Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/6I_soiGxKmBTw56nh0gR8mbZGaA.roa
File:                     6I_soiGxKmBTw56nh0gR8mbZGaA.roa (raw, json)
Hash identifier:          sQf2ld04mNTeq1gY8MelCvrJfIzZYdlu08SiwevTVmk=
Subject key identifier:   E8:8F:EC:A2:21:B1:2A:60:53:C3:9E:A7:87:48:11:F2:66:D9:19:A0
Certificate issuer:       /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial:       6EDD
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/6I_soiGxKmBTw56nh0gR8mbZGaA.roa
Signing time:             Tue 24 May 2022 11:31:13 +0000
ROA not before:           Tue 24 May 2022 11:31:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34927
IP address blocks:        185.44.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28381 (0x6edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
        Validity
            Not Before: May 24 11:31:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e88feca221b12a6053c39ea7874811f266d919a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:ce:1c:85:44:4a:7d:71:b6:08:f8:eb:2b:
                    52:a4:0f:63:29:d7:76:46:0e:c4:dc:3d:4c:fe:f7:
                    55:0b:66:21:be:e5:07:70:b5:7d:a2:42:b4:5a:51:
                    41:d8:f4:d9:8d:33:42:4f:bb:80:84:ee:c7:38:b3:
                    a5:21:68:ec:39:d3:a9:85:f6:f9:03:5c:54:05:02:
                    18:ee:93:b2:df:49:47:a5:60:5e:f2:91:9d:af:28:
                    06:09:b0:a0:0c:62:9e:ed:cf:79:7b:55:36:c9:11:
                    27:fa:37:30:59:90:e1:34:03:4f:dc:b8:5a:8e:d2:
                    f7:92:33:72:dd:01:2d:9f:a2:1e:af:c8:33:70:e6:
                    7d:93:ee:b5:6b:ce:cf:fd:1a:66:28:51:c6:1b:48:
                    8a:32:fb:c8:7e:9b:39:46:0d:1b:35:d0:8f:53:ea:
                    76:a2:8e:c3:00:e8:8a:0f:dc:1c:a1:1f:72:7a:ea:
                    3d:c0:93:bc:c6:fa:68:ff:7a:0b:82:cb:55:b9:f1:
                    18:6b:17:f6:1e:24:e4:d8:3a:53:e9:1d:1c:16:ec:
                    e2:9a:58:57:4f:00:0b:82:04:9e:6b:eb:48:f0:8e:
                    7e:d3:2c:d3:7c:6a:e6:c6:11:76:e7:4b:94:e4:dd:
                    a3:0a:1f:a8:83:c3:1b:a2:95:38:14:02:e6:de:be:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:EC:A2:21:B1:2A:60:53:C3:9E:A7:87:48:11:F2:66:D9:19:A0
            X509v3 Authority Key Identifier:
                keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/6I_soiGxKmBTw56nh0gR8mbZGaA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:db:60:77:20:4f:a9:50:fe:83:ee:a1:47:b9:c0:b1:7f:
         44:96:7e:8f:ee:52:79:f1:26:8f:66:05:e3:4d:96:4f:93:28:
         59:1d:01:e7:8d:3e:5c:af:b2:a5:e6:00:98:10:0d:00:07:96:
         52:fd:c5:90:ed:01:5e:ae:b4:d8:b8:99:b1:b2:46:23:12:56:
         39:2e:59:6f:bc:df:bd:8d:c8:d8:12:94:59:85:cb:1a:3b:ba:
         cb:dc:e8:9a:68:db:97:3d:b0:25:86:29:0f:12:9b:cb:cd:8d:
         de:e1:4f:d0:67:e6:87:9f:13:68:15:ad:29:97:99:b1:d5:0c:
         6c:60:35:13:d3:7c:6f:38:4c:51:59:17:ef:42:a8:28:db:ea:
         40:b4:1b:77:d7:a7:e4:62:36:01:14:e2:58:cc:c1:54:08:91:
         0f:ab:1c:6d:28:36:b4:fe:0a:67:d4:73:92:30:be:af:fd:9d:
         99:36:52:78:72:d9:84:f9:12:a5:0b:48:63:c8:11:93:54:f5:
         3b:96:08:aa:a9:4c:4e:e4:2d:1e:34:28:40:bd:e2:16:8f:59:
         0c:b9:be:0f:b2:f2:8f:63:65:55:fe:bd:da:e8:d7:27:42:16:
         00:0a:51:5a:8c:7f:64:ad:8d:1c:8d:7a:68:94:b0:2b:b7:35:
         b8:69:bd:8e
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICbt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYTQz
MzgxNjhjZDlkNWFmMDYwNDAxM2ZjNDI3NDEyNmZjNTgxZjNjYjAeFw0yMjA1MjQx
MTMxMTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU4OGZlY2EyMjFiMTJh
NjA1M2MzOWVhNzg3NDgxMWYyNjZkOTE5YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/qs4chURKfXG2CPjrK1KkD2Mp13ZGDsTcPUz+91ULZiG+5Qdw
tX2iQrRaUUHY9NmNM0JPu4CE7sc4s6UhaOw506mF9vkDXFQFAhjuk7LfSUelYF7y
kZ2vKAYJsKAMYp7tz3l7VTbJESf6NzBZkOE0A0/cuFqO0veSM3LdAS2foh6vyDNw
5n2T7rVrzs/9GmYoUcYbSIoy+8h+mzlGDRs10I9T6naijsMA6IoP3ByhH3J66j3A
k7zG+mj/eguCy1W58RhrF/YeJOTYOlPpHRwW7OKaWFdPAAuCBJ5r60jwjn7TLNN8
aubGEXbnS5Tk3aMKH6iDwxuilTgUAubevnrDAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU6I/soiGxKmBTw56nh0gR8mbZGaAwHwYDVR0jBBgwFoAUpDOBaM2dWvBgQBP8
QnQSb8WB88swDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9w
RE9CYU0yZFd2QmdRQlA4UW5RU2I4V0I4OHMuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzA4LzE3NmY3ZC02ZjBmLTQ1ZTUtOTdmMi1jOWRiOTgxYTJhMmYvMS82
SV9zb2lHeEttQlR3NTZuaDBnUjhtYlpHYUEucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzE3
NmY3ZC02ZjBmLTQ1ZTUtOTdmMi1jOWRiOTgxYTJhMmYvMS9wRE9CYU0yZFd2QmdR
QlA4UW5RU2I4V0I4OHMuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5LFMwDQYJKoZIhvcNAQELBQADggEB
AFHA22B3IE+pUP6D7qFHucCxf0SWfo/uUnnxJo9mBeNNlk+TKFkdAeeNPlyvsqXm
AJgQDQAHllL9xZDtAV6utNi4mbGyRiMSVjkuWW+8372NyNgSlFmFyxo7usvc6Jpo
25c9sCWGKQ8Sm8vNjd7hT9Bn5oefE2gVrSmXmbHVDGxgNRPTfG84TFFZF+9CqCjb
6kC0G3fXp+RiNgEU4ljMwVQIkQ+rHG0oNrT+CmfUc5Iwvq/9nZk2Unhy2YT5EqUL
SGPIEZNU9TuWCKqpTE7kLR40KEC94haPWQy5vg+y8o9jZVX+vdro1ydCFgAKUVqM
f2StjRyNemiUsCu3NbhpvY4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:35 2024 by rpki-client on console-ams.rpki-client.org