Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/6--u3-eMx6gSAnAFOBLh_xMOcOs.roa
File:                     6--u3-eMx6gSAnAFOBLh_xMOcOs.roa (raw, json)
Hash identifier:          +lhIIEScmTZJvqD5Ak9fX5iP9OWYjDh5UZ7jrnNM8/8=
Subject key identifier:   EB:EF:AE:DF:E7:8C:C7:A8:12:02:70:05:38:12:E1:FF:13:0E:70:EB
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       033A043E
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/6--u3-eMx6gSAnAFOBLh_xMOcOs.roa
Signing time:             Sat 01 Jan 2022 05:59:48 +0000
ROA not before:           Sat 01 Jan 2022 05:59:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        193.3.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54133822 (0x33a043e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: Jan  1 05:59:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebefaedfe78cc7a8120270053812e1ff130e70eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:93:d8:fa:3d:75:81:e8:b4:2f:48:0f:4c:60:
                    1f:af:0d:9e:9a:93:bb:d6:5b:9c:7f:db:a2:b0:26:
                    dd:a3:c1:66:2c:23:80:df:e6:a8:e3:91:03:06:45:
                    3d:b5:ee:c6:4f:7e:2e:56:e4:44:f6:0f:3c:d2:20:
                    60:1e:88:d6:90:32:1d:3d:fb:62:d1:bc:af:53:18:
                    33:ec:47:57:d8:73:22:45:74:94:b1:f4:29:92:59:
                    d2:4f:8b:c7:49:b4:3e:90:e9:e9:f0:77:94:57:df:
                    62:33:5b:40:00:8b:3b:91:c9:c3:75:85:d5:48:bb:
                    0d:5c:96:e7:79:3a:9f:6d:62:98:09:90:1d:ba:73:
                    74:41:e2:9a:23:16:89:d4:4d:ad:ee:b2:9d:11:2e:
                    a1:3e:23:5e:7a:70:cf:99:a3:2e:04:2b:b8:2e:4c:
                    69:41:a0:71:77:b6:16:80:33:1e:e8:f2:74:eb:f6:
                    5c:dc:a6:57:1c:d8:55:a2:21:69:cd:84:48:d7:34:
                    94:41:54:65:9b:c1:eb:5e:02:9a:24:d9:09:d1:6a:
                    4b:d8:3f:bc:7c:c0:f8:5a:c6:db:e5:19:29:6f:13:
                    a9:9e:cf:ee:31:8d:85:7b:06:ed:b1:39:38:9f:e6:
                    37:cc:67:78:44:15:99:96:00:0c:ba:8e:d5:e7:c5:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EF:AE:DF:E7:8C:C7:A8:12:02:70:05:38:12:E1:FF:13:0E:70:EB
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/6--u3-eMx6gSAnAFOBLh_xMOcOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:70:0e:bb:b2:e7:b0:99:10:11:92:71:ab:9d:24:d8:05:de:
         24:13:48:bc:ef:43:82:00:52:2a:8f:35:2c:9a:45:b4:46:ca:
         c1:d8:3d:a7:6b:4d:68:d7:e0:39:47:39:c8:83:2f:ba:f3:58:
         a6:6d:ba:37:0e:16:3f:29:36:64:3b:de:b1:90:80:82:89:c1:
         5b:ee:b8:5e:57:35:4f:34:fd:df:a0:11:b3:71:88:7d:d5:3d:
         51:b6:5f:79:bd:5c:c0:37:6c:cf:71:02:c3:41:c0:e5:6a:25:
         65:3d:a8:6c:eb:6e:7a:51:1b:2b:08:b0:f4:13:18:67:cc:ad:
         27:3e:df:a9:ce:0c:2d:13:a8:0b:46:1f:68:a2:9e:e2:14:eb:
         2a:8d:95:7e:6d:f6:82:f7:39:e5:30:fd:56:db:a7:5d:48:e0:
         d8:5b:9c:f6:e8:0d:4b:32:81:43:32:13:1b:19:9c:9b:c7:0c:
         65:a5:25:45:f6:b1:85:43:df:dc:e1:f5:52:13:00:a6:1b:68:
         bb:9e:ca:a5:bc:51:be:e1:65:09:23:3c:f0:9b:a7:48:23:58:
         d3:d6:0f:ac:9d:a3:3a:19:44:2e:1e:e8:da:bc:4a:41:09:1b:
         1a:76:dc:0b:b0:2e:b5:44:ee:90:7a:e1:42:bb:16:4b:bb:34:
         2c:3e:3a:53
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAzoEPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWZkODY2N2NjZTk1YmUwYWU5NjA1OGM0NTUwZDcwODgwMzUzMTJmMB4XDTIyMDEw
MTA1NTk0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWJlZmFlZGZlNzhj
YzdhODEyMDI3MDA1MzgxMmUxZmYxMzBlNzBlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPKT2Po9dYHotC9ID0xgH68NnpqTu9ZbnH/borAm3aPBZiwj
gN/mqOORAwZFPbXuxk9+LlbkRPYPPNIgYB6I1pAyHT37YtG8r1MYM+xHV9hzIkV0
lLH0KZJZ0k+Lx0m0PpDp6fB3lFffYjNbQACLO5HJw3WF1Ui7DVyW53k6n21imAmQ
HbpzdEHimiMWidRNre6ynREuoT4jXnpwz5mjLgQruC5MaUGgcXe2FoAzHujydOv2
XNymVxzYVaIhac2ESNc0lEFUZZvB614CmiTZCdFqS9g/vHzA+FrG2+UZKW8TqZ7P
7jGNhXsG7bE5OJ/mN8xneEQVmZYADLqO1efFj4UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTr767f54zHqBICcAU4EuH/Ew5w6zAfBgNVHSMEGDAWgBRa/YZnzOlb4K6W
BYxFUNcIgDUxLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1d2MkdaOHpwVy1DdWxnV01SVkRYQ0lBMU1TOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2IvYWFjYjBhLWNmNjQtNGU3NS1hOWRmLTI0OWFjNzczYzI4Mi8x
LzYtLXUzLWVNeDZnU0FuQUZPQkxoX3hNT2NPcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Iv
YWFjYjBhLWNmNjQtNGU3NS1hOWRmLTI0OWFjNzczYzI4Mi8xL1d2MkdaOHpwVy1D
dWxnV01SVkRYQ0lBMU1TOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEDLjANBgkqhkiG9w0BAQsFAAOC
AQEAZ3AOu7LnsJkQEZJxq50k2AXeJBNIvO9DggBSKo81LJpFtEbKwdg9p2tNaNfg
OUc5yIMvuvNYpm26Nw4WPyk2ZDvesZCAgonBW+64Xlc1TzT936ARs3GIfdU9UbZf
eb1cwDdsz3ECw0HA5WolZT2obOtuelEbKwiw9BMYZ8ytJz7fqc4MLROoC0YfaKKe
4hTrKo2Vfm32gvc55TD9VtunXUjg2Fuc9ugNSzKBQzITGxmcm8cMZaUlRfaxhUPf
3OH1UhMAphtou57KpbxRvuFlCSM88JunSCNY09YPrJ2jOhlELh7o2rxKQQkbGnbc
C7AutUTukHrhQrsWS7s0LD46Uw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:05 2024 by rpki-client on console-ams.rpki-client.org