Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/6N5SugluYP_c0NCRRv9Zr-xburs.roa
File:                     6N5SugluYP_c0NCRRv9Zr-xburs.roa (raw, json)
Hash identifier:          YpW4NoijQs9UTv3t/RA/0sbi9RnI9QyH3yiP8xJqs6c=
Subject key identifier:   E8:DE:52:BA:09:6E:60:FF:DC:D0:D0:91:46:FF:59:AF:EC:5B:BA:BB
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       07A98C4E
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/6N5SugluYP_c0NCRRv9Zr-xburs.roa
Signing time:             Sat 01 Jan 2022 10:01:59 +0000
ROA not before:           Sat 01 Jan 2022 10:01:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59887
IP address blocks:        185.48.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128552014 (0x7a98c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: Jan  1 10:01:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8de52ba096e60ffdcd0d09146ff59afec5bbabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:60:1b:0f:5f:fe:08:2e:b8:04:08:f0:c0:
                    cc:36:36:b9:c3:e4:63:e6:88:d1:56:b6:b5:d2:5b:
                    d6:e9:00:f1:57:5a:13:f6:17:e5:82:e2:6b:5b:e3:
                    55:d5:7a:74:44:c9:bb:41:86:91:b7:8a:5c:b2:f4:
                    83:74:17:62:56:b9:ee:1f:fc:33:de:23:8f:1f:75:
                    eb:fc:24:a1:46:7e:b4:df:13:bf:60:40:ae:69:fa:
                    4f:58:d7:e0:09:86:45:c5:41:85:39:f6:e2:7e:3c:
                    d7:e6:f2:6c:f3:60:69:5e:43:f3:fc:fa:76:53:79:
                    53:c1:37:a8:35:ae:7d:39:12:7e:35:38:2b:26:05:
                    1b:b0:38:d3:22:8c:65:dc:6e:04:56:e6:ac:9b:86:
                    41:08:eb:43:67:c9:8c:3f:3b:79:f3:7b:d8:40:26:
                    9f:c0:b0:54:73:4f:62:98:4a:e5:65:6f:4e:81:0d:
                    31:81:43:7c:9c:ca:43:32:4c:9f:62:62:bc:5d:49:
                    9d:93:69:f0:f5:37:a9:74:16:03:9e:bc:50:06:19:
                    b0:0a:5e:1a:b2:3e:58:0c:86:30:4b:69:48:5e:45:
                    70:ea:5b:f9:2c:78:a8:a9:61:11:fc:0c:15:aa:74:
                    94:75:92:a3:b9:ab:f8:06:24:f8:7d:96:65:16:2c:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:52:BA:09:6E:60:FF:DC:D0:D0:91:46:FF:59:AF:EC:5B:BA:BB
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/6N5SugluYP_c0NCRRv9Zr-xburs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.48.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:92:25:c3:1c:ea:34:af:56:40:5f:e4:e6:e9:27:8d:5a:32:
         ba:92:99:bc:69:16:6f:7e:c7:46:15:91:81:a0:fb:6b:ae:ec:
         6d:8a:68:d6:10:08:95:04:42:f3:a5:9b:45:17:d4:3b:ae:25:
         cb:15:da:40:5e:2f:55:b4:4d:34:a2:f9:2a:98:ef:7e:aa:b2:
         eb:42:d2:2d:05:0d:36:66:4f:45:4d:ad:f1:35:21:b7:6d:f1:
         e2:f7:4f:42:eb:88:a7:fe:8d:f0:ab:88:a4:37:b3:2d:04:5d:
         ca:b6:7c:6d:b2:1e:5b:4b:0d:3b:00:3f:79:98:54:8a:4e:1d:
         31:1e:e3:82:6b:8b:a5:02:05:5e:c8:b6:dd:04:44:fc:b5:e4:
         92:ab:1c:e6:13:44:e2:66:db:8b:9e:da:c3:92:2c:1a:70:97:
         88:a8:ce:54:26:f2:08:98:b8:08:97:91:a6:7c:70:90:b3:c4:
         98:8e:4f:a0:c4:ed:67:ba:47:84:a9:81:81:df:fa:72:62:41:
         9a:b7:47:03:92:77:73:25:16:1a:10:f2:11:c9:ce:f4:45:41:
         58:e2:65:21:74:ff:e7:81:8f:9a:b7:01:e6:b3:a6:98:78:be:
         cc:15:e8:a8:24:67:45:d1:8e:ef:5a:03:18:d1:be:91:e2:00:
         66:8a:e2:f9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB6mMTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZTZlZDA1NzljM2ZkMjUzNTk3ZWM4MmYwOTM5MTExYmE5ZDhjODhkMB4XDTIyMDEw
MTEwMDE1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZThkZTUyYmEwOTZl
NjBmZmRjZDBkMDkxNDZmZjU5YWZlYzViYmFiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ5HYBsPX/4ILrgECPDAzDY2ucPkY+aI0Va2tdJb1ukA8Vda
E/YX5YLia1vjVdV6dETJu0GGkbeKXLL0g3QXYla57h/8M94jjx916/wkoUZ+tN8T
v2BArmn6T1jX4AmGRcVBhTn24n481+bybPNgaV5D8/z6dlN5U8E3qDWufTkSfjU4
KyYFG7A40yKMZdxuBFbmrJuGQQjrQ2fJjD87efN72EAmn8CwVHNPYphK5WVvToEN
MYFDfJzKQzJMn2JivF1JnZNp8PU3qXQWA568UAYZsApeGrI+WAyGMEtpSF5FcOpb
+Sx4qKlhEfwMFap0lHWSo7mr+AYk+H2WZRYskcUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTo3lK6CW5g/9zQ0JFG/1mv7Fu6uzAfBgNVHSMEGDAWgBTebtBXnD/SU1l+
yC8JOREbqdjIjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNtN1FWNXdfMGxOWmZzZ3ZDVGtSRzZuWXlJMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvZjEzZjk4LTRlN2EtNDM1ZC1iMWIwLTgzODZlNzBiZGM1OC8x
LzZONVN1Z2x1WVBfYzBOQ1JSdjlaci14YnVycy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
ZjEzZjk4LTRlN2EtNDM1ZC1iMWIwLTgzODZlNzBiZGM1OC8xLzNtN1FWNXdfMGxO
WmZzZ3ZDVGtSRzZuWXlJMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkwGjANBgkqhkiG9w0BAQsFAAOC
AQEABZIlwxzqNK9WQF/k5uknjVoyupKZvGkWb37HRhWRgaD7a67sbYpo1hAIlQRC
86WbRRfUO64lyxXaQF4vVbRNNKL5Kpjvfqqy60LSLQUNNmZPRU2t8TUht23x4vdP
QuuIp/6N8KuIpDezLQRdyrZ8bbIeW0sNOwA/eZhUik4dMR7jgmuLpQIFXsi23QRE
/LXkkqsc5hNE4mbbi57aw5IsGnCXiKjOVCbyCJi4CJeRpnxwkLPEmI5PoMTtZ7pH
hKmBgd/6cmJBmrdHA5J3cyUWGhDyEcnO9EVBWOJlIXT/54GPmrcB5rOmmHi+zBXo
qCRnRdGO71oDGNG+keIAZori+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org