Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/eJ6fsbYk82c1mOXZ3TGWYKca9Fw.roa
File:                     eJ6fsbYk82c1mOXZ3TGWYKca9Fw.roa (raw, json)
Hash identifier:          5fHvUAJipQx5yuLG5avPu2i2Rm2mQrOERu8tJf5pw+I=
Subject key identifier:   78:9E:9F:B1:B6:24:F3:67:35:98:E5:D9:DD:31:96:60:A7:1A:F4:5C
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       0A06E5C4
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/eJ6fsbYk82c1mOXZ3TGWYKca9Fw.roa
Signing time:             Sat 01 Jan 2022 05:03:26 +0000
ROA not before:           Sat 01 Jan 2022 05:03:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39526
IP address blocks:        2a0d:2146:8580::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168224196 (0xa06e5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 05:03:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=789e9fb1b624f3673598e5d9dd319660a71af45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:69:99:18:2b:a8:c1:b3:49:da:81:b2:f5:
                    c7:0a:af:18:e7:7b:da:c1:86:39:bc:99:c5:bf:df:
                    9c:97:6e:8d:8f:c4:5d:16:45:ad:92:38:8b:63:e0:
                    90:b0:f6:74:01:09:33:f0:6b:36:ff:1a:5f:b3:23:
                    ad:e7:b3:71:a3:23:97:67:bb:7e:96:0d:14:1e:ab:
                    03:35:43:fb:dd:f8:07:35:85:8a:f0:0f:3a:e5:08:
                    48:3e:7b:42:11:9d:11:a3:53:d1:b4:c5:6f:5b:a2:
                    63:41:94:1e:c4:f0:18:0c:d6:63:80:ae:58:8c:05:
                    c1:d2:71:83:18:f7:4b:00:a2:26:a6:e9:63:78:fc:
                    23:fd:d4:62:8b:41:5c:c5:5d:6e:8b:31:f1:b3:bc:
                    d2:60:04:79:a0:6b:48:a2:82:82:6c:33:8d:b6:ca:
                    60:e9:8f:5d:d1:5a:91:8b:67:8c:c5:2f:63:07:91:
                    12:c6:53:d5:57:06:15:f5:6e:d1:9c:68:4a:ca:0a:
                    e7:92:96:b6:6a:df:31:03:92:c2:5e:a4:a4:b0:18:
                    28:f4:f5:b0:d4:f5:ff:8c:1f:85:65:3e:9a:81:91:
                    d1:ea:22:06:c6:9a:a5:84:61:74:ef:b7:0a:4e:b5:
                    a1:99:73:c8:83:66:c1:37:a0:bc:e2:2c:13:63:c2:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:9F:B1:B6:24:F3:67:35:98:E5:D9:DD:31:96:60:A7:1A:F4:5C
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/eJ6fsbYk82c1mOXZ3TGWYKca9Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2146:8580::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:40:c5:c9:a0:b7:33:f7:5e:08:fd:f2:99:bf:6c:45:06:c3:
         19:67:4d:88:23:ac:8c:14:b3:12:9a:18:d1:05:12:e7:81:3c:
         8b:96:08:5b:32:c7:07:09:d7:74:ac:dd:c9:1a:0d:f0:2a:13:
         1a:72:3a:7f:4c:1d:a1:d0:ac:9e:a3:39:e4:17:5d:59:09:a6:
         f6:88:62:c8:2b:30:48:04:49:6c:59:64:a2:1d:0f:9e:d7:61:
         24:62:fe:0b:37:1e:19:fc:b9:1b:ae:95:2e:fe:fc:41:60:f7:
         2c:66:44:85:14:d4:c0:9c:a4:23:94:d5:1b:6f:66:36:24:13:
         a1:0d:0b:86:34:2c:f3:ce:78:5a:88:e7:d6:8b:6d:f7:db:40:
         33:08:9a:5f:17:1a:8c:d4:44:f5:86:9d:9f:cc:d5:e3:24:73:
         ef:aa:2c:b0:83:bd:54:54:dc:f2:a5:4b:97:7b:5b:06:8d:a4:
         b3:a0:ee:fe:cc:29:9a:c0:af:39:7b:86:bf:94:3b:1c:94:42:
         00:46:04:de:ed:80:a1:af:b1:d0:be:6f:75:c1:9b:61:70:b6:
         bf:65:cf:87:03:1e:44:fb:1b:42:0b:e2:ba:2a:51:f5:31:a7:
         ee:b1:fb:e7:81:7c:6b:a1:26:5b:1b:f4:6e:88:0a:ad:8b:0b:
         ac:5b:40:22
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECgblxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MTRhYzYxMTYxNGRkMTY1ZDk0NTU3Mjk2ZWQ3ZWQ0NmM4ZmMwMjVmMB4XDTIyMDEw
MTA1MDMyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzg5ZTlmYjFiNjI0
ZjM2NzM1OThlNWQ5ZGQzMTk2NjBhNzFhZjQ1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnMaZkYK6jBs0nagbL1xwqvGOd72sGGObyZxb/fnJdujY/E
XRZFrZI4i2PgkLD2dAEJM/BrNv8aX7MjreezcaMjl2e7fpYNFB6rAzVD+934BzWF
ivAPOuUISD57QhGdEaNT0bTFb1uiY0GUHsTwGAzWY4CuWIwFwdJxgxj3SwCiJqbp
Y3j8I/3UYotBXMVdbosx8bO80mAEeaBrSKKCgmwzjbbKYOmPXdFakYtnjMUvYweR
EsZT1VcGFfVu0ZxoSsoK55KWtmrfMQOSwl6kpLAYKPT1sNT1/4wfhWU+moGR0eoi
BsaapYRhdO+3Ck61oZlzyINmwTegvOIsE2PC1bcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR4np+xtiTzZzWY5dndMZZgpxr0XDAfBgNVHSMEGDAWgBThSsYRYU3RZdlF
Vylu1+1GyPwCXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRVckdFV0ZOMFdYWlJWY3BidGZ0UnNqOEFsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvNmU3OWI4LTJiOGYtNGVjYy05YTZlLTcwZTg5OGJiMzhkZC8x
L2VKNmZzYllrODJjMW1PWFozVEdXWUtjYTlGdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
NmU3OWI4LTJiOGYtNGVjYy05YTZlLTcwZTg5OGJiMzhkZC8xLzRVckdFV0ZOMFdY
WlJWY3BidGZ0UnNqOEFsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoNIUaFgDANBgkqhkiG9w0BAQsF
AAOCAQEAYEDFyaC3M/deCP3ymb9sRQbDGWdNiCOsjBSzEpoY0QUS54E8i5YIWzLH
BwnXdKzdyRoN8CoTGnI6f0wdodCsnqM55BddWQmm9ohiyCswSARJbFlkoh0Pntdh
JGL+CzceGfy5G66VLv78QWD3LGZEhRTUwJykI5TVG29mNiQToQ0LhjQs8854Wojn
1ott99tAMwiaXxcajNRE9Yadn8zV4yRz76ossIO9VFTc8qVLl3tbBo2ks6Du/swp
msCvOXuGv5Q7HJRCAEYE3u2Aoa+x0L5vdcGbYXC2v2XPhwMeRPsbQgviuipR9TGn
7rH754F8a6EmWxv0bogKrYsLrFtAIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org