Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/m_7rsE0dIFNF5soOv3gr6IDM-eg.roa
File:                     m_7rsE0dIFNF5soOv3gr6IDM-eg.roa (raw, json)
Hash identifier:          bZlZfaPBENW85HggR6GRnAfibprVT1Yta2cJa8ZFOvw=
Subject key identifier:   9B:FE:EB:B0:4D:1D:20:53:45:E6:CA:0E:BF:78:2B:E8:80:CC:F9:E8
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       03A9D355
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/m_7rsE0dIFNF5soOv3gr6IDM-eg.roa
Signing time:             Fri 18 Mar 2022 09:22:12 +0000
ROA not before:           Fri 18 Mar 2022 09:22:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.139.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61461333 (0x3a9d355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: Mar 18 09:22:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9bfeebb04d1d205345e6ca0ebf782be880ccf9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:18:1e:67:f1:41:78:c3:46:0c:05:04:89:
                    75:93:99:58:28:14:43:31:0f:12:1c:8e:35:ea:6d:
                    8d:0a:c0:34:3e:9f:54:a7:37:9a:5e:04:02:e4:46:
                    31:02:34:c4:02:32:ae:28:b2:05:7b:2f:dd:a0:f8:
                    58:c8:f5:27:ae:87:5b:e2:0c:fc:5e:59:c0:5d:bf:
                    ac:63:f4:a2:d2:18:aa:da:dd:aa:00:a0:92:27:b9:
                    c7:dd:0f:5c:b8:28:32:e2:90:dd:d6:fb:77:68:04:
                    03:25:f5:ca:60:a0:17:68:87:53:92:7e:d4:37:4c:
                    d5:cb:48:b8:40:1f:fe:d2:c7:05:2b:71:d1:aa:35:
                    99:7e:df:de:73:1e:46:77:90:b7:5d:7f:71:9b:fe:
                    f6:83:c2:ca:74:2a:00:22:b5:37:78:35:19:92:ba:
                    20:9a:87:62:3b:73:71:e1:83:38:f0:b9:5a:2c:50:
                    05:fa:a8:03:77:40:7b:73:e7:c1:be:a2:70:a1:47:
                    43:59:89:c0:ba:52:98:3d:4a:b9:6f:2e:45:70:bd:
                    ad:38:4c:05:99:80:4f:65:d5:9e:d8:b3:cf:cf:4b:
                    01:1c:2e:9d:4e:47:0d:75:85:cf:e5:cb:27:cb:ee:
                    49:98:c3:42:a5:4b:10:63:e5:05:96:68:88:1e:ab:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FE:EB:B0:4D:1D:20:53:45:E6:CA:0E:BF:78:2B:E8:80:CC:F9:E8
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/m_7rsE0dIFNF5soOv3gr6IDM-eg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:85:31:dd:cc:54:9c:16:16:37:d3:f8:39:eb:19:ac:7b:c4:
         7e:7e:59:9f:1f:cb:d1:b5:28:8b:96:70:ee:20:32:ec:0f:95:
         e6:2f:78:a4:c0:30:db:5b:77:60:80:7d:57:c5:6d:4c:14:b0:
         16:6c:e2:7f:0b:e1:3e:4f:17:0f:d0:d8:c1:b0:6c:36:7a:83:
         83:30:01:31:d0:20:b4:8e:2e:5d:e5:03:47:08:75:17:52:25:
         c1:1a:be:2f:dd:15:fa:5b:7d:f5:dd:5d:98:3d:a2:8d:29:88:
         b0:87:11:2a:bc:0e:fc:53:10:bf:43:91:4a:75:38:21:48:32:
         1a:73:d4:4e:a9:03:76:f3:65:c3:ff:59:0d:2e:9a:de:c7:9c:
         76:a9:61:11:e0:58:6a:05:f2:55:51:71:79:11:cb:16:21:71:
         aa:d1:dd:f6:cc:a1:83:79:a9:5a:b3:52:f0:65:12:2b:75:86:
         2d:47:1a:14:69:1a:c2:ab:1f:4c:76:9e:bd:b2:77:9d:cf:95:
         4f:de:44:3d:c6:b5:a7:d9:7e:78:9c:a5:d9:fa:44:7f:a1:94:
         35:cb:60:60:59:d4:43:4c:02:d2:3c:c9:ea:ed:cd:9e:23:35:
         cf:7a:2d:f4:33:e4:b0:fc:c3:e3:bb:9c:0d:24:f5:7e:0d:49:
         ae:08:f2:c6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA6nTVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTc2MmRiMTI4MmZmZDA4NDc2MTIzMjAzOGY4MWY1ZDI5ZTY0MGQ1MB4XDTIyMDMx
ODA5MjIxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJmZWViYjA0ZDFk
MjA1MzQ1ZTZjYTBlYmY3ODJiZTg4MGNjZjllODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMNMGB5n8UF4w0YMBQSJdZOZWCgUQzEPEhyONeptjQrAND6f
VKc3ml4EAuRGMQI0xAIyriiyBXsv3aD4WMj1J66HW+IM/F5ZwF2/rGP0otIYqtrd
qgCgkie5x90PXLgoMuKQ3db7d2gEAyX1ymCgF2iHU5J+1DdM1ctIuEAf/tLHBStx
0ao1mX7f3nMeRneQt11/cZv+9oPCynQqACK1N3g1GZK6IJqHYjtzceGDOPC5WixQ
BfqoA3dAe3Pnwb6icKFHQ1mJwLpSmD1KuW8uRXC9rThMBZmAT2XVntizz89LARwu
nU5HDXWFz+XLJ8vuSZjDQqVLEGPlBZZoiB6rzl0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSb/uuwTR0gU0Xmyg6/eCvogMz56DAfBgNVHSMEGDAWgBS5di2xKC/9CEdh
IyA4+B9dKeZA1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VYWXRzU2d2X1FoSFlTTWdPUGdmWFNubVFOVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvZjgxOTE1LTQwNWUtNGI1NC05Y2I0LTcwYTU1NmJhOGExMS8x
L21fN3JzRTBkSUZORjVzb092M2dyNklETS1lZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
ZjgxOTE1LTQwNWUtNGI1NC05Y2I0LTcwYTU1NmJhOGExMS8xL3VYWXRzU2d2X1Fo
SFlTTWdPUGdmWFNubVFOVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmLIjANBgkqhkiG9w0BAQsFAAOC
AQEAF4Ux3cxUnBYWN9P4OesZrHvEfn5Znx/L0bUoi5Zw7iAy7A+V5i94pMAw21t3
YIB9V8VtTBSwFmzifwvhPk8XD9DYwbBsNnqDgzABMdAgtI4uXeUDRwh1F1IlwRq+
L90V+lt99d1dmD2ijSmIsIcRKrwO/FMQv0ORSnU4IUgyGnPUTqkDdvNlw/9ZDS6a
3secdqlhEeBYagXyVVFxeRHLFiFxqtHd9syhg3mpWrNS8GUSK3WGLUcaFGkawqsf
THaevbJ3nc+VT95EPca1p9l+eJyl2fpEf6GUNctgYFnUQ0wC0jzJ6u3NniM1z3ot
9DPksPzD47ucDST1fg1Jrgjyxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org