Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/lOswqWqU2a-ftH0roF82celIn8M.roa
File:                     lOswqWqU2a-ftH0roF82celIn8M.roa (raw, json)
Hash identifier:          uK6WPFUmhnruyEZZfVRh3xuQ9bUb1uycoSdW5gQ13+A=
Subject key identifier:   94:EB:30:A9:6A:94:D9:AF:9F:B4:7D:2B:A0:5F:36:71:E9:48:9F:C3
Certificate issuer:       /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial:       0B79E8F0
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/lOswqWqU2a-ftH0roF82celIn8M.roa
Signing time:             Thu 07 Apr 2022 09:38:41 +0000
ROA not before:           Thu 07 Apr 2022 09:38:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64476
IP address blocks:        185.253.170.0/24 maxlen: 24
                          185.253.168.0/22 maxlen: 22
                          185.253.168.0/24 maxlen: 24
                          185.253.171.0/24 maxlen: 24
                          85.190.64.0/20 maxlen: 20
                          85.190.67.0/24 maxlen: 24
                          46.247.136.0/23 maxlen: 23
                          185.161.168.0/22 maxlen: 22
                          46.247.140.0/24 maxlen: 24
                          185.231.8.0/22 maxlen: 24
                          85.190.79.0/24 maxlen: 24
                          85.190.80.0/22 maxlen: 22
                          85.190.81.0/24 maxlen: 24
                          85.190.84.0/24 maxlen: 24
                          85.190.85.0/24 maxlen: 24
                          85.190.84.0/22 maxlen: 22
                          85.190.88.0/21 maxlen: 21
                          2a0a:e800::/32 maxlen: 32
                          2a0a:e806::/32 maxlen: 32
                          2a0a:e804::/32 maxlen: 32
                          2a0a:e805:500::/40 maxlen: 40
                          2a0a:e805:100::/40 maxlen: 40
                          2a0a:e805:400::/40 maxlen: 40
                          2a0a:e805:300::/40 maxlen: 40
                          2a0a:e805::/32 maxlen: 32
                          2a0a:e803::/32 maxlen: 32
                          2a0a:e807::/32 maxlen: 32
                          2a0a:e801::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192538864 (0xb79e8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
        Validity
            Not Before: Apr  7 09:38:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94eb30a96a94d9af9fb47d2ba05f3671e9489fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:8f:3f:3e:f9:c4:b5:60:eb:a4:10:d4:62:
                    45:61:ef:26:76:af:cf:b6:91:6f:56:24:fd:11:66:
                    eb:11:ba:64:52:f8:82:71:3f:64:71:90:cb:7e:32:
                    47:04:76:d7:11:32:e8:c1:1d:34:79:d1:2e:01:c9:
                    40:66:b6:7e:3b:dd:63:31:ab:2b:b3:49:fa:48:35:
                    b5:d1:33:19:9b:89:46:ce:4c:23:03:3a:59:dc:56:
                    ec:4c:63:e9:1d:07:f3:1e:15:eb:d2:25:8b:e3:94:
                    bc:73:60:6f:3e:93:98:d6:cc:87:9c:4e:1a:a6:51:
                    e8:5d:ca:e5:20:49:b3:0f:fc:96:46:92:fe:d0:05:
                    ef:95:f5:96:42:f3:a4:96:09:a0:2b:32:51:5d:5a:
                    58:93:1e:fb:f0:e0:17:39:04:08:2e:95:cc:24:b0:
                    7a:cb:82:96:07:91:5c:b5:b6:a9:39:c7:b8:68:5b:
                    13:86:74:4e:c0:99:2d:0f:da:cc:3b:21:f9:bb:2a:
                    7b:34:c8:e3:85:70:6e:3c:cf:9e:01:33:82:a5:91:
                    35:be:b3:02:83:6e:0d:21:c2:92:b8:65:32:12:03:
                    6d:b9:f2:81:91:e7:d2:7e:cc:74:80:34:47:25:3f:
                    08:f5:2b:47:40:b6:47:9f:8b:46:b1:12:48:c4:e0:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EB:30:A9:6A:94:D9:AF:9F:B4:7D:2B:A0:5F:36:71:E9:48:9F:C3
            X509v3 Authority Key Identifier:
                keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/lOswqWqU2a-ftH0roF82celIn8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.247.136.0/23
                  46.247.140.0/24
                  85.190.64.0/19
                  185.161.168.0/22
                  185.231.8.0/22
                  185.253.168.0/22
                IPv6:
                  2a0a:e800::/31
                  2a0a:e803::-2a0a:e807:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:73:70:0d:fa:09:14:50:4b:5c:f9:6d:c2:de:aa:9a:da:
         c9:1f:1c:0c:5b:bb:12:5f:69:43:dd:fd:0e:c5:0a:fd:17:ad:
         0d:35:a2:7c:03:24:95:b9:74:cc:8e:9f:fc:97:df:ff:43:68:
         89:0d:78:84:57:e2:40:19:23:c1:94:c4:28:a1:46:f3:5b:32:
         ed:1c:cf:b6:9f:78:bc:64:3d:69:ab:c3:fc:4e:1e:a7:fc:46:
         a6:97:25:32:53:30:8b:10:5d:6c:bd:d8:29:d2:15:06:16:f5:
         5c:60:de:cb:17:9f:e8:17:2e:d4:a9:89:f2:39:fb:56:69:13:
         1d:ad:2a:f4:84:0e:7a:35:d0:43:39:44:6f:4b:80:63:24:a9:
         d1:54:b1:5e:be:db:48:f5:b6:93:eb:00:ef:04:b5:b6:7b:e1:
         74:58:84:e4:18:04:30:3d:24:15:23:2d:cb:e7:72:68:6f:d1:
         25:6b:b2:b3:c9:4f:d7:ad:78:5a:c1:a0:08:4e:18:3f:8f:2a:
         8f:38:d7:29:32:22:16:84:6e:e7:c8:ca:22:f1:74:c9:7b:bb:
         fe:db:59:35:95:3d:e8:89:7b:19:ed:11:11:fc:66:0d:69:11:
         ec:6c:7e:e6:25:f3:2f:d6:72:03:db:57:1e:64:46:b8:5a:50:
         26:3e:7c:88
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIEC3no8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZjEwZDhlMTU2NGU0MDMxMmM5ZGRmMjFiYTJhYTAzYmE1NTllYWQ2MB4XDTIyMDQw
NzA5Mzg0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTRlYjMwYTk2YTk0
ZDlhZjlmYjQ3ZDJiYTA1ZjM2NzFlOTQ4OWZjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANASjz8++cS1YOukENRiRWHvJnavz7aRb1Yk/RFm6xG6ZFL4
gnE/ZHGQy34yRwR21xEy6MEdNHnRLgHJQGa2fjvdYzGrK7NJ+kg1tdEzGZuJRs5M
IwM6WdxW7Exj6R0H8x4V69Ili+OUvHNgbz6TmNbMh5xOGqZR6F3K5SBJsw/8lkaS
/tAF75X1lkLzpJYJoCsyUV1aWJMe+/DgFzkECC6VzCSwesuClgeRXLW2qTnHuGhb
E4Z0TsCZLQ/azDsh+bsqezTI44VwbjzPngEzgqWRNb6zAoNuDSHCkrhlMhIDbbny
gZHn0n7MdIA0RyU/CPUrR0C2R5+LRrESSMTgaGsCAwEAAaOCAkYwggJCMB0GA1Ud
DgQWBBSU6zCpapTZr5+0fSugXzZx6UifwzAfBgNVHSMEGDAWgBRvENjhVk5AMSyd
3yG6KqA7pVnq1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2J4RFk0VlpPUURFc25kOGh1aXFnTzZWWjZ0WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvY2ZkYTA1LTE5MGQtNDE0Mi1iZDRmLWI2YThmOGU4MGY3Yi8x
L2xPc3dxV3FVMmEtZnRIMHJvRjgyY2VsSW44TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
Y2ZkYTA1LTE5MGQtNDE0Mi1iZDRmLWI2YThmOGU4MGY3Yi8xL2J4RFk0VlpPUURF
c25kOGh1aXFnTzZWWjZ0WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBc
BggrBgEFBQcBBwEB/wRNMEswKgQCAAEwJAMEAS73iAMEAC73jAMEBVW+QAMEArmh
qAMEArnnCAMEArn9qDAdBAIAAjAXAwUBKgroADAOAwUAKgroAwMFAyoK6AAwDQYJ
KoZIhvcNAQELBQADggEBAJxtc3AN+gkUUEtc+W3C3qqa2skfHAxbuxJfaUPd/Q7F
Cv0XrQ01onwDJJW5dMyOn/yX3/9DaIkNeIRX4kAZI8GUxCihRvNbMu0cz7afeLxk
PWmrw/xOHqf8RqaXJTJTMIsQXWy92CnSFQYW9Vxg3ssXn+gXLtSpifI5+1ZpEx2t
KvSEDno10EM5RG9LgGMkqdFUsV6+20j1tpPrAO8EtbZ74XRYhOQYBDA9JBUjLcvn
cmhv0SVrsrPJT9eteFrBoAhOGD+PKo841ykyIhaEbufIyiLxdMl7u/7bWTWVPeiJ
exntERH8Zg1pEexsfuYl8y/WcgPbVx5kRrhaUCY+fIg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org