Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/5Em6XTvAY8c6sdJBBSmmOClSkw4.roa
File:                     5Em6XTvAY8c6sdJBBSmmOClSkw4.roa (raw, json)
Hash identifier:          TxiTFFbugoOzxu+2drPny7eVwfxU6v5PXkZkSprqUkw=
Subject key identifier:   E4:49:BA:5D:3B:C0:63:C7:3A:B1:D2:41:05:29:A6:38:29:52:93:0E
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       04FCA440
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/5Em6XTvAY8c6sdJBBSmmOClSkw4.roa
Signing time:             Fri 27 May 2022 12:53:13 +0000
ROA not before:           Fri 27 May 2022 12:53:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39650
IP address blocks:        46.148.41.0/24 maxlen: 24
                          46.148.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83665984 (0x4fca440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: May 27 12:53:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e449ba5d3bc063c73ab1d2410529a6382952930e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bf:c2:8b:92:ce:e8:ef:d4:33:22:24:d4:8f:
                    0e:a5:b7:96:5e:37:98:f0:d3:39:6b:ce:e4:cc:57:
                    c5:8a:e9:7c:7d:6f:19:12:03:0a:79:bc:f8:4d:42:
                    06:e9:b7:c8:f7:e0:b9:66:87:3a:97:aa:6d:64:4b:
                    5e:94:f2:8c:00:be:6a:41:10:63:b2:08:72:a7:a4:
                    e6:9c:ca:86:71:ab:a1:04:7d:c3:26:f0:6d:31:91:
                    b9:c4:01:d0:b4:f2:f1:ed:0b:17:97:fb:15:9b:21:
                    b0:d8:20:6e:0e:bd:4d:01:81:f0:07:9d:1f:eb:21:
                    4b:06:0a:b7:f7:53:72:19:64:f6:67:a3:10:80:e6:
                    b0:72:11:26:c1:5e:d9:48:f7:ac:8c:d9:5d:8f:cc:
                    d5:d9:0f:0b:eb:e5:3d:53:f3:49:ba:b1:96:4a:f1:
                    a3:e9:1f:51:86:ef:43:01:e3:b0:92:4e:19:8b:e6:
                    f2:cb:8f:77:32:73:e8:5a:c2:73:24:8c:7c:4f:62:
                    ab:95:47:62:2c:ef:e5:a8:04:9a:08:ae:53:5f:94:
                    6d:8a:02:a6:70:93:88:d9:67:ce:07:58:4e:13:66:
                    f5:32:35:d2:79:13:f2:73:a4:d8:b3:b4:47:98:a8:
                    89:74:21:3b:e5:d6:a3:42:57:fa:8c:dd:0d:28:67:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:BA:5D:3B:C0:63:C7:3A:B1:D2:41:05:29:A6:38:29:52:93:0E
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/5Em6XTvAY8c6sdJBBSmmOClSkw4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.41.0/24
                  46.148.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:06:47:18:74:9d:6e:80:6c:cd:96:1c:e2:35:c6:fe:a2:
         0c:de:f2:26:26:aa:ff:c3:72:24:f2:3d:3f:b7:b3:b0:16:42:
         2b:6a:2b:0f:e0:e7:ad:e0:cc:a4:fe:2b:81:ad:30:02:fc:29:
         8f:35:4c:b8:77:66:b8:15:1b:c9:f1:f5:cc:fe:ad:5f:c1:8a:
         53:c5:67:00:8a:08:8f:b7:e6:05:04:3b:dd:23:53:42:03:f0:
         dc:15:f9:ed:79:df:30:fc:c0:df:b6:9c:96:59:cd:ef:be:de:
         ca:54:97:e4:0e:b4:2e:ad:2a:bc:11:98:d7:fc:7c:a3:a8:5f:
         b4:b0:ef:f9:e8:a0:80:e9:06:50:cf:3a:8f:10:05:49:95:da:
         d1:7f:e2:71:18:6d:3f:fb:60:70:d9:04:50:3e:79:96:87:e1:
         a6:d2:e5:0a:d7:2e:f4:3b:c1:98:58:3b:55:29:c0:ee:bf:78:
         9e:4a:a3:f1:25:1a:82:6c:72:52:55:cc:3b:d4:16:75:0f:5a:
         aa:ec:81:31:ba:9d:10:35:b4:1e:0b:bd:d7:69:d3:44:39:23:
         8c:95:4f:16:8c:de:6e:e1:3e:7f:9a:6e:21:bf:d9:4f:d9:73:
         41:6d:91:d1:d7:bf:06:5f:d5:85:78:81:2e:b0:1b:47:4b:7b:
         5a:9b:7e:23
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBPykQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ODljMmNjNDg5ZWJlNDhmNDkwNTg0YWM4NjZmZTM2MmM0MTE3ZTc1MB4XDTIyMDUy
NzEyNTMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTQ0OWJhNWQzYmMw
NjNjNzNhYjFkMjQxMDUyOWE2MzgyOTUyOTMwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPC/wouSzujv1DMiJNSPDqW3ll43mPDTOWvO5MxXxYrpfH1v
GRIDCnm8+E1CBum3yPfguWaHOpeqbWRLXpTyjAC+akEQY7IIcqek5pzKhnGroQR9
wybwbTGRucQB0LTy8e0LF5f7FZshsNggbg69TQGB8AedH+shSwYKt/dTchlk9mej
EIDmsHIRJsFe2Uj3rIzZXY/M1dkPC+vlPVPzSbqxlkrxo+kfUYbvQwHjsJJOGYvm
8suPdzJz6FrCcySMfE9iq5VHYizv5agEmgiuU1+UbYoCpnCTiNlnzgdYThNm9TI1
0nkT8nOk2LO0R5ioiXQhO+XWo0JX+ozdDShn7OMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTkSbpdO8Bjxzqx0kEFKaY4KVKTDjAfBgNVHSMEGDAWgBTInCzEievkj0kF
hKyGb+NixBF+dTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lKd3N4SW5yNUk5SkJZU3NobV9qWXNRUmZuVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvYTAwYmUyLTg3N2QtNDBlNy04YThhLWFmMmNmYTYyMmQxOC8x
LzVFbTZYVHZBWThjNnNkSkJCU21tT0NsU2t3NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
YTAwYmUyLTg3N2QtNDBlNy04YThhLWFmMmNmYTYyMmQxOC8xL3lKd3N4SW5yNUk5
SkJZU3NobV9qWXNRUmZuVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC6UKQMEAC6UKzANBgkqhkiG9w0B
AQsFAAOCAQEANdgGRxh0nW6AbM2WHOI1xv6iDN7yJiaq/8NyJPI9P7ezsBZCK2or
D+DnreDMpP4rga0wAvwpjzVMuHdmuBUbyfH1zP6tX8GKU8VnAIoIj7fmBQQ73SNT
QgPw3BX57XnfMPzA37acllnN777eylSX5A60Lq0qvBGY1/x8o6hftLDv+eiggOkG
UM86jxAFSZXa0X/icRhtP/tgcNkEUD55lofhptLlCtcu9DvBmFg7VSnA7r94nkqj
8SUagmxyUlXMO9QWdQ9aquyBMbqdEDW0Hgu912nTRDkjjJVPFozebuE+f5puIb/Z
T9lzQW2R0de/Bl/VhXiBLrAbR0t7Wpt+Iw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org