Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/VkZZ6SmkUP_6Xyga_J4VYnZwYCs.roa
File:                     VkZZ6SmkUP_6Xyga_J4VYnZwYCs.roa (raw, json)
Hash identifier:          d48/3R5VjV/Pp8zKYUyrtgTyYrCpWgbAqH8vCIcI30k=
Subject key identifier:   56:46:59:E9:29:A4:50:FF:FA:5F:28:1A:FC:9E:15:62:76:70:60:2B
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       42A96DE3
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/VkZZ6SmkUP_6Xyga_J4VYnZwYCs.roa
Signing time:             Sat 01 Jan 2022 06:05:06 +0000
ROA not before:           Sat 01 Jan 2022 06:05:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205576
IP address blocks:        46.61.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118399971 (0x42a96de3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  1 06:05:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=564659e929a450fffa5f281afc9e15627670602b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:3a:54:5e:32:9c:d6:dd:b7:a1:99:22:0a:
                    83:87:10:47:ee:cb:a8:ce:4d:81:bc:cf:43:15:74:
                    bf:ce:f2:43:90:de:51:88:d5:d5:be:d6:45:68:44:
                    22:28:d2:41:d0:c4:4f:6f:22:f7:cd:e2:c0:36:39:
                    91:1b:5e:be:9e:ce:e2:0b:f1:7a:5b:80:89:2e:99:
                    dc:02:48:a9:05:34:9c:21:ef:87:ce:71:72:9a:e1:
                    29:f8:3f:d2:8e:11:f7:8d:0d:63:49:2c:c5:fd:cf:
                    f4:05:b5:34:f7:e0:ca:03:eb:eb:d9:37:24:e6:97:
                    00:73:f5:15:ea:be:15:45:3d:e0:44:8f:fc:a4:7a:
                    7f:06:51:b8:0e:be:3b:72:3f:de:6e:e5:95:41:95:
                    1b:53:c9:04:ab:ea:6f:37:bf:ce:f7:dc:4b:3e:15:
                    55:fa:f3:46:a8:e1:63:26:7a:88:f5:14:df:6e:3f:
                    36:8e:50:d7:48:f1:30:17:dd:e1:a6:ca:bb:dd:22:
                    8f:c0:27:31:18:40:14:a4:19:8c:c7:fa:61:26:16:
                    0d:83:6e:5a:39:9d:87:a8:45:5f:65:f5:14:fe:9c:
                    f4:ca:d5:bc:07:0d:f0:99:03:f9:4c:63:2d:2f:27:
                    69:28:db:d3:c5:41:86:38:5c:b8:8a:69:3d:c4:93:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:46:59:E9:29:A4:50:FF:FA:5F:28:1A:FC:9E:15:62:76:70:60:2B
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/VkZZ6SmkUP_6Xyga_J4VYnZwYCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.61.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:82:9a:89:88:8c:4c:51:48:2d:80:7b:8b:64:27:b2:25:
         0c:4b:c2:22:62:51:78:32:35:03:8e:19:cc:6e:79:97:c2:c4:
         1b:11:e0:26:77:eb:bd:29:ef:bd:b0:f4:f8:86:7b:6b:ec:ec:
         89:1c:b6:99:b9:54:95:43:56:6e:51:b2:bc:b2:b5:14:ce:13:
         d1:cd:b1:7e:b4:59:39:4d:b0:9d:68:87:1a:f1:7c:f2:99:15:
         d8:c9:d0:77:89:4b:bd:27:ae:31:49:d7:76:33:05:c0:ed:d1:
         8b:e6:f8:34:20:f9:d4:76:f3:46:89:b4:88:03:73:e8:92:c1:
         54:a6:11:a1:c9:53:c4:b5:a9:80:77:9c:53:a8:e4:ba:e3:9e:
         db:25:1e:46:d8:fe:a9:10:a3:dc:93:f8:2f:fe:32:4c:ce:c4:
         95:fe:94:fb:dd:a9:69:90:a4:2c:3f:5a:06:80:7a:ec:d1:cb:
         bc:8c:f3:55:9b:4d:01:0a:c8:14:50:e5:85:65:23:4a:44:e1:
         53:9d:91:84:2c:71:af:01:b2:18:a2:8f:0e:ba:1f:ef:a6:0e:
         a8:ee:93:ef:5f:0d:49:2a:fc:6c:78:4a:46:a2:23:5f:af:fc:
         24:a0:76:4c:e1:be:3e:d7:12:41:c8:46:ca:d1:28:33:10:63:
         e5:1b:e7:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQqlt4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWU1MzFiOWFjMjk5MGQ2OWE4YTVjMzAyM2U3MmU2ZDg0MWU2YzA5MB4XDTIyMDEw
MTA2MDUwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTY0NjU5ZTkyOWE0
NTBmZmZhNWYyODFhZmM5ZTE1NjI3NjcwNjAyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7qOlReMpzW3behmSIKg4cQR+7LqM5NgbzPQxV0v87yQ5De
UYjV1b7WRWhEIijSQdDET28i983iwDY5kRtevp7O4gvxeluAiS6Z3AJIqQU0nCHv
h85xcprhKfg/0o4R940NY0ksxf3P9AW1NPfgygPr69k3JOaXAHP1Feq+FUU94ESP
/KR6fwZRuA6+O3I/3m7llUGVG1PJBKvqbze/zvfcSz4VVfrzRqjhYyZ6iPUU324/
No5Q10jxMBfd4abKu90ij8AnMRhAFKQZjMf6YSYWDYNuWjmdh6hFX2X1FP6c9MrV
vAcN8JkD+UxjLS8naSjb08VBhjhcuIppPcSTWmsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRWRlnpKaRQ//pfKBr8nhVidnBgKzAfBgNVHSMEGDAWgBRe5TG5rCmQ1pqK
XDAj5y5thB5sCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1h1VXh1YXdwa05hYWlsd3dJLWN1YllRZWJBay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvOWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8x
L1ZrWlo2U21rVVBfNlh5Z2FfSjRWWW5ad1lDcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
OWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8xL1h1VXh1YXdwa05h
YWlsd3dJLWN1YllRZWJBay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC49uDANBgkqhkiG9w0BAQsFAAOC
AQEAYhqCmomIjExRSC2Ae4tkJ7IlDEvCImJReDI1A44ZzG55l8LEGxHgJnfrvSnv
vbD0+IZ7a+zsiRy2mblUlUNWblGyvLK1FM4T0c2xfrRZOU2wnWiHGvF88pkV2MnQ
d4lLvSeuMUnXdjMFwO3Ri+b4NCD51HbzRom0iANz6JLBVKYRoclTxLWpgHecU6jk
uuOe2yUeRtj+qRCj3JP4L/4yTM7Elf6U+92paZCkLD9aBoB67NHLvIzzVZtNAQrI
FFDlhWUjSkThU52RhCxxrwGyGKKPDrof76YOqO6T718NSSr8bHhKRqIjX6/8JKB2
TOG+PtcSQchGytEoMxBj5Rvngw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:25 2024 by rpki-client on console-ams.rpki-client.org