Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/e7ygUMybDdVNx8NdXe2W_K0jh1E.roa
File:                     e7ygUMybDdVNx8NdXe2W_K0jh1E.roa (raw, json)
Hash identifier:          EBWnoarrKJJgPLYklEnvy0wTyCAXHib0cFqaPqfUIQM=
Subject key identifier:   7B:BC:A0:50:CC:9B:0D:D5:4D:C7:C3:5D:5D:ED:96:FC:AD:23:87:51
Certificate issuer:       /CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Certificate serial:       0123BDB5
Authority key identifier: 29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/e7ygUMybDdVNx8NdXe2W_K0jh1E.roa
Signing time:             Mon 06 Jun 2022 09:47:20 +0000
ROA not before:           Mon 06 Jun 2022 09:47:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        185.81.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19119541 (0x123bdb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
        Validity
            Not Before: Jun  6 09:47:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bbca050cc9b0dd54dc7c35d5ded96fcad238751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:a1:e1:a5:a3:5b:97:8b:05:58:64:19:9a:
                    13:31:b6:10:17:69:0d:50:ec:50:83:36:f5:c0:05:
                    ba:44:cf:33:19:2d:69:96:b1:92:ef:70:35:8b:d9:
                    57:46:b4:cc:56:cf:98:cd:25:54:f8:2a:d9:1e:f5:
                    96:e7:b4:a0:22:6d:82:df:bf:64:6e:71:47:4a:39:
                    a5:86:d0:31:74:fa:7f:fb:0b:af:1a:4d:88:50:9a:
                    82:cc:67:db:ed:a5:95:0a:97:e2:69:fb:ba:e4:b4:
                    de:c6:42:70:b7:e6:b2:de:3d:37:a1:4a:20:25:8c:
                    e9:f5:ad:ca:74:04:41:bf:c4:cc:6e:5b:f6:a7:ae:
                    0f:d7:cf:1e:1b:c8:2c:c6:a4:cc:e4:79:76:f1:3e:
                    c1:91:34:37:21:0f:be:1a:95:16:0d:f9:3d:79:ca:
                    93:1b:e6:37:14:fe:41:41:b5:7a:ec:d3:66:1d:04:
                    65:b5:8d:f0:29:c2:3a:c3:81:3c:25:0c:4b:f2:63:
                    89:ca:49:9e:14:c1:e7:d3:82:95:74:f2:ff:1d:57:
                    8c:15:a3:e6:b4:84:8b:35:00:32:a4:9b:e9:32:21:
                    cb:bd:5f:47:9e:20:ad:1d:ed:04:1e:88:fd:00:0a:
                    ce:80:de:08:1f:64:bd:0c:d9:fc:ee:e4:1c:a6:f6:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:A0:50:CC:9B:0D:D5:4D:C7:C3:5D:5D:ED:96:FC:AD:23:87:51
            X509v3 Authority Key Identifier:
                keyid:29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/e7ygUMybDdVNx8NdXe2W_K0jh1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/KSxdNyMZ-mF15WynmIPRKwxuOOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:75:05:a2:7d:bd:02:c6:39:d2:2e:7f:f0:76:2f:85:1f:c9:
         32:70:e7:07:6a:28:43:a9:ed:fb:b8:8b:f3:8d:a5:44:85:6c:
         6d:36:59:aa:0d:d5:91:42:b4:7f:9c:92:20:ae:44:86:e3:04:
         85:7b:ae:96:17:b9:45:d4:66:91:d8:53:f9:6a:5d:98:d0:3a:
         56:df:dd:57:d9:2d:60:fd:e2:7e:b4:2a:b8:e6:e6:fe:60:0b:
         31:57:e7:63:56:f0:02:92:d8:cc:9b:90:11:72:f7:12:e5:ef:
         e5:11:be:25:be:2c:cf:9a:0f:a7:d9:da:0a:bd:0a:1b:08:61:
         ac:a3:7b:f7:9f:15:25:ef:82:aa:88:d0:14:5f:5b:7c:d4:20:
         55:6f:49:48:22:c1:84:90:33:9e:e6:1b:f2:08:2b:77:df:22:
         12:92:27:1b:b4:67:90:42:62:4a:e5:0c:37:63:b5:7c:00:dc:
         3c:e0:5a:f6:ef:14:4c:99:bb:b1:9a:55:01:45:38:17:a1:fc:
         0c:61:60:62:49:a6:ab:7e:6a:a8:4c:aa:9c:b6:60:a7:84:3d:
         e0:7a:67:4d:87:5b:85:bf:90:e8:48:c2:d7:34:09:62:6c:09:
         bb:db:47:0e:34:f0:a2:d0:2e:f5:7d:d2:40:00:cf:fc:8d:9c:
         4c:ca:1b:5e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASO9tTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTJjNWQzNzIzMTlmYTYxNzVlNTZjYTc5ODgzZDEyYjBjNmUzOGVjMB4XDTIyMDYw
NjA5NDcyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JiY2EwNTBjYzli
MGRkNTRkYzdjMzVkNWRlZDk2ZmNhZDIzODc1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjwoeGlo1uXiwVYZBmaEzG2EBdpDVDsUIM29cAFukTPMxkt
aZaxku9wNYvZV0a0zFbPmM0lVPgq2R71lue0oCJtgt+/ZG5xR0o5pYbQMXT6f/sL
rxpNiFCagsxn2+2llQqX4mn7uuS03sZCcLfmst49N6FKICWM6fWtynQEQb/EzG5b
9qeuD9fPHhvILMakzOR5dvE+wZE0NyEPvhqVFg35PXnKkxvmNxT+QUG1euzTZh0E
ZbWN8CnCOsOBPCUMS/JjicpJnhTB59OClXTy/x1XjBWj5rSEizUAMqSb6TIhy71f
R54grR3tBB6I/QAKzoDeCB9kvQzZ/O7kHKb2V+MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR7vKBQzJsN1U3Hw11d7Zb8rSOHUTAfBgNVHSMEGDAWgBQpLF03Ixn6YXXl
bKeYg9ErDG447DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tTeGROeU1aLW1GMTVXeW5tSVBSS3d4dU9Pdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvZTNmNTYyLTU5MjktNDRhZC05Y2M5LWQzMTM0YzY2YmY2Yy8x
L2U3eWdVTXliRGRWTng4TmRYZTJXX0swamgxRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
ZTNmNTYyLTU5MjktNDRhZC05Y2M5LWQzMTM0YzY2YmY2Yy8xL0tTeGROeU1aLW1G
MTVXeW5tSVBSS3d4dU9Pdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlRRTANBgkqhkiG9w0BAQsFAAOC
AQEACXUFon29AsY50i5/8HYvhR/JMnDnB2ooQ6nt+7iL842lRIVsbTZZqg3VkUK0
f5ySIK5EhuMEhXuulhe5RdRmkdhT+WpdmNA6Vt/dV9ktYP3ifrQquObm/mALMVfn
Y1bwApLYzJuQEXL3EuXv5RG+Jb4sz5oPp9naCr0KGwhhrKN7958VJe+CqojQFF9b
fNQgVW9JSCLBhJAznuYb8ggrd98iEpInG7RnkEJiSuUMN2O1fADcPOBa9u8UTJm7
sZpVAUU4F6H8DGFgYkmmq35qqEyqnLZgp4Q94HpnTYdbhb+Q6EjC1zQJYmwJu9tH
DjTwotAu9X3SQADP/I2cTMobXg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-fra.rpki-client.org