Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E77Vi8L6AaDohcfqU7YZSIks3UU.roa
File:                     E77Vi8L6AaDohcfqU7YZSIks3UU.roa (raw, json)
Hash identifier:          mJFmMLgt+7RBjlp+jI3UnCDrLohgVywtqNtxqHRr7gk=
Subject key identifier:   13:BE:D5:8B:C2:FA:01:A0:E8:85:C7:EA:53:B6:19:48:89:2C:DD:45
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       42D2BD98
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E77Vi8L6AaDohcfqU7YZSIks3UU.roa
Signing time:             Mon 02 May 2022 16:35:50 +0000
ROA not before:           Mon 02 May 2022 16:35:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51239
IP address blocks:        46.102.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121107352 (0x42d2bd98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May  2 16:35:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13bed58bc2fa01a0e885c7ea53b61948892cdd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:78:92:ac:e3:b5:86:9e:59:54:b5:fe:90:
                    6b:d9:bd:b3:14:7f:2d:b9:d2:15:68:f7:37:16:8b:
                    69:b6:5f:71:46:f5:da:0e:f3:c1:9e:b4:6f:48:38:
                    1f:2c:47:a6:85:5d:7b:80:ac:d3:d4:aa:23:b9:01:
                    fc:55:a7:fa:20:b2:fd:28:3e:b9:69:c1:81:38:06:
                    21:aa:51:39:86:60:7a:8b:00:a7:7e:89:54:fb:6f:
                    48:de:d0:a4:38:f6:72:e4:9d:2b:39:a2:1f:45:22:
                    04:7a:db:a5:40:41:d4:8e:6d:5f:f3:cc:77:b6:21:
                    55:c3:d1:59:52:fa:db:d9:07:d8:e8:82:22:d2:61:
                    6a:f6:fa:66:91:a5:24:1c:d4:6e:6e:4e:90:5a:6a:
                    ce:54:fa:d1:22:0c:66:61:98:64:ee:e9:02:e2:46:
                    a9:7b:f2:6e:33:1b:38:a5:42:cb:78:84:88:75:f6:
                    c6:33:d3:3e:0c:90:2b:a7:22:52:7a:b3:5b:a3:77:
                    11:24:b7:5f:30:65:bc:37:f7:5c:60:84:7c:ce:4a:
                    25:9b:2d:87:e8:54:10:24:f6:7e:c5:ba:ef:ad:6c:
                    fd:0d:27:8f:1d:82:93:3e:bf:3e:c3:f6:74:a7:cd:
                    01:b8:47:e5:2b:1e:99:66:4e:4e:88:5f:18:f1:b9:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BE:D5:8B:C2:FA:01:A0:E8:85:C7:EA:53:B6:19:48:89:2C:DD:45
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E77Vi8L6AaDohcfqU7YZSIks3UU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2b:f0:45:ff:1a:42:62:4a:2b:4c:47:68:f8:cd:d6:ce:84:
         62:51:02:4f:40:58:02:29:1d:d7:75:f3:8d:4b:e0:ce:f9:28:
         b8:50:ea:ff:fe:a0:05:35:56:b2:c7:78:65:ef:b8:15:57:e2:
         85:80:3d:13:3f:00:2b:27:41:3c:3b:5e:ac:b5:48:13:51:23:
         01:11:6e:2a:53:d0:bb:69:c5:49:a8:0c:6f:a8:58:79:da:2a:
         d4:46:11:30:26:fc:2f:39:3f:16:d4:0e:05:34:ff:89:7c:c6:
         c8:ab:dc:37:5d:bf:d0:d7:a3:54:2f:0f:90:e9:7f:0a:5a:f9:
         e9:7e:22:4b:97:ca:69:d8:67:e4:e9:15:3d:e0:cb:d9:e6:00:
         58:b3:72:14:2f:13:81:75:c1:d7:65:33:ef:0b:9c:93:a1:57:
         68:99:14:6b:95:28:4d:7f:5c:d7:47:5c:fa:f9:97:d5:21:fc:
         1a:70:c7:1b:e1:97:76:64:94:fb:1c:11:96:d2:7c:29:f4:94:
         36:fe:10:1e:08:62:4a:2a:e1:53:28:de:f1:78:08:8e:9a:c9:
         d5:cc:ea:29:13:da:41:63:1e:5c:bc:16:31:12:7f:f4:80:00:
         e2:50:73:06:31:be:5d:03:9e:ad:a1:2e:88:f0:95:2e:32:cb:
         ef:d7:d5:46
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEQtK9mDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDUw
MjE2MzU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNiZWQ1OGJjMmZh
MDFhMGU4ODVjN2VhNTNiNjE5NDg4OTJjZGQ0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEbeJKs47WGnllUtf6Qa9m9sxR/LbnSFWj3NxaLabZfcUb1
2g7zwZ60b0g4HyxHpoVde4Cs09SqI7kB/FWn+iCy/Sg+uWnBgTgGIapROYZgeosA
p36JVPtvSN7QpDj2cuSdKzmiH0UiBHrbpUBB1I5tX/PMd7YhVcPRWVL629kH2OiC
ItJhavb6ZpGlJBzUbm5OkFpqzlT60SIMZmGYZO7pAuJGqXvybjMbOKVCy3iEiHX2
xjPTPgyQK6ciUnqzW6N3ESS3XzBlvDf3XGCEfM5KJZsth+hUECT2fsW6761s/Q0n
jx2Ckz6/PsP2dKfNAbhH5SsemWZOTohfGPG5Tg0CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQTvtWLwvoBoOiFx+pTthlIiSzdRTAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS9FNzdWaThMNkFhRG9oY2ZxVTdZWlNJa3MzVVUucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALmb/MA0GCSqGSIb3DQEBCwUA
A4IBAQCyK/BF/xpCYkorTEdo+M3WzoRiUQJPQFgCKR3XdfONS+DO+Si4UOr//qAF
NVayx3hl77gVV+KFgD0TPwArJ0E8O16stUgTUSMBEW4qU9C7acVJqAxvqFh52irU
RhEwJvwvOT8W1A4FNP+JfMbIq9w3Xb/Q16NULw+Q6X8KWvnpfiJLl8pp2Gfk6RU9
4MvZ5gBYs3IULxOBdcHXZTPvC5yToVdomRRrlShNf1zXR1z6+ZfVIfwacMcb4Zd2
ZJT7HBGW0nwp9JQ2/hAeCGJKKuFTKN7xeAiOmsnVzOopE9pBYx5cvBYxEn/0gADi
UHMGMb5dA56toS6I8JUuMsvv19VG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org