Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/gC6yWHQxUGNk8afx2B0KWsk68Bw.roa
File:                     gC6yWHQxUGNk8afx2B0KWsk68Bw.roa (raw, json)
Hash identifier:          CzToUyTqobLMT929As3iKmNiMsfQlYoNvGbJMWJpTFU=
Subject key identifier:   80:2E:B2:58:74:31:50:63:64:F1:A7:F1:D8:1D:0A:5A:C9:3A:F0:1C
Certificate issuer:       /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial:       0AC6F316
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/gC6yWHQxUGNk8afx2B0KWsk68Bw.roa
Signing time:             Sat 01 Jan 2022 08:03:04 +0000
ROA not before:           Sat 01 Jan 2022 08:03:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2852
IP address blocks:        147.230.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180810518 (0xac6f316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
        Validity
            Not Before: Jan  1 08:03:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=802eb2587431506364f1a7f1d81d0a5ac93af01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:b5:54:f1:59:4a:80:12:74:ba:9a:8d:f7:
                    29:ab:4d:7d:80:ee:84:98:96:dc:af:34:66:90:fd:
                    de:28:82:72:cc:c1:52:7c:7d:05:29:5b:d4:fd:ea:
                    6b:7e:e3:de:b3:43:c5:b0:0b:ba:e8:62:22:ad:38:
                    82:53:25:d7:3d:c3:6e:c4:ef:f5:25:81:ef:5c:ca:
                    25:d0:3e:31:1a:1c:61:b1:23:77:38:89:40:1d:77:
                    99:fe:c2:db:7c:58:a6:9c:9c:fc:07:13:3b:83:35:
                    16:06:57:65:0b:4f:58:dd:47:17:cb:50:9a:3a:9f:
                    09:3b:3b:77:d9:62:c9:11:ba:5c:f2:0d:4d:f2:c1:
                    46:ef:7d:3e:b3:6e:24:cb:ff:fa:34:39:7f:3a:15:
                    5a:96:5a:b7:d2:99:8d:c0:f9:e2:36:a4:89:19:db:
                    c2:e2:1d:3b:e6:e3:70:7e:2b:d0:4f:df:d7:a2:44:
                    b8:c5:da:f4:63:92:45:b4:a3:2b:40:38:4a:ea:7c:
                    0f:1a:96:3c:69:d9:ba:e8:98:2e:ab:57:50:15:f9:
                    c5:ea:65:be:0a:b1:31:34:cf:4a:12:f8:51:f9:98:
                    8a:66:8a:b0:2c:40:d8:12:46:02:e6:87:e1:12:8c:
                    b6:6a:d5:6b:9d:ae:f2:58:13:82:2f:9a:c6:74:20:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:B2:58:74:31:50:63:64:F1:A7:F1:D8:1D:0A:5A:C9:3A:F0:1C
            X509v3 Authority Key Identifier:
                keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/gC6yWHQxUGNk8afx2B0KWsk68Bw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:06:88:37:41:0e:8c:52:55:46:d5:07:bb:46:97:04:9c:
         f9:d5:f2:cd:b1:b3:00:7e:3b:61:40:73:00:65:54:b5:e7:2c:
         6f:06:61:0d:49:74:92:11:3e:23:b1:6c:ae:07:50:fe:60:34:
         37:cc:f1:de:c8:38:ff:a2:8b:d5:36:b8:07:98:1e:69:fb:73:
         56:f5:96:7a:bb:85:b2:62:bc:2e:97:8e:28:c4:7a:4b:be:2d:
         10:0f:f0:c3:a3:c8:49:12:61:83:ec:e5:53:65:25:4a:39:32:
         a5:40:a7:c6:88:ef:81:76:1b:d4:75:45:ac:1c:b7:60:f0:ca:
         9c:09:a1:62:96:d5:94:dc:61:4d:84:a8:2f:83:ce:e0:d8:4d:
         e9:9f:b3:a8:30:bf:ca:45:81:ed:20:eb:4c:09:7a:a2:57:7a:
         91:0d:cf:7c:92:1e:18:b9:b7:03:e1:84:14:a8:2b:04:dd:75:
         eb:9f:05:58:57:82:60:90:19:80:b9:c7:69:da:6c:bf:79:da:
         18:bd:42:3b:9f:28:c6:80:0a:d3:09:ed:42:e7:c6:70:1f:b7:
         82:39:38:f0:de:63:0f:47:9f:ce:8d:0a:70:ff:88:c2:6b:6b:
         96:1d:f3:2e:12:99:00:cd:41:5a:42:e2:f5:88:ee:24:15:b6:
         93:7d:57:d9
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIECsbzFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YTU3ZTBlYjRhNDUwNmExOWFiMmVmZjk4OWE2N2Q1NTliOThjYzFhMB4XDTIyMDEw
MTA4MDMwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODAyZWIyNTg3NDMx
NTA2MzY0ZjFhN2YxZDgxZDBhNWFjOTNhZjAxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhdtVTxWUqAEnS6mo33KatNfYDuhJiW3K80ZpD93iiCcszB
Unx9BSlb1P3qa37j3rNDxbALuuhiIq04glMl1z3DbsTv9SWB71zKJdA+MRocYbEj
dziJQB13mf7C23xYppyc/AcTO4M1FgZXZQtPWN1HF8tQmjqfCTs7d9liyRG6XPIN
TfLBRu99PrNuJMv/+jQ5fzoVWpZat9KZjcD54jakiRnbwuIdO+bjcH4r0E/f16JE
uMXa9GOSRbSjK0A4Sup8DxqWPGnZuuiYLqtXUBX5xeplvgqxMTTPShL4UfmYimaK
sCxA2BJGAuaH4RKMtmrVa52u8lgTgi+axnQgq50CAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBSALrJYdDFQY2Txp/HYHQpayTrwHDAfBgNVHSMEGDAWgBSqV+DrSkUGoZqy
7/mJpn1Vm5jMGjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FsZmc2MHBGQnFHYXN1XzVpYVo5Vlp1WXpCby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvN2ZhZmRiLWY3NGEtNGJhMS05NzAyLTBmZDAyYzQ0MjUzYi8x
L2dDNnlXSFF4VUdOazhhZngyQjBLV3NrNjhCdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
N2ZhZmRiLWY3NGEtNGJhMS05NzAyLTBmZDAyYzQ0MjUzYi8xL3FsZmc2MHBGQnFH
YXN1XzVpYVo5Vlp1WXpCby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJPmMA0GCSqGSIb3DQEBCwUAA4IB
AQBOEgaIN0EOjFJVRtUHu0aXBJz51fLNsbMAfjthQHMAZVS15yxvBmENSXSSET4j
sWyuB1D+YDQ3zPHeyDj/oovVNrgHmB5p+3NW9ZZ6u4WyYrwul44oxHpLvi0QD/DD
o8hJEmGD7OVTZSVKOTKlQKfGiO+BdhvUdUWsHLdg8MqcCaFiltWU3GFNhKgvg87g
2E3pn7OoML/KRYHtIOtMCXqiV3qRDc98kh4YubcD4YQUqCsE3XXrnwVYV4JgkBmA
ucdp2my/edoYvUI7nyjGgArTCe1C58ZwH7eCOTjw3mMPR5/OjQpw/4jCa2uWHfMu
EpkAzUFaQuL1iO4kFbaTfVfZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:45 2024 by rpki-client on console-fra.rpki-client.org