Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/EaNg-bihbgf1a3TB68mW9utNnNM.roa
File:                     EaNg-bihbgf1a3TB68mW9utNnNM.roa (raw, json)
Hash identifier:          odUmHPl9ax0vjh3FMFSJeWA0lfI3SL4ErhNt/MAh0h0=
Subject key identifier:   11:A3:60:F9:B8:A1:6E:07:F5:6B:74:C1:EB:C9:96:F6:EB:4D:9C:D3
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       03BBD4AA
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/EaNg-bihbgf1a3TB68mW9utNnNM.roa
Signing time:             Sat 01 Jan 2022 14:05:04 +0000
ROA not before:           Sat 01 Jan 2022 14:05:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50515
IP address blocks:        188.247.130.0/24 maxlen: 24
                          92.55.144.0/24 maxlen: 24
                          92.55.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62641322 (0x3bbd4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jan  1 14:05:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11a360f9b8a16e07f56b74c1ebc996f6eb4d9cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:88:dc:c3:ca:d0:a8:45:a5:e8:f9:47:e6:
                    dc:89:1b:d0:7f:50:bf:53:96:b8:58:32:0b:ec:ca:
                    64:f1:6a:d2:a0:e0:cf:67:e6:e2:15:2d:f9:36:5e:
                    7e:e2:ca:be:79:68:92:02:3b:5e:1f:05:52:e8:c5:
                    cf:74:84:6f:47:77:6c:6a:22:1d:d2:e8:d8:ea:73:
                    63:3e:c5:a7:c1:fc:cb:b9:63:72:14:83:9a:82:dc:
                    4a:fa:ad:16:1b:8b:1a:67:fb:a1:82:33:08:9d:96:
                    c4:5a:f6:39:fa:ba:22:0e:bf:63:f0:be:8a:9f:00:
                    14:1c:b2:d6:12:b8:41:f9:d7:16:09:72:45:ca:cf:
                    70:85:1e:e1:32:6d:49:a2:a4:58:a9:1e:a7:4d:76:
                    f6:48:f5:dc:12:f0:02:78:ce:87:6a:fb:06:9f:67:
                    6b:15:1f:cc:45:8a:00:d9:6c:ac:05:f5:1e:8d:30:
                    75:ac:b3:c8:1e:1b:f7:cc:08:fd:28:be:73:25:dc:
                    2b:e5:6f:34:a6:e7:42:e8:26:f5:8b:a4:f0:7c:ed:
                    f0:77:73:32:8e:aa:52:be:c1:30:e5:46:fb:af:c7:
                    11:fa:31:2c:29:32:c7:18:f1:7e:1a:b9:36:cd:79:
                    9e:84:90:4e:ab:96:f6:60:92:73:d4:28:cd:73:54:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A3:60:F9:B8:A1:6E:07:F5:6B:74:C1:EB:C9:96:F6:EB:4D:9C:D3
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/EaNg-bihbgf1a3TB68mW9utNnNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.55.144.0/24
                  92.55.147.0/24
                  188.247.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:22:58:82:9f:4d:48:0d:63:a7:e4:9d:51:b6:bd:d0:20:
         14:87:69:f9:a1:26:72:e5:8c:b0:91:6d:92:20:bb:35:08:d0:
         9f:11:c7:21:6c:7d:dd:f5:94:99:bc:e3:c9:ef:d0:a2:9c:d8:
         99:67:67:09:78:92:b4:67:46:f7:5c:41:9f:4d:d8:7c:06:81:
         30:dc:0c:2a:6c:e0:53:2e:e8:90:94:19:79:90:7f:7e:fd:6a:
         8f:ec:c5:fa:05:e6:f7:92:3b:c0:ee:28:d4:28:54:c5:d6:6c:
         58:78:6d:d3:ed:0f:51:9a:15:2a:77:d2:fd:d7:b4:cf:6d:8d:
         ae:fc:18:13:fa:f5:0e:c8:d6:e7:d2:2f:d2:16:4d:a9:d6:10:
         0c:59:22:4f:67:80:b2:a6:4c:1c:61:e9:9e:5f:b6:9d:ab:c7:
         73:f6:5d:7e:1b:7a:32:5d:10:4c:f4:2d:68:48:87:de:e2:18:
         d5:4e:62:dd:a8:d4:7f:81:a7:51:3c:fb:e1:61:78:b2:8b:24:
         5b:9f:bd:da:10:52:d2:ca:9e:c8:81:36:c9:a0:38:80:a5:ab:
         91:a7:58:e6:1c:13:b6:cd:10:be:50:62:71:a9:b7:06:f0:af:
         f2:15:61:bb:8f:25:df:ef:ed:e2:c1:f0:23:1a:d8:2f:35:73:
         39:5f:a3:e1
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA7vUqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjhjNmM1OGI2MDdmZjIzYWU3MTc1YTYxNjgyYzc1NDgwZjFlMjE0MB4XDTIyMDEw
MTE0MDUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFhMzYwZjliOGEx
NmUwN2Y1NmI3NGMxZWJjOTk2ZjZlYjRkOWNkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/liNzDytCoRaXo+Ufm3Ikb0H9Qv1OWuFgyC+zKZPFq0qDg
z2fm4hUt+TZefuLKvnlokgI7Xh8FUujFz3SEb0d3bGoiHdLo2OpzYz7Fp8H8y7lj
chSDmoLcSvqtFhuLGmf7oYIzCJ2WxFr2Ofq6Ig6/Y/C+ip8AFByy1hK4QfnXFgly
RcrPcIUe4TJtSaKkWKkep0129kj13BLwAnjOh2r7Bp9naxUfzEWKANlsrAX1Ho0w
dayzyB4b98wI/Si+cyXcK+VvNKbnQugm9Yuk8Hzt8HdzMo6qUr7BMOVG+6/HEfox
LCkyxxjxfhq5Ns15noSQTquW9mCSc9QozXNU/d0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQRo2D5uKFuB/VrdMHryZb2602c0zAfBgNVHSMEGDAWgBSrjGxYtgf/I65x
daYWgsdUgPHiFDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3E0eHNXTFlIX3lPdWNYV21Gb0xIVklEeDRoUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTYvZWZiOGVlLWM1YzQtNDQ2Ny1hMGNjLTg4YTNjNDFmYWVlMi8x
L0VhTmctYmloYmdmMWEzVEI2OG1XOXV0Tm5OTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYv
ZWZiOGVlLWM1YzQtNDQ2Ny1hMGNjLTg4YTNjNDFmYWVlMi8xL3E0eHNXTFlIX3lP
dWNYV21Gb0xIVklEeDRoUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFw3kAMEAFw3kwMEALz3gjANBgkq
hkiG9w0BAQsFAAOCAQEAsBgiWIKfTUgNY6fknVG2vdAgFIdp+aEmcuWMsJFtkiC7
NQjQnxHHIWx93fWUmbzjye/QopzYmWdnCXiStGdG91xBn03YfAaBMNwMKmzgUy7o
kJQZeZB/fv1qj+zF+gXm95I7wO4o1ChUxdZsWHht0+0PUZoVKnfS/de0z22NrvwY
E/r1DsjW59Iv0hZNqdYQDFkiT2eAsqZMHGHpnl+2navHc/Zdfht6Ml0QTPQtaEiH
3uIY1U5i3ajUf4GnUTz74WF4soskW5+92hBS0sqeyIE2yaA4gKWrkadY5hwTts0Q
vlBicam3BvCv8hVhu48l3+/t4sHwIxrYLzVzOV+j4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org