Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/eyL6oQULeQXefXS-C8h8IUh3Aws.roa
File:                     eyL6oQULeQXefXS-C8h8IUh3Aws.roa (raw, json)
Hash identifier:          WjW8bAGVDR7KYkxOZlnejrHrBhNcNB0j+itAWqtnVwk=
Subject key identifier:   7B:22:FA:A1:05:0B:79:05:DE:7D:74:BE:0B:C8:7C:21:48:77:03:0B
Certificate issuer:       /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial:       03E042C5
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/eyL6oQULeQXefXS-C8h8IUh3Aws.roa
Signing time:             Sat 01 Jan 2022 04:56:46 +0000
ROA not before:           Sat 01 Jan 2022 04:56:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54994
IP address blocks:        151.236.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65028805 (0x3e042c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
        Validity
            Not Before: Jan  1 04:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b22faa1050b7905de7d74be0bc87c214877030b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:2b:01:b2:91:d1:ae:1f:bf:60:e6:38:9c:
                    ea:e5:c6:97:a9:2b:19:84:c2:56:c2:44:77:1d:c1:
                    6b:cd:58:0a:a0:4c:59:d2:c6:31:29:40:11:cf:e9:
                    ca:57:aa:66:79:94:58:3c:a0:5c:be:ea:89:18:a4:
                    7f:39:3e:fb:12:06:67:d3:77:0f:79:df:36:89:8a:
                    06:d8:f2:55:a2:50:93:b8:d2:3c:40:55:c3:ae:92:
                    ec:42:76:7f:5d:77:0e:ed:16:7b:ec:76:18:8d:f6:
                    f4:53:b5:82:90:dd:c8:ad:d8:48:b1:c6:f5:3e:74:
                    06:41:4b:a1:b8:64:c3:2f:e6:a7:2a:46:ac:52:ac:
                    ed:5d:5c:4d:01:a8:5f:e3:e8:45:9b:4b:7a:87:3e:
                    9a:5e:4a:ee:e2:b2:4f:d3:3a:7e:21:2c:69:87:20:
                    5b:79:47:25:25:5e:b1:03:99:eb:93:fc:25:19:38:
                    12:ea:2b:31:99:81:3a:55:fd:a5:f4:5e:2c:77:7f:
                    08:41:6f:0c:e2:36:77:3e:a0:40:75:c9:fc:e3:2a:
                    56:83:4e:d4:82:41:e6:1d:e2:db:f6:63:02:11:43:
                    cb:83:83:28:e2:13:3c:5f:ec:28:31:7f:9b:8b:f5:
                    c9:02:44:af:98:36:f6:4f:d1:f1:69:84:c9:5a:38:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:22:FA:A1:05:0B:79:05:DE:7D:74:BE:0B:C8:7C:21:48:77:03:0B
            X509v3 Authority Key Identifier:
                keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/eyL6oQULeQXefXS-C8h8IUh3Aws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.236.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:15:67:f0:ce:16:17:e4:91:23:7f:b4:05:fb:0d:27:6b:d8:
         38:9f:8c:3e:20:38:ee:89:80:ed:9b:5b:46:72:14:3d:2e:76:
         1b:9f:bd:87:c1:23:e2:4b:80:ef:3a:1b:93:b0:a7:d3:f0:b1:
         ca:11:5b:6a:6e:5f:60:1b:a8:aa:c3:8d:19:d3:98:15:02:91:
         52:93:43:b7:d6:9b:0a:6d:07:13:fd:25:90:1b:82:9b:f0:18:
         d2:95:3d:20:a6:61:cf:7f:e3:18:6c:ac:0a:0b:c3:8d:29:50:
         9b:17:7b:2f:04:f6:6d:5e:6d:24:2f:a6:f4:a5:a0:6d:4c:18:
         5a:4a:9c:77:f9:c1:44:c4:5c:cc:a2:7f:2a:a6:94:0f:09:20:
         d3:5e:cd:fb:81:c9:a8:36:02:05:a6:63:03:6e:e8:fd:62:ae:
         9b:d5:b4:5e:f7:da:2f:fb:67:08:ef:60:b5:03:24:01:f2:d8:
         34:28:d5:59:a6:13:57:4d:6d:d3:a8:fa:d2:01:60:55:7d:4a:
         68:5f:b9:ca:09:fb:83:82:33:35:6b:7a:a0:bc:6a:fd:7c:c7:
         6e:bf:ee:52:1f:69:d7:9e:b7:55:5b:5a:4f:a1:c8:63:99:54:
         a2:3f:94:9a:fa:cd:6e:b0:fb:4f:84:a1:b3:41:d8:e3:24:3e:
         05:39:54:81
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+BCxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MjRjNDk0ZjU2MTkzYjRlOWFkZjNkYjcyZTRmMDE5NzhjNTg3ZjE4MB4XDTIyMDEw
MTA0NTY0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2IyMmZhYTEwNTBi
NzkwNWRlN2Q3NGJlMGJjODdjMjE0ODc3MDMwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzkKwGykdGuH79g5jic6uXGl6krGYTCVsJEdx3Ba81YCqBM
WdLGMSlAEc/pyleqZnmUWDygXL7qiRikfzk++xIGZ9N3D3nfNomKBtjyVaJQk7jS
PEBVw66S7EJ2f113Du0We+x2GI329FO1gpDdyK3YSLHG9T50BkFLobhkwy/mpypG
rFKs7V1cTQGoX+PoRZtLeoc+ml5K7uKyT9M6fiEsaYcgW3lHJSVesQOZ65P8JRk4
EuorMZmBOlX9pfReLHd/CEFvDOI2dz6gQHXJ/OMqVoNO1IJB5h3i2/ZjAhFDy4OD
KOITPF/sKDF/m4v1yQJEr5g29k/R8WmEyVo4zfkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR7IvqhBQt5Bd59dL4LyHwhSHcDCzAfBgNVHSMEGDAWgBRiTElPVhk7Tprf
PbcuTwGXjFh/GDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lreEpUMVlaTzA2YTN6MjNMazhCbDR4WWZ4Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvMDk4OGFmLThkN2YtNGMyOS1iNWNjLTdhYWI2ZWY5NTVhMS8x
L2V5TDZvUVVMZVFYZWZYUy1DOGg4SVVoM0F3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
MDk4OGFmLThkN2YtNGMyOS1iNWNjLTdhYWI2ZWY5NTVhMS8xL1lreEpUMVlaTzA2
YTN6MjNMazhCbDR4WWZ4Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfsXTANBgkqhkiG9w0BAQsFAAOC
AQEASxVn8M4WF+SRI3+0BfsNJ2vYOJ+MPiA47omA7ZtbRnIUPS52G5+9h8Ej4kuA
7zobk7Cn0/CxyhFbam5fYBuoqsONGdOYFQKRUpNDt9abCm0HE/0lkBuCm/AY0pU9
IKZhz3/jGGysCgvDjSlQmxd7LwT2bV5tJC+m9KWgbUwYWkqcd/nBRMRczKJ/KqaU
Dwkg017N+4HJqDYCBaZjA27o/WKum9W0XvfaL/tnCO9gtQMkAfLYNCjVWaYTV01t
06j60gFgVX1KaF+5ygn7g4IzNWt6oLxq/XzHbr/uUh9p1563VVtaT6HIY5lUoj+U
mvrNbrD7T4Shs0HY4yQ+BTlUgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org