Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa
File:                     7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa (raw, json)
Hash identifier:          aZ4hVknTlxyXx/nHCNM3dOWps6CvLDIXG6hnDrwBg/c=
Subject key identifier:   EC:46:29:27:45:C7:7C:36:D5:D8:95:99:08:13:0C:94:ED:3F:64:33
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       044E9281
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa
Signing time:             Mon 30 May 2022 02:00:13 +0000
ROA not before:           Mon 30 May 2022 02:00:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25795
IP address blocks:        185.139.34.0/24 maxlen: 24
                          185.139.32.0/23 maxlen: 24
                          185.139.35.0/24 maxlen: 24
                          2a07:12c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72258177 (0x44e9281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: May 30 02:00:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec46292745c77c36d5d8959908130c94ed3f6433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:96:5a:ad:41:e9:6a:b6:78:ec:8c:6d:4d:
                    17:39:d3:80:37:1e:33:ba:e2:0c:ae:aa:80:1a:2e:
                    1f:29:39:8f:32:6b:e2:84:69:80:96:7f:db:ad:6a:
                    f1:1f:41:6b:45:4e:4a:cc:5b:eb:cf:cc:b6:51:17:
                    58:d1:86:62:3e:b4:2e:93:72:0c:96:3f:74:71:4f:
                    85:73:08:da:60:81:0e:d8:90:af:71:81:78:c7:28:
                    b9:12:1f:e8:ee:75:61:fa:d2:74:42:b6:03:c8:7c:
                    be:d8:a3:97:c2:ff:7f:c2:da:34:64:0a:ab:63:29:
                    77:ce:f9:21:5c:fe:26:1d:31:2d:da:59:9a:6a:9d:
                    7d:45:51:44:ed:d5:db:ec:17:9e:da:92:64:91:17:
                    3a:c4:40:df:f2:fd:60:f5:20:67:9b:2a:1f:fb:28:
                    26:cc:40:8d:c2:2c:c8:ca:bd:00:93:a0:fc:c1:43:
                    84:60:a7:2b:f3:ce:c4:5d:8b:84:8a:1b:e0:3e:ed:
                    e8:16:55:87:b5:66:f4:3f:58:cc:47:c6:71:21:44:
                    9a:6b:30:05:59:8f:e8:38:d3:fa:9a:68:87:8a:52:
                    27:d9:83:89:d5:f0:90:98:5c:ff:86:23:23:68:47:
                    ec:1c:78:f8:75:fb:1d:37:6d:51:1b:3b:7d:93:3f:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:46:29:27:45:C7:7C:36:D5:D8:95:99:08:13:0C:94:ED:3F:64:33
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.32.0/22
                IPv6:
                  2a07:12c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:97:f7:c8:8d:0b:67:dd:14:ce:7e:6d:03:a3:ea:c9:f9:
         ba:dd:69:d1:fc:92:6f:76:c4:14:c8:bc:a8:7e:ce:29:83:df:
         9a:0c:84:c7:e4:76:3b:3e:cc:d6:63:d0:b6:62:bb:29:c2:c5:
         3a:46:50:57:5e:d4:72:2e:00:2f:e7:76:e5:db:c4:bb:7f:58:
         29:d3:60:35:c6:89:91:8b:7a:e0:39:a9:51:cc:a2:fe:2a:f6:
         76:97:72:ec:8e:7c:c2:bd:e0:80:2b:b0:6e:18:13:e7:7a:3e:
         f8:04:06:8e:e4:07:12:94:af:ce:49:4b:11:06:46:92:5f:64:
         b3:af:8a:03:dc:1b:c1:3a:39:64:0a:86:d1:a2:7f:d6:ea:36:
         4d:f6:be:7b:b3:ae:45:58:9c:40:53:ce:e7:d9:c9:51:83:ef:
         5c:76:50:5a:ad:f3:15:3a:4d:be:b1:fd:10:e7:5e:26:08:d8:
         ee:9d:f4:95:68:b5:cc:7b:2d:4e:25:a9:cc:ef:ff:41:7f:c1:
         1d:ed:a6:38:14:1c:08:c4:a4:b5:2e:9e:73:ed:00:f0:b4:bd:
         5c:94:21:ca:4c:5a:0c:da:e6:13:70:1c:df:f4:03:04:d0:2e:
         ce:9e:42:c6:bc:f4:38:41:e3:12:d5:12:53:07:ac:a2:39:db:
         d8:d2:30:37
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBE6SgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTc2MmRiMTI4MmZmZDA4NDc2MTIzMjAzOGY4MWY1ZDI5ZTY0MGQ1MB4XDTIyMDUz
MDAyMDAxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWM0NjI5Mjc0NWM3
N2MzNmQ1ZDg5NTk5MDgxMzBjOTRlZDNmNjQzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMP5llqtQelqtnjsjG1NFznTgDceM7riDK6qgBouHyk5jzJr
4oRpgJZ/261q8R9Ba0VOSsxb68/MtlEXWNGGYj60LpNyDJY/dHFPhXMI2mCBDtiQ
r3GBeMcouRIf6O51YfrSdEK2A8h8vtijl8L/f8LaNGQKq2Mpd875IVz+Jh0xLdpZ
mmqdfUVRRO3V2+wXntqSZJEXOsRA3/L9YPUgZ5sqH/soJsxAjcIsyMq9AJOg/MFD
hGCnK/POxF2LhIob4D7t6BZVh7Vm9D9YzEfGcSFEmmswBVmP6DjT+ppoh4pSJ9mD
idXwkJhc/4YjI2hH7Bx4+HX7HTdtURs7fZM/ka8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTsRiknRcd8NtXYlZkIEwyU7T9kMzAfBgNVHSMEGDAWgBS5di2xKC/9CEdh
IyA4+B9dKeZA1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VYWXRzU2d2X1FoSFlTTWdPUGdmWFNubVFOVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvZjgxOTE1LTQwNWUtNGI1NC05Y2I0LTcwYTU1NmJhOGExMS8x
LzdFWXBKMFhIZkRiVjJKV1pDQk1NbE8wX1pETS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
ZjgxOTE1LTQwNWUtNGI1NC05Y2I0LTcwYTU1NmJhOGExMS8xL3VYWXRzU2d2X1Fo
SFlTTWdPUGdmWFNubVFOVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmLIDANBAIAAjAHAwUDKgcSwDAN
BgkqhkiG9w0BAQsFAAOCAQEAY56X98iNC2fdFM5+bQOj6sn5ut1p0fySb3bEFMi8
qH7OKYPfmgyEx+R2Oz7M1mPQtmK7KcLFOkZQV17Uci4AL+d25dvEu39YKdNgNcaJ
kYt64DmpUcyi/ir2dpdy7I58wr3ggCuwbhgT53o++AQGjuQHEpSvzklLEQZGkl9k
s6+KA9wbwTo5ZAqG0aJ/1uo2Tfa+e7OuRVicQFPO59nJUYPvXHZQWq3zFTpNvrH9
EOdeJgjY7p30lWi1zHstTiWpzO//QX/BHe2mOBQcCMSktS6ec+0A8LS9XJQhykxa
DNrmE3Ac3/QDBNAuzp5Cxrz0OEHjEtUSUwesojnb2NIwNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org