Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/m6eMaogaFu1uKQ27r96c6SCM3Ws.roa
File:                     m6eMaogaFu1uKQ27r96c6SCM3Ws.roa (raw, json)
Hash identifier:          4cSOkbCx+CKVWlgJC7A5h6t/Dn16eSE4OtXtthyrPrs=
Subject key identifier:   9B:A7:8C:6A:88:1A:16:ED:6E:29:0D:BB:AF:DE:9C:E9:20:8C:DD:6B
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       036A8747
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/m6eMaogaFu1uKQ27r96c6SCM3Ws.roa
Signing time:             Tue 10 May 2022 18:50:01 +0000
ROA not before:           Tue 10 May 2022 18:50:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25591
IP address blocks:        80.242.96.0/22 maxlen: 22
                          80.242.104.0/22 maxlen: 22
                          80.242.100.0/22 maxlen: 22
                          80.242.108.0/22 maxlen: 22
                          37.75.216.0/22 maxlen: 22
                          37.75.220.0/22 maxlen: 22
                          31.3.24.0/22 maxlen: 22
                          31.3.28.0/22 maxlen: 22
                          185.14.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57313095 (0x36a8747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: May 10 18:50:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ba78c6a881a16ed6e290dbbafde9ce9208cdd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:d9:fb:fa:13:d9:26:07:6e:75:eb:2a:6d:
                    69:1f:07:b6:79:4f:05:30:14:6d:53:89:47:99:66:
                    86:59:74:26:f3:c7:80:75:32:9e:66:2c:29:51:ab:
                    2a:b2:03:ba:ce:e5:2f:b1:24:a5:37:ac:a5:c6:2b:
                    65:87:34:35:a2:be:85:14:61:f0:dc:0a:67:01:6c:
                    be:dc:0b:c4:e1:ef:20:0d:9f:b2:9d:0e:d3:55:f4:
                    07:c9:3d:83:88:66:3c:a9:b1:e1:21:09:94:82:c7:
                    88:fd:24:24:a0:b0:da:3a:7e:c1:9e:b4:aa:d0:f2:
                    02:c9:b0:cd:fe:97:ee:b8:67:2a:4a:1d:3c:1a:f0:
                    09:c0:91:55:fd:8f:53:d7:6d:49:1e:6f:1f:6d:5f:
                    b5:a0:52:e4:d8:e2:9c:71:e7:24:c4:fc:85:7a:6b:
                    0d:81:a0:b2:a6:2f:1f:ef:7f:20:2d:2a:f1:3f:56:
                    55:f2:25:6b:62:7c:46:25:a5:6a:45:ad:b1:6c:4e:
                    d0:dc:08:04:cd:90:ee:dd:84:93:1f:d6:c8:51:99:
                    40:fc:3e:33:8d:b4:89:8c:84:ed:90:66:56:c2:2b:
                    9c:8d:41:51:72:b2:5e:34:c5:5c:8f:28:f7:5a:51:
                    ec:14:1b:93:e3:2b:b0:6f:5b:2b:ad:bf:3f:9f:81:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:8C:6A:88:1A:16:ED:6E:29:0D:BB:AF:DE:9C:E9:20:8C:DD:6B
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/m6eMaogaFu1uKQ27r96c6SCM3Ws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.3.24.0/21
                  37.75.216.0/21
                  80.242.96.0/20
                  185.14.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:53:f3:88:30:fe:53:d3:41:fb:35:bf:2e:ad:51:42:25:22:
         62:a8:4f:62:59:5b:0b:68:15:f2:d6:91:1f:5f:fc:8f:6f:5d:
         e4:f2:7f:05:85:d8:9c:84:9d:a3:d2:fa:66:b5:33:7c:5a:75:
         b4:80:b7:85:98:d3:16:da:de:d1:03:88:2c:1b:1d:04:59:a7:
         bd:a9:e8:43:10:8c:a7:d5:0d:63:28:10:84:50:eb:f8:a7:b3:
         68:96:26:fc:9c:f8:87:8b:5d:ce:c0:f2:90:aa:ed:01:6d:36:
         dd:d7:29:7d:09:c2:41:77:75:db:9b:6a:3d:fd:a1:16:21:2f:
         44:0a:36:99:71:6b:32:b0:5d:76:97:62:c4:d3:8a:15:e4:3c:
         11:68:88:fb:69:e4:bf:ac:59:07:f9:63:02:37:c6:f8:0f:db:
         12:56:a4:01:27:5a:c3:47:6c:15:9a:14:22:bb:8c:9e:42:d9:
         0b:fa:54:1c:39:77:ba:67:d2:f9:d4:f9:25:19:91:fb:36:0c:
         2d:c7:a8:46:bc:0c:fc:51:33:77:79:3c:f1:52:06:2e:74:a2:
         ff:45:05:d2:a7:a0:a2:46:51:22:ed:50:20:c2:ba:97:cf:59:
         83:b1:4d:12:50:b7:4e:df:6f:5d:a9:eb:13:61:02:37:e5:3c:
         a0:3d:15:5b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEA2qHRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
M2JmMzZlYjE4ZWY5YTU3YzVmYjYwM2FkYTQwMGZlNmI2Njg4ZTZlMB4XDTIyMDUx
MDE4NTAwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJhNzhjNmE4ODFh
MTZlZDZlMjkwZGJiYWZkZTljZTkyMDhjZGQ2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHr2fv6E9kmB2516yptaR8HtnlPBTAUbVOJR5lmhll0JvPH
gHUynmYsKVGrKrIDus7lL7EkpTespcYrZYc0NaK+hRRh8NwKZwFsvtwLxOHvIA2f
sp0O01X0B8k9g4hmPKmx4SEJlILHiP0kJKCw2jp+wZ60qtDyAsmwzf6X7rhnKkod
PBrwCcCRVf2PU9dtSR5vH21ftaBS5NjinHHnJMT8hXprDYGgsqYvH+9/IC0q8T9W
VfIla2J8RiWlakWtsWxO0NwIBM2Q7t2Ekx/WyFGZQPw+M420iYyE7ZBmVsIrnI1B
UXKyXjTFXI8o91pR7BQbk+MrsG9bK62/P5+BzfsCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSbp4xqiBoW7W4pDbuv3pzpIIzdazAfBgNVHSMEGDAWgBSDvzbrGO+aV8X7
YDraQA/mtmiObjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2c3ODI2eGp2bWxmRi0yQTYya0FQNXJab2ptNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvZjc3ZDUxLWVlMWMtNDdhOS05MGJjLWUwZDJhMWI2ZThhYy8x
L202ZU1hb2dhRnUxdUtRMjdyOTZjNlNDTTNXcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
Zjc3ZDUxLWVlMWMtNDdhOS05MGJjLWUwZDJhMWI2ZThhYy8xL2c3ODI2eGp2bWxm
Ri0yQTYya0FQNXJab2ptNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAx8DGAMEAyVL2AMEBFDyYAMEArkO
EDANBgkqhkiG9w0BAQsFAAOCAQEAaFPziDD+U9NB+zW/Lq1RQiUiYqhPYllbC2gV
8taRH1/8j29d5PJ/BYXYnISdo9L6ZrUzfFp1tIC3hZjTFtre0QOILBsdBFmnvano
QxCMp9UNYygQhFDr+KezaJYm/Jz4h4tdzsDykKrtAW023dcpfQnCQXd125tqPf2h
FiEvRAo2mXFrMrBddpdixNOKFeQ8EWiI+2nkv6xZB/ljAjfG+A/bElakASdaw0ds
FZoUIruMnkLZC/pUHDl3umfS+dT5JRmR+zYMLceoRrwM/FEzd3k88VIGLnSi/0UF
0qegokZRIu1QIMK6l89Zg7FNElC3Tt9vXanrE2ECN+U8oD0VWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:46 2024 by rpki-client on console-fra.rpki-client.org