Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa
File:                     e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa (raw, json)
Hash identifier:          duKQxtDilAPc8lsN2JGlAh5AuQFtuAkJhd59fpJ8j+U=
Subject key identifier:   7B:A8:94:5C:FF:93:B5:2F:E9:D6:0E:4C:FE:9C:15:F1:E4:23:13:25
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       A61EAB
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa
Signing time:             Tue 01 Mar 2022 19:03:25 +0000
ROA not before:           Tue 01 Mar 2022 19:03:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        178.20.212.0/24 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10886827 (0xa61eab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Mar  1 19:03:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ba8945cff93b52fe9d60e4cfe9c15f1e4231325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:d2:da:76:4e:7e:7b:98:6c:c3:ef:33:86:
                    ff:f7:51:20:8c:b1:59:ae:00:82:6f:4f:7d:7b:5f:
                    e1:04:af:c6:ea:34:1c:57:16:e1:b2:b8:cd:4b:76:
                    9a:98:b0:02:70:6f:20:38:b9:02:6a:e9:6e:9d:b5:
                    16:94:3f:84:88:e5:1d:87:d0:4f:07:56:2d:71:a2:
                    c0:16:6d:82:5c:79:84:5e:92:8c:e6:ce:8b:08:03:
                    c3:57:eb:98:35:45:b1:b1:87:f6:9e:fd:27:86:82:
                    e4:68:db:2b:91:d9:10:de:b3:77:52:5b:41:ec:3c:
                    b8:a2:0d:6d:df:48:a5:ce:ee:53:52:b0:7d:b6:4a:
                    aa:b4:56:34:50:99:86:99:92:f0:5d:7e:c9:be:32:
                    f0:60:fc:c2:9b:45:44:6c:e9:b2:b3:b3:6e:06:9a:
                    02:ec:ce:ae:56:b1:83:34:5d:d8:fd:ae:70:f9:17:
                    42:9b:4a:e1:2f:2e:dc:6c:48:04:dc:01:38:61:48:
                    c9:7e:eb:64:69:e8:8a:b5:c3:99:b2:1e:13:84:4e:
                    ec:f3:f8:e3:64:d3:43:65:2d:05:3a:bf:82:1c:07:
                    98:7d:fb:db:f1:bb:46:f7:b0:8f:a4:6d:e8:c4:10:
                    b7:a4:25:55:49:1c:82:0b:13:c4:67:8c:8d:3d:96:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:94:5C:FF:93:B5:2F:E9:D6:0E:4C:FE:9C:15:F1:E4:23:13:25
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.20.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:c7:c1:99:94:bc:02:b1:09:1a:97:05:4c:e2:ef:da:a8:
         a5:51:5c:28:a2:a7:0c:44:43:32:e3:95:dd:41:4d:bb:c0:a0:
         f1:c0:36:a9:72:6d:7e:53:5d:c4:bd:6a:7e:77:c8:cc:28:ab:
         dc:63:a5:b5:3c:8a:05:d2:8a:ee:48:82:a5:ce:7a:58:65:dd:
         a7:4c:e9:83:05:4e:56:3a:6e:fd:e4:c1:94:7e:f6:96:4e:f1:
         b4:60:60:4a:68:70:6f:e0:60:28:93:b2:c9:f4:d7:0e:21:5a:
         78:98:7f:5a:14:ee:f1:0e:e2:58:33:90:9b:fa:1a:7c:c6:31:
         a7:b6:f5:2a:cd:d3:bf:c7:47:13:bc:74:d4:37:48:5a:33:0e:
         35:cd:9d:68:88:84:4b:93:b4:87:45:03:0d:81:37:8d:4c:b0:
         56:84:82:8f:b6:45:9e:ed:d6:99:ed:b6:0f:0b:bf:19:6f:1c:
         67:0d:be:e1:aa:e8:75:b8:72:bf:96:39:c9:f4:0f:83:9e:27:
         56:1c:d2:c8:1a:f9:3a:69:0f:00:02:e0:37:8e:eb:ae:54:2f:
         e7:02:49:2a:52:fa:ea:eb:0c:42:cd:76:72:3e:94:65:4a:0b:
         ac:fe:d8:d0:39:e7:80:f9:b1:88:4d:96:94:04:44:4a:de:fb:
         6b:ee:ce:7e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKYeqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzRlMjcyOWIxNzM2OTg5MGExNTEyZjY0M2NkMDhlNGJhMmZmNDE0MB4XDTIyMDMw
MTE5MDMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JhODk0NWNmZjkz
YjUyZmU5ZDYwZTRjZmU5YzE1ZjFlNDIzMTMyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANo00tp2Tn57mGzD7zOG//dRIIyxWa4Agm9PfXtf4QSvxuo0
HFcW4bK4zUt2mpiwAnBvIDi5Amrpbp21FpQ/hIjlHYfQTwdWLXGiwBZtglx5hF6S
jObOiwgDw1frmDVFsbGH9p79J4aC5GjbK5HZEN6zd1JbQew8uKINbd9Ipc7uU1Kw
fbZKqrRWNFCZhpmS8F1+yb4y8GD8wptFRGzpsrOzbgaaAuzOrlaxgzRd2P2ucPkX
QptK4S8u3GxIBNwBOGFIyX7rZGnoirXDmbIeE4RO7PP442TTQ2UtBTq/ghwHmH37
2/G7Rvewj6Rt6MQQt6QlVUkcggsTxGeMjT2WTiMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR7qJRc/5O1L+nWDkz+nBXx5CMTJTAfBgNVHSMEGDAWgBQ3TicpsXNpiQoV
EvZDzQjkui/0FDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L04wNG5LYkZ6YVlrS0ZSTDJRODBJNUxvdjlCUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvOTUyMjMwLWMyNjItNDFjYy1iOTU2LWNmYzQ2YTc2ZWM3OC8x
L2U2aVVYUC1UdFNfcDFnNU1fcHdWOGVRakV5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
OTUyMjMwLWMyNjItNDFjYy1iOTU2LWNmYzQ2YTc2ZWM3OC8xL04wNG5LYkZ6YVlr
S0ZSTDJRODBJNUxvdjlCUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALIU1DANBgkqhkiG9w0BAQsFAAOC
AQEAL+THwZmUvAKxCRqXBUzi79qopVFcKKKnDERDMuOV3UFNu8Cg8cA2qXJtflNd
xL1qfnfIzCir3GOltTyKBdKK7kiCpc56WGXdp0zpgwVOVjpu/eTBlH72lk7xtGBg
Smhwb+BgKJOyyfTXDiFaeJh/WhTu8Q7iWDOQm/oafMYxp7b1Ks3Tv8dHE7x01DdI
WjMONc2daIiES5O0h0UDDYE3jUywVoSCj7ZFnu3Wme22Dwu/GW8cZw2+4arodbhy
v5Y5yfQPg54nVhzSyBr5OmkPAALgN47rrlQv5wJJKlL66usMQs12cj6UZUoLrP7Y
0DnngPmxiE2WlARESt77a+7Ofg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:57 2024 by rpki-client on console-ams.rpki-client.org