Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4mYgjYnOZktitszYOHAebQJSdq4.roa
File:                     4mYgjYnOZktitszYOHAebQJSdq4.roa (raw, json)
Hash identifier:          9SuuVBr6WO+vJwqWs7kuWnP0IkdSvJ+LdGsT3usuvl0=
Subject key identifier:   E2:66:20:8D:89:CE:66:4B:62:B6:CC:D8:38:70:1E:6D:02:52:76:AE
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       06631072
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4mYgjYnOZktitszYOHAebQJSdq4.roa
Signing time:             Tue 19 Apr 2022 14:12:28 +0000
ROA not before:           Tue 19 Apr 2022 14:12:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208604
IP address blocks:        188.68.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107155570 (0x6631072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 19 14:12:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e266208d89ce664b62b6ccd838701e6d025276ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:e6:c1:d9:a3:d6:31:11:05:32:eb:c2:92:
                    e9:52:7c:f6:b5:32:de:e5:bd:8d:59:56:ae:7c:1e:
                    ee:4c:03:df:20:7b:0c:d3:6f:52:a9:2d:95:34:a3:
                    9a:de:aa:7a:3f:2a:21:a3:d3:3b:ec:62:82:5b:e7:
                    39:e5:54:cc:3f:b8:9d:46:1e:cc:01:3c:81:aa:69:
                    77:3d:17:11:af:95:6c:75:21:79:67:37:5d:ed:bc:
                    a5:54:0b:a8:4f:49:9b:a2:97:c3:54:4a:aa:d4:e1:
                    fa:44:b0:e9:23:72:eb:10:8b:0a:64:f5:8c:2c:9c:
                    7d:a8:e0:11:68:d5:0b:2e:b0:29:80:d3:7d:f3:5f:
                    7f:e0:f9:a7:78:80:b6:e6:f0:e4:b1:0c:75:4b:57:
                    5c:22:c4:5e:db:08:71:ff:1d:50:59:4f:1f:70:13:
                    ee:46:60:74:f3:fb:af:21:5d:ef:ee:19:fb:6e:7d:
                    cd:02:17:c4:46:e5:05:9a:d9:4e:26:6b:56:5d:bd:
                    cd:04:1a:55:ae:0d:7a:53:a4:58:f4:fb:8e:65:69:
                    d7:09:42:e9:d5:4f:d9:61:21:c8:e5:69:4f:d0:0d:
                    41:d9:82:81:51:0c:de:8a:37:ee:0a:50:12:32:ff:
                    ed:46:08:f8:aa:60:86:94:1c:93:72:ae:75:ad:e3:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:66:20:8D:89:CE:66:4B:62:B6:CC:D8:38:70:1E:6D:02:52:76:AE
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4mYgjYnOZktitszYOHAebQJSdq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.68.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:79:29:70:42:47:1d:f5:75:9b:a5:9d:f8:1f:7e:68:ce:7f:
         e2:38:44:0b:8c:d1:06:8d:18:bd:a8:bc:e0:4d:70:9f:8f:d5:
         10:23:d1:e4:fb:1e:be:1e:c5:eb:45:df:c3:ff:3f:ef:5b:df:
         12:f9:2c:14:a6:e6:e0:7c:b6:86:d7:b2:a6:e8:25:97:66:f8:
         47:5a:bf:7e:ac:c3:92:a3:77:b6:2c:58:b6:79:3b:cc:c8:ce:
         3f:30:74:87:49:1b:22:0a:5a:a1:93:e1:a3:62:08:ef:06:e8:
         67:2e:b9:b3:60:5d:1b:76:11:d1:03:78:16:46:dc:14:99:f3:
         93:a3:5e:d8:39:cf:40:8e:e9:94:7a:b5:07:8b:53:2d:b4:50:
         f6:09:d2:ba:44:59:b5:d3:1c:ad:5a:4c:8e:44:9d:12:a1:43:
         40:cb:81:33:3b:60:f9:d0:76:b5:bf:eb:4f:a8:64:3b:3a:63:
         5c:30:ff:ef:8b:1f:7e:b4:80:58:10:1b:0d:dd:e8:ac:93:0f:
         97:4b:e2:2d:74:08:5d:23:76:5a:20:16:9b:6e:36:87:02:2b:
         ae:e4:01:8c:c0:fb:33:22:28:4a:57:1e:95:02:8f:19:4a:a0:
         04:14:d7:aa:a1:9a:6b:61:23:d2:0e:ac:d8:57:78:63:d6:35:
         1d:65:79:e2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBmMQcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MB4XDTIyMDQx
OTE0MTIyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTI2NjIwOGQ4OWNl
NjY0YjYyYjZjY2Q4Mzg3MDFlNmQwMjUyNzZhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzP5sHZo9YxEQUy68KS6VJ89rUy3uW9jVlWrnwe7kwD3yB7
DNNvUqktlTSjmt6qej8qIaPTO+xiglvnOeVUzD+4nUYezAE8gappdz0XEa+VbHUh
eWc3Xe28pVQLqE9Jm6KXw1RKqtTh+kSw6SNy6xCLCmT1jCycfajgEWjVCy6wKYDT
ffNff+D5p3iAtubw5LEMdUtXXCLEXtsIcf8dUFlPH3AT7kZgdPP7ryFd7+4Z+259
zQIXxEblBZrZTiZrVl29zQQaVa4NelOkWPT7jmVp1wlC6dVP2WEhyOVpT9ANQdmC
gVEM3oo37gpQEjL/7UYI+KpghpQck3Kuda3jSQMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTiZiCNic5mS2K2zNg4cB5tAlJ2rjAfBgNVHSMEGDAWgBSDOO9BssAQWpHM
u5yJM3+usSn/hDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6anZRYkxBRUZxUnpMdWNpVE5fcnJFcF80US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8x
LzRtWWdqWW5PWmt0aXRzellPSEFlYlFKU2RxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
NDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZx
UnpMdWNpVE5fcnJFcF80US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALxEBjANBgkqhkiG9w0BAQsFAAOC
AQEAcHkpcEJHHfV1m6Wd+B9+aM5/4jhEC4zRBo0Yvai84E1wn4/VECPR5Psevh7F
60Xfw/8/71vfEvksFKbm4Hy2hteypugll2b4R1q/fqzDkqN3tixYtnk7zMjOPzB0
h0kbIgpaoZPho2II7wboZy65s2BdG3YR0QN4FkbcFJnzk6Ne2DnPQI7plHq1B4tT
LbRQ9gnSukRZtdMcrVpMjkSdEqFDQMuBMztg+dB2tb/rT6hkOzpjXDD/74sffrSA
WBAbDd3orJMPl0viLXQIXSN2WiAWm242hwIrruQBjMD7MyIoSlcelQKPGUqgBBTX
qqGaa2Ej0g6s2Fd4Y9Y1HWV54g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org