Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/a5nfgL8fpVfr5P5WBE0TTarhflI.roa
File:                     a5nfgL8fpVfr5P5WBE0TTarhflI.roa (raw, json)
Hash identifier:          6HbUYpGnX/QjwNwYPROjf8/cyYeWvL6jlMWiiKzrbCM=
Subject key identifier:   6B:99:DF:80:BF:1F:A5:57:EB:E4:FE:56:04:4D:13:4D:AA:E1:7E:52
Certificate issuer:       /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial:       0183D155FC52AC80FD601A5122DE8AC62B14
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/a5nfgL8fpVfr5P5WBE0TTarhflI.roa
Signing time:             Thu 13 Oct 2022 12:33:36 +0000
ROA not before:           Thu 13 Oct 2022 12:33:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        185.64.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d1:55:fc:52:ac:80:fd:60:1a:51:22:de:8a:c6:2b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
        Validity
            Not Before: Oct 13 12:33:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b99df80bf1fa557ebe4fe56044d134daae17e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:07:db:ba:4f:49:73:d6:ab:22:08:fb:12:98:
                    51:88:a4:25:eb:4a:7a:8c:d7:d6:35:c4:fa:15:4d:
                    02:2e:ac:49:b5:84:02:12:52:6e:26:c7:42:0c:53:
                    36:63:78:44:37:b4:59:c3:60:46:c9:3a:4d:04:1e:
                    cd:bc:48:e3:fc:8a:ed:53:ee:76:05:55:9a:88:f4:
                    72:fd:32:4a:db:7b:88:f6:59:8c:86:6e:35:e4:ea:
                    14:0b:0a:b0:aa:15:f4:45:ee:cc:45:87:6d:29:c4:
                    57:00:f6:26:fb:65:2e:48:90:a0:28:c5:e5:f2:47:
                    47:89:0a:de:10:95:d4:3f:f1:2f:8c:b7:d6:ea:28:
                    26:5a:7f:f4:30:8f:1b:74:89:70:42:5d:ee:f3:92:
                    22:92:ed:4c:aa:f5:55:50:7d:8a:1f:2b:66:bc:63:
                    92:51:70:14:27:42:d4:b9:f3:3e:2e:66:c2:2b:cd:
                    5b:80:e3:e7:80:93:52:c1:f0:ec:20:ca:aa:fd:14:
                    c8:32:53:75:74:2f:12:b7:0b:42:31:88:30:c4:d6:
                    94:59:83:d8:c1:e6:80:4b:a4:c8:27:dd:b9:9e:ed:
                    21:5b:e0:48:77:b6:c8:48:8d:4d:cd:c3:bd:0f:fa:
                    b2:7b:8a:88:80:69:75:3b:75:97:8a:8a:77:1d:2e:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:99:DF:80:BF:1F:A5:57:EB:E4:FE:56:04:4D:13:4D:AA:E1:7E:52
            X509v3 Authority Key Identifier:
                keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/a5nfgL8fpVfr5P5WBE0TTarhflI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.64.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:aa:4a:1e:6d:ef:2c:9e:47:b8:95:40:1f:42:90:73:3d:f9:
         71:9a:42:7c:98:cd:9b:0a:24:1d:c1:a6:ec:80:44:ab:dd:08:
         80:78:28:22:b2:7c:1b:32:1b:a0:26:a0:2c:55:63:70:15:f0:
         e9:ce:57:ea:e6:32:d6:1c:ec:b0:a3:e6:3f:6a:50:69:e1:9a:
         14:2e:1e:43:b9:71:92:e4:9c:81:f3:8f:b4:e0:5d:6a:ee:b2:
         68:b5:c6:8a:60:05:e7:51:fe:ab:20:76:f0:c6:94:5d:06:f3:
         75:f9:6e:46:1f:97:75:69:89:ff:e2:16:14:11:c5:65:b4:1c:
         71:c3:1a:27:82:eb:87:e2:5f:ef:b9:34:9e:24:a6:27:a9:93:
         55:b1:ee:3e:9b:d0:9c:7a:6f:e6:40:96:71:6b:27:31:76:89:
         fb:dc:fb:37:1a:c1:7f:d1:f2:55:39:53:19:5d:df:87:8a:30:
         1f:eb:68:41:4f:b2:96:d6:16:f9:4e:e7:52:a1:38:da:29:b7:
         fb:ac:31:43:c8:24:34:c0:91:33:de:04:06:2b:55:dd:96:50:
         75:30:24:14:75:9b:78:c4:2b:bb:1e:5c:ae:41:8c:74:5f:63:
         ca:a8:86:0e:8d:1f:0e:b3:4f:10:c2:24:38:3b:48:73:11:92:
         c3:90:19:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPRVfxSrID9YBpRIt6KxisUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWE0YWRlZTgwYjA2NTE5Y2U0MGRkM2QxM2YyOGJhOWY1
NzU5NTcwHhcNMjIxMDEzMTIzMzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjk5ZGY4MGJmMWZhNTU3ZWJlNGZlNTYwNDRkMTM0ZGFhZTE3ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgfbuk9Jc9arIgj7EphRiKQl60p6
jNfWNcT6FU0CLqxJtYQCElJuJsdCDFM2Y3hEN7RZw2BGyTpNBB7NvEjj/IrtU+52
BVWaiPRy/TJK23uI9lmMhm415OoUCwqwqhX0Re7MRYdtKcRXAPYm+2UuSJCgKMXl
8kdHiQreEJXUP/EvjLfW6igmWn/0MI8bdIlwQl3u85Iiku1MqvVVUH2KHytmvGOS
UXAUJ0LUufM+LmbCK81bgOPngJNSwfDsIMqq/RTIMlN1dC8StwtCMYgwxNaUWYPY
weaAS6TIJ925nu0hW+BId7bISI1NzcO9D/qye4qIgGl1O3WXiop3HS4tXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGuZ34C/H6VX6+T+VgRNE02q4X5SMB8GA1UdIwQY
MBaAFM3qSt7oCwZRnOQN09E/KLqfV1lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUt
MDU2YzdiZjZkN2Q4LzEvYTVuZmdMOGZwVmZyNVA1V0JFMFRUYXJoZmxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUtMDU2YzdiZjZkN2Q4
LzEvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUBJMA0G
CSqGSIb3DQEBCwUAA4IBAQC3qkoebe8snke4lUAfQpBzPflxmkJ8mM2bCiQdwabs
gESr3QiAeCgisnwbMhugJqAsVWNwFfDpzlfq5jLWHOywo+Y/alBp4ZoULh5DuXGS
5JyB84+04F1q7rJotcaKYAXnUf6rIHbwxpRdBvN1+W5GH5d1aYn/4hYUEcVltBxx
wxonguuH4l/vuTSeJKYnqZNVse4+m9Ccem/mQJZxaycxdon73Ps3GsF/0fJVOVMZ
Xd+HijAf62hBT7KW1hb5TudSoTjaKbf7rDFDyCQ0wJEz3gQGK1XdllB1MCQUdZt4
xCu7HlyuQYx0X2PKqIYOjR8Os08QwiQ4O0hzEZLDkBlt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:51 2024 by rpki-client on console-ams.rpki-client.org