Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/K6b82L16dC5Jfk1ygt7BPn_m_S8.roa
File:                     K6b82L16dC5Jfk1ygt7BPn_m_S8.roa (raw, json)
Hash identifier:          kqee5czLPyuq8q1nDWaz+KLq6E0dQgjH2wQMWJpz7/s=
Subject key identifier:   2B:A6:FC:D8:BD:7A:74:2E:49:7E:4D:72:82:DE:C1:3E:7F:E6:FD:2F
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       0AC1BD18
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/K6b82L16dC5Jfk1ygt7BPn_m_S8.roa
Signing time:             Sat 01 Jan 2022 03:02:30 +0000
ROA not before:           Sat 01 Jan 2022 03:02:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43391
IP address blocks:        185.185.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180469016 (0xac1bd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 03:02:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ba6fcd8bd7a742e497e4d7282dec13e7fe6fd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:6f:6d:b3:e4:65:cf:e4:e2:36:60:a7:cf:
                    93:ad:e8:28:77:92:a6:ea:f8:e7:06:a2:8f:22:ef:
                    af:fe:07:f4:ed:9a:e2:3c:f7:1c:d2:5f:bf:25:c6:
                    d2:7d:f7:9c:6f:fc:3a:e5:b3:9b:9f:19:9e:26:d5:
                    0b:02:bc:b4:94:7a:63:6c:42:68:f2:04:4f:de:b7:
                    58:41:68:f0:3b:07:a8:d6:0f:3c:0f:37:89:8b:46:
                    7a:30:ab:9b:a9:54:f3:16:16:bc:db:09:b4:ef:0c:
                    07:02:62:d1:08:b8:79:d0:3d:ec:5b:e2:08:98:1a:
                    3b:df:38:41:01:48:d1:e5:8f:7b:dc:cf:3c:b1:dc:
                    82:f3:fe:aa:61:3c:78:a6:e1:01:82:f8:d0:fd:c7:
                    9d:7e:d7:36:d0:5b:84:8a:e1:c7:d6:96:cb:57:06:
                    cc:a9:ae:f6:0c:5d:c3:a8:01:20:9f:0a:a9:60:b8:
                    c4:39:84:5c:cd:9c:32:66:4b:10:7b:5c:48:94:c0:
                    52:d2:21:92:64:29:ca:70:cf:b1:33:95:c9:00:e8:
                    1a:0b:8f:fb:88:ad:13:20:7d:2f:a8:3b:97:50:59:
                    60:86:cc:e8:47:03:ae:03:cf:7d:61:13:b8:19:48:
                    36:0d:79:40:81:a5:f2:54:1a:38:cd:76:a4:a4:cc:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:FC:D8:BD:7A:74:2E:49:7E:4D:72:82:DE:C1:3E:7F:E6:FD:2F
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/K6b82L16dC5Jfk1ygt7BPn_m_S8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:11:f9:ab:ce:fe:92:87:2b:ba:90:26:94:65:26:09:04:
         a3:10:b3:63:3b:17:3c:c1:20:64:8a:ed:04:72:55:2a:d4:fd:
         5c:95:fb:ca:95:8d:a3:ee:78:22:07:3b:ea:16:c7:0b:41:42:
         7b:b5:4d:93:fd:72:97:f7:82:72:23:4e:70:49:fb:54:3d:84:
         b8:22:fc:2e:7e:27:c6:cc:a2:21:95:e7:25:1e:8f:e9:50:ea:
         87:72:a3:c2:a8:7f:9c:fe:c3:0d:95:ab:9c:96:9b:2c:3d:48:
         ae:40:51:ef:51:0f:78:5c:15:a7:f4:04:bb:9f:e5:6d:ae:21:
         e9:2c:83:ac:84:85:90:28:6d:e6:05:b2:9d:c2:53:dd:2d:a8:
         a1:fe:f9:b3:6c:09:df:ca:f5:c9:1f:5b:01:1a:0f:26:32:e4:
         6c:15:33:4d:6f:5c:95:46:3b:ce:8e:56:a3:21:34:ca:2a:08:
         11:3c:51:f4:65:f0:28:d4:e5:4c:c8:a3:7b:b7:d4:8a:aa:8a:
         8f:5f:ce:f6:23:5e:c0:da:96:21:b4:dc:2d:3e:a4:d8:31:ab:
         2f:b3:71:b3:8f:11:d9:7a:33:3a:57:98:58:ed:24:92:ad:51:
         32:ac:fe:55:a7:01:3d:32:c1:42:76:a3:bc:fb:da:8e:95:59:
         af:a8:90:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECsG9GDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjE2YzQxOTUxNTJlZmZlZGJmN2IzYWZlZTJhYTcyZTE5MDkwZTRkMB4XDTIyMDEw
MTAzMDIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmJhNmZjZDhiZDdh
NzQyZTQ5N2U0ZDcyODJkZWMxM2U3ZmU2ZmQyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI6mb22z5GXP5OI2YKfPk63oKHeSpur45waijyLvr/4H9O2a
4jz3HNJfvyXG0n33nG/8OuWzm58ZnibVCwK8tJR6Y2xCaPIET963WEFo8DsHqNYP
PA83iYtGejCrm6lU8xYWvNsJtO8MBwJi0Qi4edA97FviCJgaO984QQFI0eWPe9zP
PLHcgvP+qmE8eKbhAYL40P3HnX7XNtBbhIrhx9aWy1cGzKmu9gxdw6gBIJ8KqWC4
xDmEXM2cMmZLEHtcSJTAUtIhkmQpynDPsTOVyQDoGguP+4itEyB9L6g7l1BZYIbM
6EcDrgPPfWETuBlINg15QIGl8lQaOM12pKTMLlcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQrpvzYvXp0Lkl+TXKC3sE+f+b9LzAfBgNVHSMEGDAWgBTGFsQZUVLv/tv3
s6/uKqcuGQkOTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hoYkVHVkZTN183Yjk3T3Y3aXFuTGhrSkRrMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvYWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8x
L0s2YjgyTDE2ZEM1SmZrMXlndDdCUG5fbV9TOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
YWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8xL3hoYkVHVkZTN183
Yjk3T3Y3aXFuTGhrSkRrMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm56TANBgkqhkiG9w0BAQsFAAOC
AQEADmMR+avO/pKHK7qQJpRlJgkEoxCzYzsXPMEgZIrtBHJVKtT9XJX7ypWNo+54
Igc76hbHC0FCe7VNk/1yl/eCciNOcEn7VD2EuCL8Ln4nxsyiIZXnJR6P6VDqh3Kj
wqh/nP7DDZWrnJabLD1IrkBR71EPeFwVp/QEu5/lba4h6SyDrISFkCht5gWyncJT
3S2oof75s2wJ38r1yR9bARoPJjLkbBUzTW9clUY7zo5WoyE0yioIETxR9GXwKNTl
TMije7fUiqqKj1/O9iNewNqWIbTcLT6k2DGrL7Nxs48R2XozOleYWO0kkq1RMqz+
VacBPTLBQnajvPvajpVZr6iQag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org