Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/OWR-E9aTAu6PwzR1QNAkjeB3NQc.roa
File:                     OWR-E9aTAu6PwzR1QNAkjeB3NQc.roa (raw, json)
Hash identifier:          pJWrb1KlopVkCRNJxyZW+CY2dFh1gNR/U0Yk7muCqJg=
Subject key identifier:   39:64:7E:13:D6:93:02:EE:8F:C3:34:75:40:D0:24:8D:E0:77:35:07
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       8055B2
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/OWR-E9aTAu6PwzR1QNAkjeB3NQc.roa
Signing time:             Fri 08 Apr 2022 08:53:31 +0000
ROA not before:           Fri 08 Apr 2022 08:53:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39120
IP address blocks:        185.197.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8410546 (0x8055b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Apr  8 08:53:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39647e13d69302ee8fc3347540d0248de0773507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:06:28:9e:52:99:7b:fa:6f:18:cb:23:74:
                    02:a8:de:d4:74:fc:3e:a1:eb:49:2b:2f:0d:5e:c4:
                    c3:57:a0:ce:eb:7f:c7:c4:f8:c6:a2:1b:0b:1f:d8:
                    ee:c9:44:0f:6e:12:b5:6b:69:33:9c:7f:63:8e:01:
                    ed:7e:ff:63:4e:8f:19:ed:bd:df:41:29:79:c7:92:
                    56:dd:55:59:7e:13:27:11:62:20:77:99:5f:d7:b2:
                    85:44:e6:e7:5e:f6:a1:a0:9c:85:e9:a2:68:b1:cd:
                    f7:c7:d8:38:34:f0:c8:58:8f:49:37:e1:27:a1:a6:
                    f5:00:43:38:5f:21:84:c1:21:fc:4c:3f:8d:a8:d9:
                    94:f8:ce:ed:7c:8b:c2:8d:97:ba:80:3b:e7:19:17:
                    7b:b2:a7:da:fc:0c:70:d2:f1:7a:e5:eb:0c:b0:5a:
                    39:01:c3:1a:d6:52:35:9d:5b:05:99:83:cf:43:b7:
                    54:7d:ee:a7:50:e1:de:9d:19:fa:06:84:39:ee:d8:
                    b2:19:5d:ad:f7:24:f9:7c:66:4c:37:02:93:44:f7:
                    d2:9f:dc:88:ac:26:61:38:7a:db:23:84:94:d3:85:
                    df:e6:ff:a2:82:66:e3:e2:23:01:e3:47:78:76:e2:
                    83:6f:b3:71:0c:2b:f8:b6:83:49:d2:3c:87:89:9c:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:64:7E:13:D6:93:02:EE:8F:C3:34:75:40:D0:24:8D:E0:77:35:07
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/OWR-E9aTAu6PwzR1QNAkjeB3NQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:e3:b7:3e:00:14:07:cd:31:56:76:2f:14:9d:fe:90:e2:
         8e:ad:43:d0:cc:2b:82:3a:15:ac:2f:3e:a8:62:3c:be:9d:33:
         f3:14:90:92:99:ee:48:d6:2c:7c:7b:b4:70:cc:cf:59:4f:a6:
         f3:9c:32:81:79:a8:21:9b:55:d6:42:ea:52:b8:45:56:fc:c9:
         7a:b9:d6:11:99:73:60:10:87:19:55:59:7a:bd:ef:bf:ba:4c:
         de:18:6d:15:26:d3:e9:cc:3b:87:26:23:09:f9:3a:11:1a:03:
         f1:bd:b3:5c:29:ba:86:e7:71:c7:7b:08:29:e8:f7:06:06:18:
         6a:55:8f:b1:e2:30:65:dd:13:eb:44:0a:5d:8c:83:0b:3d:66:
         aa:f3:f8:96:42:ee:e4:e4:ac:22:b4:a7:20:f3:b9:91:9c:cf:
         69:e6:69:b2:41:44:f7:7b:f2:65:00:22:6f:ff:ae:67:60:c3:
         de:01:bd:10:3d:e9:42:bc:bf:ac:a7:1e:60:9b:84:e2:0a:aa:
         34:17:bd:7f:5d:5a:2a:26:f7:47:1f:f8:74:26:32:79:81:1d:
         c0:3a:19:ef:c6:d9:d4:e0:89:2b:99:b5:8c:03:25:3d:be:40:
         d0:f4:a7:6a:94:06:47:9b:a6:1c:de:74:e8:1c:5a:9f:23:8d:
         c0:db:69:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIBVsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ODUzMTBmNTAzMTM3YWU4YjM1ZDRmMzI5ZjQ2ZjA2OWRkNzAzODE1MB4XDTIyMDQw
ODA4NTMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzk2NDdlMTNkNjkz
MDJlZThmYzMzNDc1NDBkMDI0OGRlMDc3MzUwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJIJBiieUpl7+m8YyyN0Aqje1HT8PqHrSSsvDV7Ew1egzut/
x8T4xqIbCx/Y7slED24StWtpM5x/Y44B7X7/Y06PGe2930EpeceSVt1VWX4TJxFi
IHeZX9eyhUTm5172oaCchemiaLHN98fYODTwyFiPSTfhJ6Gm9QBDOF8hhMEh/Ew/
jajZlPjO7XyLwo2XuoA75xkXe7Kn2vwMcNLxeuXrDLBaOQHDGtZSNZ1bBZmDz0O3
VH3up1Dh3p0Z+gaEOe7Yshldrfck+XxmTDcCk0T30p/ciKwmYTh62yOElNOF3+b/
ooJm4+IjAeNHeHbig2+zcQwr+LaDSdI8h4mc9AsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ5ZH4T1pMC7o/DNHVA0CSN4Hc1BzAfBgNVHSMEGDAWgBSoUxD1AxN66LNd
TzKfRvBp3XA4FTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FGTVE5UU1UZXVpelhVOHluMGJ3YWQxd09CVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvYjQyOTQ5LWVlMGEtNDEyMy04N2JmLTMwMTg5YTVhNGViYS8x
L09XUi1FOWFUQXU2UHd6UjFRTkFramVCM05RYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
YjQyOTQ5LWVlMGEtNDEyMy04N2JmLTMwMTg5YTVhNGViYS8xL3FGTVE5UU1UZXVp
elhVOHluMGJ3YWQxd09CVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnFjjANBgkqhkiG9w0BAQsFAAOC
AQEAYbzjtz4AFAfNMVZ2LxSd/pDijq1D0MwrgjoVrC8+qGI8vp0z8xSQkpnuSNYs
fHu0cMzPWU+m85wygXmoIZtV1kLqUrhFVvzJernWEZlzYBCHGVVZer3vv7pM3hht
FSbT6cw7hyYjCfk6ERoD8b2zXCm6hudxx3sIKej3BgYYalWPseIwZd0T60QKXYyD
Cz1mqvP4lkLu5OSsIrSnIPO5kZzPaeZpskFE93vyZQAib/+uZ2DD3gG9ED3pQry/
rKceYJuE4gqqNBe9f11aKib3Rx/4dCYyeYEdwDoZ78bZ1OCJK5m1jAMlPb5A0PSn
apQGR5umHN506BxanyONwNtppw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:03 2024 by rpki-client on console-ams.rpki-client.org