Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vBp_0RI71tq-PX2gI72d7BsjIoU.roa
File:                     vBp_0RI71tq-PX2gI72d7BsjIoU.roa (raw, json)
Hash identifier:          I5IXNX8tQXbCcUKHBtJRnQybbAu39//ZgpE7/cx944M=
Subject key identifier:   BC:1A:7F:D1:12:3B:D6:DA:BE:3D:7D:A0:23:BD:9D:EC:1B:23:22:85
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       06644B96
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vBp_0RI71tq-PX2gI72d7BsjIoU.roa
Signing time:             Tue 05 Jul 2022 04:59:23 +0000
ROA not before:           Tue 05 Jul 2022 04:59:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212461
IP address blocks:        194.113.235.0/24 maxlen: 24
                          87.251.85.0/24 maxlen: 24
                          87.251.84.0/24 maxlen: 24
                          87.251.86.0/24 maxlen: 24
                          80.66.65.0/24 maxlen: 24
                          80.66.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107236246 (0x6644b96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jul  5 04:59:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc1a7fd1123bd6dabe3d7da023bd9dec1b232285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:de:e8:94:fb:6b:ce:84:53:17:d4:ea:78:
                    f8:93:f1:89:cc:a0:a3:c2:78:8b:fb:2b:70:32:76:
                    0b:85:fe:28:e5:2e:a0:9e:60:16:01:49:e1:a0:ba:
                    7c:9a:90:21:50:27:11:c8:82:5b:df:36:fe:f4:0c:
                    5c:71:f4:5d:a1:32:6e:ca:24:6d:12:92:83:79:fe:
                    14:9b:82:03:cb:bd:4a:09:c1:87:49:e7:fe:c7:78:
                    0e:5c:03:2e:ab:79:1d:75:fa:55:c3:40:99:6e:22:
                    ca:2c:e8:be:68:02:a6:e5:43:ce:f4:5f:c3:16:d8:
                    7d:36:ec:f6:6e:dc:fc:23:f1:68:90:8d:e9:7c:ec:
                    59:1e:92:fa:1a:92:b8:4e:df:d4:21:f9:c5:16:29:
                    95:b2:a3:8e:a8:4b:5b:69:85:76:f6:c4:e3:c9:7e:
                    99:e0:39:30:35:51:cc:05:f1:9c:8f:dc:8f:4f:ce:
                    f4:a7:62:55:de:df:33:63:e7:3b:45:8e:bb:7b:77:
                    26:9f:37:10:47:30:1b:d6:2b:9e:7a:6d:13:b0:16:
                    b8:1b:de:69:d9:65:f5:e2:79:fa:a8:69:8b:7d:62:
                    82:b6:3e:b0:57:3d:68:38:61:27:21:04:c6:4a:24:
                    e2:ec:b3:66:c5:af:8c:ed:61:6d:79:f5:91:81:8e:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1A:7F:D1:12:3B:D6:DA:BE:3D:7D:A0:23:BD:9D:EC:1B:23:22:85
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vBp_0RI71tq-PX2gI72d7BsjIoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.65.0/24
                  80.66.78.0/24
                  87.251.84.0-87.251.86.255
                  194.113.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a9:da:29:91:e0:a1:f2:3f:c8:27:5e:8a:aa:ea:49:1f:f3:
         0b:59:95:ea:7b:44:64:e4:6d:c7:aa:03:b5:03:cd:0b:b2:95:
         70:45:8f:ec:d9:53:5a:ea:83:ca:7b:bb:4d:66:b0:b7:2b:de:
         4f:3f:0c:8b:d2:26:42:2d:eb:46:12:bb:9c:6c:1b:85:de:04:
         84:67:b6:b0:4e:c5:80:26:24:af:e0:f3:b0:3b:4f:93:88:42:
         17:e2:2f:79:69:ec:df:59:51:45:67:22:4b:c5:65:3e:25:0f:
         40:21:f3:99:a1:4f:a0:9c:43:fd:f8:3d:bc:fc:b8:61:f4:c9:
         9a:7d:92:49:8f:a2:75:35:aa:e5:c4:ec:e7:58:69:f1:f5:59:
         36:cb:70:c5:5a:b4:0f:d3:63:6d:9b:c2:c6:54:c3:e6:7d:3c:
         71:3b:7e:2a:3f:e9:57:43:0e:ec:ec:f9:36:70:57:ac:39:db:
         ee:1a:8c:0e:e4:d9:68:57:ab:b5:c7:5e:a1:95:5d:44:36:1e:
         ad:70:03:03:4e:e7:dd:2d:97:56:ae:16:dd:64:0c:54:92:91:
         f0:db:dc:4e:09:d6:89:71:f6:d1:8a:42:67:ca:b7:e2:cb:11:
         4e:70:12:8c:e0:87:2b:61:44:2b:4e:8d:e7:8f:5b:46:30:64:
         40:29:e8:f2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEBmRLljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzNiNGMxMjQ4YzRiY2YyMmIwNTc3ZGZjYTliMTRkOTA2M2MyOGMwMB4XDTIyMDcw
NTA0NTkyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmMxYTdmZDExMjNi
ZDZkYWJlM2Q3ZGEwMjNiZDlkZWMxYjIzMjI4NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANVl3uiU+2vOhFMX1Op4+JPxicygo8J4i/srcDJ2C4X+KOUu
oJ5gFgFJ4aC6fJqQIVAnEciCW982/vQMXHH0XaEybsokbRKSg3n+FJuCA8u9SgnB
h0nn/sd4DlwDLqt5HXX6VcNAmW4iyizovmgCpuVDzvRfwxbYfTbs9m7c/CPxaJCN
6XzsWR6S+hqSuE7f1CH5xRYplbKjjqhLW2mFdvbE48l+meA5MDVRzAXxnI/cj0/O
9KdiVd7fM2PnO0WOu3t3Jp83EEcwG9YrnnptE7AWuBveadll9eJ5+qhpi31igrY+
sFc9aDhhJyEExkok4uyzZsWvjO1hbXn1kYGObdECAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBS8Gn/REjvW2r49faAjvZ3sGyMihTAfBgNVHSMEGDAWgBQHO0wSSMS88isF
d9/KmxTZBjwowDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J6dE1Fa2pFdlBJckJYZmZ5cHNVMlFZOEtNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8x
L3ZCcF8wUkk3MXRxLVBYMmdJNzJkN0JzaklvVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8xL0J6dE1Fa2pFdlBJ
ckJYZmZ5cHNVMlFZOEtNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAFBCQQMEAFBCTjAMAwQCV/tUAwQA
V/tWAwQAwnHrMA0GCSqGSIb3DQEBCwUAA4IBAQBoqdopkeCh8j/IJ16KqupJH/ML
WZXqe0Rk5G3HqgO1A80LspVwRY/s2VNa6oPKe7tNZrC3K95PPwyL0iZCLetGEruc
bBuF3gSEZ7awTsWAJiSv4POwO0+TiEIX4i95aezfWVFFZyJLxWU+JQ9AIfOZoU+g
nEP9+D28/Lhh9MmafZJJj6J1NarlxOznWGnx9Vk2y3DFWrQP02Ntm8LGVMPmfTxx
O34qP+lXQw7s7Pk2cFesOdvuGowO5NloV6u1x16hlV1ENh6tcAMDTufdLZdWrhbd
ZAxUkpHw29xOCdaJcfbRikJnyrfiyxFOcBKM4IcrYUQrTo3nj1tGMGRAKejy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org