Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/W7757FgS4RaTqBjHLv3Lji0hJaw.roa
File:                     W7757FgS4RaTqBjHLv3Lji0hJaw.roa (raw, json)
Hash identifier:          yS7bt09tVyWVEi/cxWSScoGVYJ8/T7ZdCtr9UXRMWIw=
Subject key identifier:   5B:BE:F9:EC:58:12:E1:16:93:A8:18:C7:2E:FD:CB:8E:2D:21:25:AC
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       0A0AF12A
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/W7757FgS4RaTqBjHLv3Lji0hJaw.roa
Signing time:             Sat 01 Jan 2022 05:03:30 +0000
ROA not before:           Sat 01 Jan 2022 05:03:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209864
IP address blocks:        2a0d:2146:8040::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168489258 (0xa0af12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 05:03:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bbef9ec5812e11693a818c72efdcb8e2d2125ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:ba:85:b7:e1:fb:bf:d0:90:9d:66:41:c1:
                    0e:40:ad:ed:78:af:5f:12:03:81:0b:f3:13:39:63:
                    f1:65:58:d5:8d:9d:4c:eb:2c:d9:f4:5e:89:48:5e:
                    e2:ac:a3:40:88:14:0e:d3:00:4a:e3:ae:60:53:72:
                    d2:a5:97:a1:55:4a:9b:6e:fc:08:9a:a9:bc:f2:23:
                    d5:55:9c:70:b1:ef:c6:01:92:a3:e2:31:41:37:1c:
                    7e:98:cb:c3:fd:0e:f8:69:17:4b:dd:42:9a:25:34:
                    d6:e9:24:25:48:3d:df:05:57:67:1c:5b:bd:93:49:
                    b2:22:fd:b1:ea:ce:cc:7c:56:5c:a4:61:64:aa:78:
                    19:f7:2c:db:4b:0a:58:4c:d8:0a:de:07:0b:32:bd:
                    98:90:61:40:2a:74:a5:58:0c:6b:ae:21:ae:8e:71:
                    82:7b:a6:9d:b1:0a:83:31:9e:1c:a4:5b:65:e4:a7:
                    bb:25:53:53:ba:7f:03:63:cb:1d:42:fa:35:e7:40:
                    75:6c:72:fd:c1:2e:5b:f4:90:16:0f:89:7a:a3:41:
                    76:2a:bc:cf:12:ce:96:ac:88:dc:1c:62:2d:4d:2e:
                    62:8e:ff:3c:b9:42:fa:54:a2:70:8c:3c:11:14:ef:
                    dd:1d:d9:4d:f6:4d:e7:16:dd:6d:02:9e:f2:00:4d:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:F9:EC:58:12:E1:16:93:A8:18:C7:2E:FD:CB:8E:2D:21:25:AC
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/W7757FgS4RaTqBjHLv3Lji0hJaw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2146:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:ca:ed:56:4b:3e:29:fe:fc:37:fd:8a:0b:55:dd:03:06:
         23:15:54:a2:f3:0a:7b:fe:da:a2:15:71:0b:78:09:d5:3a:75:
         6d:ed:52:f6:9e:b4:7b:d4:f0:67:83:2f:28:85:fa:46:6a:14:
         57:97:5f:14:f9:72:58:aa:74:2e:8d:1f:bf:0b:f1:87:05:3e:
         ef:8d:4c:8b:4e:fc:e0:52:f1:9f:28:a7:57:ac:59:4e:5d:2a:
         fb:eb:d9:43:43:b0:29:0b:7a:7a:96:9e:7c:4b:3f:92:2d:f7:
         02:70:be:e6:a3:0b:01:5e:c1:bf:b0:b1:0f:cb:a2:c0:ba:58:
         97:0f:65:24:59:80:07:df:ed:7f:ed:0b:32:07:f4:fa:c4:3f:
         ed:86:35:08:af:1a:48:54:37:b8:b5:18:01:b6:da:cd:cf:d2:
         da:7c:51:76:b4:f8:fa:78:b1:dc:88:ca:b9:0d:43:16:d0:62:
         d2:39:27:5b:f2:cb:2b:c6:f1:63:3b:97:09:f0:cb:7e:68:c7:
         b2:fe:a2:57:4b:d7:2c:0f:74:ea:23:56:a2:18:21:b2:46:a5:
         e9:2a:2c:43:67:03:ba:9e:90:bb:bf:e6:62:7c:7f:46:c7:29:
         59:89:c4:a3:24:0b:3d:ca:3e:5f:4b:69:65:4a:e4:d6:ae:96:
         bc:15:02:ef
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECgrxKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MTRhYzYxMTYxNGRkMTY1ZDk0NTU3Mjk2ZWQ3ZWQ0NmM4ZmMwMjVmMB4XDTIyMDEw
MTA1MDMzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWJiZWY5ZWM1ODEy
ZTExNjkzYTgxOGM3MmVmZGNiOGUyZDIxMjVhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdRuoW34fu/0JCdZkHBDkCt7XivXxIDgQvzEzlj8WVY1Y2d
TOss2fReiUhe4qyjQIgUDtMASuOuYFNy0qWXoVVKm278CJqpvPIj1VWccLHvxgGS
o+IxQTccfpjLw/0O+GkXS91CmiU01ukkJUg93wVXZxxbvZNJsiL9serOzHxWXKRh
ZKp4Gfcs20sKWEzYCt4HCzK9mJBhQCp0pVgMa64hro5xgnumnbEKgzGeHKRbZeSn
uyVTU7p/A2PLHUL6NedAdWxy/cEuW/SQFg+JeqNBdiq8zxLOlqyI3BxiLU0uYo7/
PLlC+lSicIw8ERTv3R3ZTfZN5xbdbQKe8gBNEVcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRbvvnsWBLhFpOoGMcu/cuOLSElrDAfBgNVHSMEGDAWgBThSsYRYU3RZdlF
Vylu1+1GyPwCXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRVckdFV0ZOMFdYWlJWY3BidGZ0UnNqOEFsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvNmU3OWI4LTJiOGYtNGVjYy05YTZlLTcwZTg5OGJiMzhkZC8x
L1c3NzU3RmdTNFJhVHFCakhMdjNMamkwaEphdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
NmU3OWI4LTJiOGYtNGVjYy05YTZlLTcwZTg5OGJiMzhkZC8xLzRVckdFV0ZOMFdY
WlJWY3BidGZ0UnNqOEFsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoNIUaAQDANBgkqhkiG9w0BAQsF
AAOCAQEAXWvK7VZLPin+/Df9igtV3QMGIxVUovMKe/7aohVxC3gJ1Tp1be1S9p60
e9TwZ4MvKIX6RmoUV5dfFPlyWKp0Lo0fvwvxhwU+741Mi0784FLxnyinV6xZTl0q
++vZQ0OwKQt6epaefEs/ki33AnC+5qMLAV7Bv7CxD8uiwLpYlw9lJFmAB9/tf+0L
Mgf0+sQ/7YY1CK8aSFQ3uLUYAbbazc/S2nxRdrT4+nix3IjKuQ1DFtBi0jknW/LL
K8bxYzuXCfDLfmjHsv6iV0vXLA906iNWohghskal6SosQ2cDup6Qu7/mYnx/Rscp
WYnEoyQLPco+X0tpZUrk1q6WvBUC7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org