Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa
File:                     gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa (raw, json)
Hash identifier:          yhQZgoSJovj3FePh6VxvWGg+uWfnOAuJqcNPAtF0eZY=
Subject key identifier:   80:E9:87:3F:2B:BC:FE:19:D0:4E:D3:97:86:66:6A:67:D6:D2:65:F9
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       28434779
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa
Signing time:             Sat 01 Jan 2022 16:09:58 +0000
ROA not before:           Sat 01 Jan 2022 16:09:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208087
IP address blocks:        146.120.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675497849 (0x28434779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80e9873f2bbcfe19d04ed39786666a67d6d265f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:68:c5:47:2e:b1:90:77:c3:0e:ba:85:0b:
                    cc:df:e7:0e:46:0d:b5:5f:61:e2:d9:83:b7:5f:f3:
                    47:32:ff:65:60:87:ba:a8:4c:06:bb:65:04:3c:af:
                    2b:34:ba:25:b2:6c:63:dd:eb:39:8b:1a:e1:31:57:
                    81:f4:64:c2:ea:31:05:3d:b3:66:ee:99:41:4c:68:
                    ac:dd:e4:f5:b8:81:44:dc:fe:df:34:c7:c3:40:e1:
                    71:8c:62:12:44:06:37:89:37:e1:f9:06:80:56:4a:
                    61:dd:61:2f:d3:5e:b7:06:99:75:4d:fc:f6:a0:2d:
                    c5:72:1b:4a:67:fb:cf:ec:0f:f3:c1:e8:b4:4e:be:
                    19:3b:39:09:ab:75:72:36:28:d0:bf:4a:81:ed:ee:
                    d8:67:86:0b:58:95:79:5c:a4:85:62:0d:0c:fa:da:
                    eb:25:54:64:4c:ff:57:ac:56:49:ff:cf:a3:6d:f5:
                    79:8d:d6:6a:b0:bf:aa:11:55:f5:cd:18:22:45:e8:
                    cd:2f:20:53:4b:f0:01:da:ff:b6:59:9a:f4:9c:eb:
                    4c:aa:3d:07:49:8f:66:0a:f0:ec:02:5d:bb:9b:4e:
                    db:7d:bd:4f:40:94:7b:6d:0a:a3:16:b6:7a:2a:52:
                    a3:a4:bf:1b:15:76:16:c5:48:4f:01:d3:3a:6f:32:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:87:3F:2B:BC:FE:19:D0:4E:D3:97:86:66:6A:67:D6:D2:65:F9
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.120.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:bf:72:4b:13:c4:0b:6d:6a:e2:4d:b3:c5:13:ff:53:5f:21:
         9f:34:a3:44:0d:22:32:dd:ec:e4:e5:47:98:58:8a:7c:04:10:
         71:16:f8:cd:82:43:eb:5d:72:4e:00:82:fc:a9:b7:df:46:8f:
         9d:e5:3b:5e:f6:05:87:f5:82:74:c2:37:3d:bb:7b:23:6e:cc:
         c7:a9:71:a1:ba:23:70:ea:cf:cb:fe:ba:cf:4f:2c:28:12:95:
         1b:01:b8:16:58:cb:51:39:c8:a2:65:06:df:1e:ee:14:0a:0e:
         75:b9:be:b7:b1:9b:b2:c3:b5:29:fa:6c:67:97:c3:0d:14:89:
         0b:19:04:33:20:9a:90:73:5c:f0:55:cd:05:c2:95:16:06:42:
         33:92:1d:c4:8a:4c:3b:fa:7c:1e:e8:95:38:ae:8a:b2:3b:bb:
         b9:a9:d8:b7:9a:61:c4:1c:27:68:16:e1:c6:42:67:b2:1d:6b:
         77:6e:94:ea:dd:b0:4e:af:01:79:f1:0c:6d:2b:bb:40:b5:08:
         9b:c0:11:10:67:e6:2a:b1:4e:53:fe:5d:15:32:e6:b7:d8:b0:
         b2:ae:55:84:d7:a8:7a:19:ef:0a:34:d6:74:b3:1f:02:74:2b:
         c7:1c:d7:00:b1:14:36:7e:7d:8f:9d:c9:be:d1:25:71:cd:32:
         f5:e0:f1:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKENHeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODBlOTg3M2YyYmJj
ZmUxOWQwNGVkMzk3ODY2NjZhNjdkNmQyNjVmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANUdaMVHLrGQd8MOuoULzN/nDkYNtV9h4tmDt1/zRzL/ZWCH
uqhMBrtlBDyvKzS6JbJsY93rOYsa4TFXgfRkwuoxBT2zZu6ZQUxorN3k9biBRNz+
3zTHw0DhcYxiEkQGN4k34fkGgFZKYd1hL9NetwaZdU389qAtxXIbSmf7z+wP88Ho
tE6+GTs5Cat1cjYo0L9Kge3u2GeGC1iVeVykhWINDPra6yVUZEz/V6xWSf/Po231
eY3WarC/qhFV9c0YIkXozS8gU0vwAdr/tlma9JzrTKo9B0mPZgrw7AJdu5tO2329
T0CUe20Koxa2eipSo6S/GxV2FsVITwHTOm8yrZ0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSA6Yc/K7z+GdBO05eGZmpn1tJl+TAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L2dPbUhQeXU4X2huUVR0T1hobVpxWjliU1pmay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZJ49jANBgkqhkiG9w0BAQsFAAOC
AQEAEL9ySxPEC21q4k2zxRP/U18hnzSjRA0iMt3s5OVHmFiKfAQQcRb4zYJD611y
TgCC/Km330aPneU7XvYFh/WCdMI3Pbt7I27Mx6lxobojcOrPy/66z08sKBKVGwG4
FljLUTnIomUG3x7uFAoOdbm+t7GbssO1KfpsZ5fDDRSJCxkEMyCakHNc8FXNBcKV
FgZCM5IdxIpMO/p8HuiVOK6Ksju7uanYt5phxBwnaBbhxkJnsh1rd26U6t2wTq8B
efEMbSu7QLUIm8AREGfmKrFOU/5dFTLmt9iwsq5VhNeoehnvCjTWdLMfAnQrxxzX
ALEUNn59j53JvtElcc0y9eDxqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org