Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/6sMb_-oo6tlDiYp5NAQp21nWU6c.roa
File:                     6sMb_-oo6tlDiYp5NAQp21nWU6c.roa (raw, json)
Hash identifier:          zU+ufEi0wp82Ln9olyg4ZWfW+HNrIbIemgWa96iTJEM=
Subject key identifier:   EA:C3:1B:FF:EA:28:EA:D9:43:89:8A:79:34:04:29:DB:59:D6:53:A7
Certificate issuer:       /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Certificate serial:       01843993
Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/6sMb_-oo6tlDiYp5NAQp21nWU6c.roa
Signing time:             Sat 01 Jan 2022 14:04:52 +0000
ROA not before:           Sat 01 Jan 2022 14:04:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51009
IP address blocks:        83.166.96.0/19 maxlen: 19
                          2a11:8600::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25442707 (0x1843993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
        Validity
            Not Before: Jan  1 14:04:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eac31bffea28ead943898a79340429db59d653a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:f9:6e:94:54:b5:77:1a:db:2c:0d:21:d7:
                    3f:04:f5:d5:ac:b2:91:26:d4:f2:08:e4:2a:e2:60:
                    5d:d9:68:20:2b:bf:d2:7c:90:40:8c:e5:25:b1:fa:
                    a5:33:80:0e:35:6e:71:60:b2:5a:06:bd:e7:00:50:
                    c7:9c:ec:5b:22:18:88:4a:ad:04:b0:79:1e:ec:f7:
                    0e:2e:65:29:41:cf:82:cb:a7:b0:69:70:f2:e2:af:
                    df:69:32:e8:2a:f5:fd:8f:31:a6:d7:f8:21:cd:15:
                    09:bd:6c:46:c1:a7:c1:8f:96:5d:2d:fd:5c:5b:0f:
                    93:4d:0c:9b:e2:1a:01:d5:fb:51:c7:17:22:43:83:
                    9c:1b:30:5d:c6:c3:12:51:35:bc:da:34:d3:9e:e5:
                    b7:5a:7d:9e:d6:f5:b9:80:1e:7b:9c:d6:25:21:d9:
                    59:b2:83:39:f3:28:af:4e:e8:2c:76:0a:c6:74:f2:
                    59:2a:77:37:39:a4:99:d9:8d:60:a7:56:0c:b4:6f:
                    10:20:54:18:3d:16:2f:49:4b:06:f0:01:3d:27:b5:
                    22:5f:ad:b0:09:53:38:f7:cb:46:40:0e:a0:87:dd:
                    66:29:29:eb:0a:4b:92:d4:a7:9f:ab:57:f9:8b:8a:
                    d6:19:8c:06:19:05:d7:75:9d:1e:60:c7:50:4a:6c:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:1B:FF:EA:28:EA:D9:43:89:8A:79:34:04:29:DB:59:D6:53:A7
            X509v3 Authority Key Identifier:
                keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/6sMb_-oo6tlDiYp5NAQp21nWU6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.166.96.0/19
                IPv6:
                  2a11:8600::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:49:2c:81:bd:97:20:4a:8c:21:5d:77:e2:9a:2d:f5:fe:6f:
         c0:f3:ba:e3:04:7e:13:c0:1a:18:d2:a2:f9:1a:fd:b0:50:75:
         38:a2:d7:ff:a2:86:aa:e4:65:c5:02:ce:81:dd:99:de:4d:fd:
         98:e5:71:60:43:83:28:6b:54:c8:9a:f6:0c:04:47:6c:40:62:
         79:cb:e7:09:4c:cc:25:a7:cf:60:13:d0:39:2b:c0:af:72:a0:
         fa:32:f3:58:82:d0:c1:48:dc:5b:b5:30:08:88:34:10:22:27:
         d4:5f:3e:27:9c:e7:93:ca:40:b9:c4:1b:4d:4d:fd:bc:b7:d1:
         0c:bc:82:97:2f:5c:76:1f:33:94:0a:0c:9e:13:ab:58:2b:69:
         eb:f0:ac:66:fd:19:18:0a:c3:8b:26:b3:d5:c1:f0:f3:4e:2e:
         fa:11:36:53:2c:de:46:88:1c:21:ea:e7:b1:3d:f0:b6:a1:c1:
         c5:d5:75:ce:d6:97:e4:69:c8:25:e8:e1:ed:b5:5f:8f:4f:13:
         05:3e:cd:7a:ae:6f:a9:a5:7f:44:0b:a0:2d:97:a7:78:b0:f7:
         50:4c:84:a5:a3:54:74:eb:7b:05:ce:7e:85:df:1c:91:b3:a2:
         a5:f2:5f:36:f4:c5:dd:a4:b3:e5:4c:40:ae:d4:7e:7b:98:c6:
         7c:d1:80:f1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAYQ5kzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGU2N2Y3ZWJjMGE4MTBiODhjMGFhZDM0MGMyNmVkY2I0NWRlNjVmMB4XDTIyMDEw
MTE0MDQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFjMzFiZmZlYTI4
ZWFkOTQzODk4YTc5MzQwNDI5ZGI1OWQ2NTNhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDi+W6UVLV3GtssDSHXPwT11ayykSbU8gjkKuJgXdloICu/
0nyQQIzlJbH6pTOADjVucWCyWga95wBQx5zsWyIYiEqtBLB5Huz3Di5lKUHPgsun
sGlw8uKv32ky6Cr1/Y8xptf4Ic0VCb1sRsGnwY+WXS39XFsPk00Mm+IaAdX7UccX
IkODnBswXcbDElE1vNo0057lt1p9ntb1uYAee5zWJSHZWbKDOfMor07oLHYKxnTy
WSp3NzmkmdmNYKdWDLRvECBUGD0WL0lLBvABPSe1Il+tsAlTOPfLRkAOoIfdZikp
6wpLktSnn6tX+YuK1hmMBhkF13WdHmDHUEpsxxMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTqwxv/6ijq2UOJink0BCnbWdZTpzAfBgNVHSMEGDAWgBRk5n9+vAqBC4jA
qtNAwm7ctF3mXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pPWl9mcndLZ1F1SXdLclRRTUp1M0xSZDVsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWYvY2FiNzlmLWFiYzEtNGE2Mi1iYzY5LTQ0MjI5OWY0MTJmZC8x
LzZzTWJfLW9vNnRsRGlZcDVOQVFwMjFuV1U2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYv
Y2FiNzlmLWFiYzEtNGE2Mi1iYzY5LTQ0MjI5OWY0MTJmZC8xL1pPWl9mcndLZ1F1
SXdLclRRTUp1M0xSZDVsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBVOmYDANBAIAAjAHAwUDKhGGADAN
BgkqhkiG9w0BAQsFAAOCAQEAc0ksgb2XIEqMIV134pot9f5vwPO64wR+E8AaGNKi
+Rr9sFB1OKLX/6KGquRlxQLOgd2Z3k39mOVxYEODKGtUyJr2DARHbEBiecvnCUzM
JafPYBPQOSvAr3Kg+jLzWILQwUjcW7UwCIg0ECIn1F8+J5znk8pAucQbTU39vLfR
DLyCly9cdh8zlAoMnhOrWCtp6/CsZv0ZGArDiyaz1cHw804u+hE2UyzeRogcIern
sT3wtqHBxdV1ztaX5GnIJejh7bVfj08TBT7Neq5vqaV/RAugLZeneLD3UEyEpaNU
dOt7Bc5+hd8ckbOipfJfNvTF3aSz5UxArtR+e5jGfNGA8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:41 2024 by rpki-client on console-ams.rpki-client.org