:10:70:b5:b6:62:76:1b:ca:cf:e6:be:c1:43:7b:7b:47:28:
         26:81:fc:48:88:6f:30:ed:47:05:9b:fa:e3:f0:72:5f:eb:f8:
         ed:a1:11:69:7d:df:eb:bd:07:ce:c5:d6:02:50:cc:c4:41:95:
         69:c7:79:f1:13:0d:f9:ab:30:4e:2e:52:61:48:da:7f:0d:69:
         b4:dd:4c:53:bf:6f:58:bc:e6:6d:d2:64:c8:10:72:b0:8e:83:
         a9:f0:81:c3:ef:fc:e1:39:d8:66:5a:b3:1a:7c:3f:ae:e8:11:
         49:3e:9f:9a:09:55:e3:09:0b:de:bc:04:33:7a:f1:21:01:c0:
         1b:34:1f:58:0c:cb:29:a6:81:a6:47:93:e3:7b:b7:ee:b3:92:
         8a:51:ec:a5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFlEQVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZGI5MjZmOGM2MDNhYWI3OWNiNDZhODgzYmY2MzI1NjRhM2ZhYWJmMB4XDTIyMDEw
MTE2MDYzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZThlMTdmZmFjNTMz
ZjkzMTY2MzcyZjJjZjllZGFhYjllYTg4YTFiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdTVZrTvEieBZ47gH3aOvrtNvlx95FH6b8U1Q3hWFcTyYV3
RlJXw9X/Y6GXeyMlYUv11GBi5vb6MUhjRy4q31FHU4ikekh3o4Sirkd5Oqw5/9S+
Xyiai1GIg24mWlOcV6y6mCdhk0qJLBwxD6ApKnkvym85o/vifUcFcvy+Y2Xs1yfC
3k2DevAAWxZ6BumqO9W21uXHRDg/9nxW2T9LLu7HZinm5Y5Hc+APLmUDsqnyFMhc
ZcAtliGms4thBWqZJ5sy0HGlLlNBC++Sv6e+m4OHWD4dN3Z8D++bvdzpw2K3OxSX
ciWM6guvRDfLNAAVIIEAulHxtiSzaQm9SyiTcy0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTo4X/6xTP5MWY3Lyz57aq56oihtzAfBgNVHSMEGDAWgBTtuSb4xgOqt5y0
aog79jJWSj+qvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzdia20tTVlEcXJlY3RHcUlPX1l5VmtvX3FyOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNTZjOTM0LWNmMTQtNGE0Zi1hZTdjLTNiZDE5NzhiZjJmNi8x
LzZPRl8tc1V6LVRGbU55OHMtZTJxdWVxSW9iYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NTZjOTM0LWNmMTQtNGE0Zi1hZTdjLTNiZDE5NzhiZjJmNi8xLzdia20tTVlEcXJl
Y3RHcUlPX1l5VmtvX3FyOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkQVDANBgkqhkiG9w0BAQsFAAOC
AQEAccYRGCChRx0vZnWPpC1jLVGTJFXJNniBvQapY8pl82Eg90dvfITiL6VdNx30
Hc+syupa+PuvNLTDKrp9CKQoKEM2Kc0dAHil6t2r02EV0htNRz0tNKrgI8mDLgWa
6XWVHWyClfsJ7bIGT/JBwBBwtbZidhvKz+a+wUN7e0coJoH8SIhvMO1HBZv64/By
X+v47aERaX3f670HzsXWAlDMxEGVacd58RMN+aswTi5SYUjafw1ptN1MU79vWLzm
bdJkyBBysI6DqfCBw+/84TnYZlqzGnw/rugRST6fmglV4wkL3rwEM3rxIQHAGzQf
WAzLKaaBpkeT43u37rOSilHspQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-fra.rpki-client.org