Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/x6Wqg5H0UsScSaknxn93ScUUqP8.roa
File:                     x6Wqg5H0UsScSaknxn93ScUUqP8.roa (raw, json)
Hash identifier:          QEoHPekV3okoyrfxIzGkm1LbXhtU/B0lyQcfi/4VNnM=
Subject key identifier:   C7:A5:AA:83:91:F4:52:C4:9C:49:A9:27:C6:7F:77:49:C5:14:A8:FF
Certificate issuer:       /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial:       013C5AD0
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/x6Wqg5H0UsScSaknxn93ScUUqP8.roa
Signing time:             Sun 02 Jan 2022 14:29:38 +0000
ROA not before:           Sun 02 Jan 2022 14:29:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210350
IP address blocks:        185.230.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20732624 (0x13c5ad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
        Validity
            Not Before: Jan  2 14:29:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7a5aa8391f452c49c49a927c67f7749c514a8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:c3:01:c0:8c:93:7e:34:44:2e:7b:fd:18:
                    87:54:1d:fb:de:2a:b2:52:50:27:26:ad:0b:c6:3d:
                    7c:fc:65:e7:46:af:75:a5:1e:2a:f3:a2:20:c3:34:
                    7c:73:8c:4e:81:92:45:30:e1:25:a9:ff:c4:88:69:
                    41:2e:dc:52:0f:c7:be:22:c7:71:15:a2:44:27:af:
                    54:54:e3:4d:1e:55:54:2d:4e:bd:d7:1e:f0:77:04:
                    44:b0:5c:1b:a8:c6:dd:69:76:46:6c:15:a9:e5:5e:
                    0c:bb:98:23:b0:61:f1:e3:9e:c5:b9:5f:51:03:56:
                    45:89:c3:f3:62:0d:75:e6:be:e1:b1:ea:9b:41:59:
                    11:80:a1:5c:f8:a7:cf:a0:86:49:38:e5:6b:19:bb:
                    d7:56:93:bb:cc:ae:eb:38:78:ca:fd:f8:d4:37:59:
                    b1:40:c0:55:fc:9b:16:14:22:d5:bb:cc:99:b3:a9:
                    ce:61:cf:c6:35:b0:5d:b7:bd:e0:f9:e9:f0:ae:23:
                    08:5b:09:1b:be:07:f2:1a:a1:cc:4b:48:83:0e:21:
                    9b:7e:ed:cb:d4:f3:1a:40:96:be:91:99:97:e1:e5:
                    ed:76:e1:9e:4b:ff:dc:65:52:15:07:7a:e1:48:f7:
                    36:2d:2f:23:51:31:14:1d:75:45:d5:3a:ac:08:5e:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A5:AA:83:91:F4:52:C4:9C:49:A9:27:C6:7F:77:49:C5:14:A8:FF
            X509v3 Authority Key Identifier:
                keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/x6Wqg5H0UsScSaknxn93ScUUqP8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:37:60:e7:1d:e7:c9:9d:d5:26:7c:b5:86:4a:f3:5b:62:a9:
         06:63:b7:2e:3b:7e:39:07:de:d2:fa:87:43:c8:97:f8:34:a9:
         fe:79:1b:b4:cf:5b:6d:93:d8:ea:59:a3:cd:bc:2b:32:d4:54:
         be:16:20:8b:6f:b3:be:8a:30:3d:0a:e5:aa:28:55:1b:d9:27:
         fd:dc:d7:a0:c6:05:82:a6:45:c2:28:79:c2:a1:ca:b8:62:39:
         2d:16:ae:6c:a5:52:15:61:02:9e:d4:6f:99:08:e0:ce:5e:2b:
         dd:c8:2b:e8:de:b5:1d:9a:4d:02:45:b1:27:05:3a:1e:95:ee:
         38:4c:7b:f2:a6:f2:0f:69:80:f4:de:a8:19:c7:5b:27:90:d5:
         c6:60:f9:07:36:b7:0f:f7:67:25:40:a7:f5:f2:c9:c5:1e:db:
         bf:f6:1b:38:91:6a:30:37:7d:86:85:9c:6f:94:2e:5c:4b:03:
         d8:6b:ae:c0:4a:8e:2f:5a:1f:90:f3:f8:b1:5c:b3:ac:67:80:
         c9:dc:1a:db:a4:f3:6b:ab:cc:b0:d6:88:9c:7a:cd:87:d0:28:
         3b:1c:c0:db:86:1a:38:32:85:ae:04:a9:7e:1a:57:78:8c:f7:
         44:83:fd:cc:f6:68:68:e1:ce:50:23:2e:b8:b2:48:a6:d5:15:
         a6:bf:27:62
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATxa0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmY3NjIxMWYzYzU4ZjZjOThhZjk5Y2Y2NWE2ZjFlOGZmN2M0M2JhMB4XDTIyMDEw
MjE0MjkzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzdhNWFhODM5MWY0
NTJjNDljNDlhOTI3YzY3Zjc3NDljNTE0YThmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTPwwHAjJN+NEQue/0Yh1Qd+94qslJQJyatC8Y9fPxl50av
daUeKvOiIMM0fHOMToGSRTDhJan/xIhpQS7cUg/HviLHcRWiRCevVFTjTR5VVC1O
vdce8HcERLBcG6jG3Wl2RmwVqeVeDLuYI7Bh8eOexblfUQNWRYnD82INdea+4bHq
m0FZEYChXPinz6CGSTjlaxm711aTu8yu6zh4yv341DdZsUDAVfybFhQi1bvMmbOp
zmHPxjWwXbe94Pnp8K4jCFsJG74H8hqhzEtIgw4hm37ty9TzGkCWvpGZl+Hl7Xbh
nkv/3GVSFQd64Uj3Ni0vI1ExFB11RdU6rAhezpkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTHpaqDkfRSxJxJqSfGf3dJxRSo/zAfBgNVHSMEGDAWgBQ292IR88WPbJiv
mc9lpvHo/3xDujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L052ZGlFZlBGajJ5WXI1blBaYWJ4NlA5OFE3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvZmNhZDJkLTg2ZDktNDJiMS1iMTE1LTJmY2YzOTYyNTNiOC8x
L3g2V3FnNUgwVXNTY1Nha254bjkzU2NVVXFQOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
ZmNhZDJkLTg2ZDktNDJiMS1iMTE1LTJmY2YzOTYyNTNiOC8xL052ZGlFZlBGajJ5
WXI1blBaYWJ4NlA5OFE3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnm7zANBgkqhkiG9w0BAQsFAAOC
AQEAcTdg5x3nyZ3VJny1hkrzW2KpBmO3Ljt+OQfe0vqHQ8iX+DSp/nkbtM9bbZPY
6lmjzbwrMtRUvhYgi2+zvoowPQrlqihVG9kn/dzXoMYFgqZFwih5wqHKuGI5LRau
bKVSFWECntRvmQjgzl4r3cgr6N61HZpNAkWxJwU6HpXuOEx78qbyD2mA9N6oGcdb
J5DVxmD5Bza3D/dnJUCn9fLJxR7bv/YbOJFqMDd9hoWcb5QuXEsD2GuuwEqOL1of
kPP4sVyzrGeAydwa26Tza6vMsNaInHrNh9AoOxzA24YaODKFrgSpfhpXeIz3RIP9
zPZoaOHOUCMuuLJIptUVpr8nYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:55 2024 by rpki-client on console-ams.rpki-client.org