Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa
File:                     b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa (raw, json)
Hash identifier:          gZuBiQ1FHC81tAtNce5rzl395g1lKRFoT4WLNZmE9Yo=
Subject key identifier:   6F:93:4D:80:37:27:CA:CC:3C:C2:B6:17:F6:3B:C9:DE:C6:5C:17:3A
Certificate issuer:       /CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
Certificate serial:       0101411E
Authority key identifier: 28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa
Signing time:             Sat 01 Jan 2022 03:01:44 +0000
ROA not before:           Sat 01 Jan 2022 03:01:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.252.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16859422 (0x101411e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286f9a9bbb868ce6d43a154e2a7e298b6b2365b2
        Validity
            Not Before: Jan  1 03:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f934d803727cacc3cc2b617f63bc9dec65c173a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:d8:0a:d4:df:f7:82:f7:12:e3:f1:f5:a4:
                    8a:f4:9f:1b:ad:12:8f:19:a2:b2:5b:76:59:c9:83:
                    63:95:a0:d6:bc:7b:56:2b:76:99:ec:ec:69:c1:6c:
                    78:b4:2f:cf:5e:58:78:bb:de:52:d9:56:d9:7d:ef:
                    ed:7e:c1:3f:fa:fd:c7:11:d4:ea:0e:f1:6f:f9:f6:
                    1c:ab:09:3b:a2:49:30:03:2b:6f:49:0d:74:5e:bd:
                    05:b2:a6:38:42:61:67:87:0a:67:cc:e4:5f:21:1a:
                    17:49:c8:eb:90:3d:3b:1a:89:87:3f:c2:89:d1:0b:
                    4d:32:e8:f0:ec:c0:d9:86:ca:7c:6b:47:bb:26:34:
                    6d:51:aa:fc:fa:49:72:08:08:bd:77:08:25:50:3c:
                    9a:28:24:9f:99:7e:77:6d:e7:7c:c4:9e:eb:b0:0a:
                    d4:9f:a6:15:35:04:1a:25:83:30:53:da:5a:0a:54:
                    3c:42:b3:f7:95:c0:9a:b4:3a:b9:53:da:16:9f:89:
                    40:f9:45:3c:d3:2f:06:62:22:7c:36:4f:e4:e9:c8:
                    0e:57:a6:f6:ce:78:3d:94:47:22:62:cc:65:3b:36:
                    87:bd:b8:a8:dd:d1:92:46:b4:c0:ce:0b:e4:ab:6f:
                    00:1e:b9:17:ff:93:86:d6:dd:c7:5f:3d:ba:a1:db:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:93:4D:80:37:27:CA:CC:3C:C2:B6:17:F6:3B:C9:DE:C6:5C:17:3A
            X509v3 Authority Key Identifier:
                keyid:28:6F:9A:9B:BB:86:8C:E6:D4:3A:15:4E:2A:7E:29:8B:6B:23:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KG-am7uGjObUOhVOKn4pi2sjZbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/b5NNgDcnysw8wrYX9jvJ3sZcFzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/462f92-808c-4440-a905-e7484e2f9aa2/1/KG-am7uGjObUOhVOKn4pi2sjZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:91:02:f6:50:2c:7c:32:89:d9:c9:e8:ce:8e:eb:0a:be:71:
         2f:fb:54:71:2a:db:ca:6e:c7:b8:8d:00:95:e1:96:d7:d8:5d:
         8c:0d:cd:e8:b0:a7:db:de:88:53:2e:df:2c:23:b9:b3:03:96:
         46:cf:f0:74:d9:f2:ce:2f:5b:32:bb:ee:13:2b:6f:d0:72:70:
         2a:1c:c6:96:5b:18:ca:8b:dc:2f:f0:81:6e:24:d3:ad:ba:61:
         ef:26:8f:66:36:db:fd:87:b7:4e:f4:41:5b:5b:3c:c5:52:c8:
         71:84:f7:0a:2e:43:e5:72:3c:9c:00:ff:dd:b1:4c:e3:68:7f:
         36:9f:4e:c2:8b:29:a7:5f:1b:bf:9c:75:50:2e:a9:58:1c:db:
         9b:24:14:79:a1:17:09:70:59:d8:90:63:bf:f3:4e:8d:62:7f:
         70:19:88:cc:8b:0d:a0:6b:7c:df:2d:91:66:2d:06:e8:e3:69:
         37:eb:d2:cd:a4:f5:8e:03:69:87:4a:b0:ac:e4:9d:a3:44:73:
         8e:21:d9:31:ac:c1:1c:26:d4:07:f9:46:94:98:31:65:a3:c9:
         fd:1b:3e:3d:0f:ff:75:e5:f3:9a:21:dc:c7:08:e1:89:43:f4:
         eb:2e:3d:90:50:88:53:d1:8e:e6:75:44:a3:8e:03:63:ca:e8:
         2f:c8:b1:5e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQFBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODZmOWE5YmJiODY4Y2U2ZDQzYTE1NGUyYTdlMjk4YjZiMjM2NWIyMB4XDTIyMDEw
MTAzMDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmY5MzRkODAzNzI3
Y2FjYzNjYzJiNjE3ZjYzYmM5ZGVjNjVjMTczYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJAa2ArU3/eC9xLj8fWkivSfG60Sjxmislt2WcmDY5Wg1rx7
Vit2mezsacFseLQvz15YeLveUtlW2X3v7X7BP/r9xxHU6g7xb/n2HKsJO6JJMAMr
b0kNdF69BbKmOEJhZ4cKZ8zkXyEaF0nI65A9OxqJhz/CidELTTLo8OzA2YbKfGtH
uyY0bVGq/PpJcggIvXcIJVA8migkn5l+d23nfMSe67AK1J+mFTUEGiWDMFPaWgpU
PEKz95XAmrQ6uVPaFp+JQPlFPNMvBmIifDZP5OnIDlem9s54PZRHImLMZTs2h724
qN3Rkka0wM4L5KtvAB65F/+Thtbdx189uqHbdHsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRvk02ANyfKzDzCthf2O8nexlwXOjAfBgNVHSMEGDAWgBQob5qbu4aM5tQ6
FU4qfimLayNlsjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tHLWFtN3VHak9iVU9oVk9LbjRwaTJzalpiSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvNDYyZjkyLTgwOGMtNDQ0MC1hOTA1LWU3NDg0ZTJmOWFhMi8x
L2I1Tk5nRGNueXN3OHdyWVg5anZKM3NaY0Z6by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
NDYyZjkyLTgwOGMtNDQ0MC1hOTA1LWU3NDg0ZTJmOWFhMi8xL0tHLWFtN3VHak9i
VU9oVk9LbjRwaTJzalpiSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn80zANBgkqhkiG9w0BAQsFAAOC
AQEAMpEC9lAsfDKJ2cnozo7rCr5xL/tUcSrbym7HuI0AleGW19hdjA3N6LCn296I
Uy7fLCO5swOWRs/wdNnyzi9bMrvuEytv0HJwKhzGllsYyovcL/CBbiTTrbph7yaP
Zjbb/Ye3TvRBW1s8xVLIcYT3Ci5D5XI8nAD/3bFM42h/Np9Owospp18bv5x1UC6p
WBzbmyQUeaEXCXBZ2JBjv/NOjWJ/cBmIzIsNoGt83y2RZi0G6ONpN+vSzaT1jgNp
h0qwrOSdo0RzjiHZMazBHCbUB/lGlJgxZaPJ/Rs+PQ//deXzmiHcxwjhiUP06y49
kFCIU9GO5nVEo44DY8roL8ixXg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:32 2023 by rpki-client on console-ams.rpki-client.org