Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/EN6Z5sCi-rInx6Oa36-L64iQbyI.roa
File:                     EN6Z5sCi-rInx6Oa36-L64iQbyI.roa (raw, json)
Hash identifier:          IA7s+Td1LA2USQF/e0SBgvBjm5VDfILZCHK/ceC6RIw=
Subject key identifier:   10:DE:99:E6:C0:A2:FA:B2:27:C7:A3:9A:DF:AF:8B:EB:88:90:6F:22
Certificate issuer:       /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial:       37B3C306
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/EN6Z5sCi-rInx6Oa36-L64iQbyI.roa
Signing time:             Sat 01 Jan 2022 02:51:58 +0000
ROA not before:           Sat 01 Jan 2022 02:51:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6736
IP address blocks:        85.132.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934527750 (0x37b3c306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
        Validity
            Not Before: Jan  1 02:51:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10de99e6c0a2fab227c7a39adfaf8beb88906f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:e7:03:da:f1:59:7d:d0:66:02:28:87:4a:
                    f6:2f:13:61:3e:8a:d6:b8:01:bb:20:16:36:65:ba:
                    ad:62:3f:8d:82:97:42:09:77:e4:8c:92:cf:b3:78:
                    34:1f:71:be:3a:3d:a1:8a:f0:c6:57:24:34:a3:e8:
                    ba:85:8f:fa:da:00:2c:da:96:ed:c1:eb:60:f2:42:
                    0d:2a:7f:aa:3c:97:d0:bb:37:75:1a:c7:b5:da:c5:
                    f5:c1:b8:be:30:00:a8:d4:f9:c2:b5:91:a7:2a:95:
                    a4:6a:37:ba:28:f7:08:1e:e7:67:bd:99:85:87:29:
                    35:8a:d7:cd:9a:f0:e3:78:2e:5b:b4:03:07:89:82:
                    c3:1b:da:d7:c9:85:52:31:3c:6a:ce:2a:13:98:05:
                    56:9b:ab:75:d5:66:4e:f8:5a:0b:ab:16:50:77:d3:
                    69:b6:9e:d2:60:26:3c:6c:a3:14:e6:2c:f9:00:88:
                    44:e9:8e:af:6a:7b:58:6b:01:72:48:5b:63:88:39:
                    9f:38:0f:c4:22:9c:74:eb:d7:e4:2e:08:61:bc:ff:
                    b9:80:34:31:f8:e3:d6:51:da:21:ed:87:2f:73:25:
                    fa:8f:29:77:4a:3a:08:60:6b:89:f1:2f:24:e8:26:
                    e1:5b:f5:8d:7c:fa:af:52:4c:b7:1a:79:11:11:e4:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DE:99:E6:C0:A2:FA:B2:27:C7:A3:9A:DF:AF:8B:EB:88:90:6F:22
            X509v3 Authority Key Identifier:
                keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/EN6Z5sCi-rInx6Oa36-L64iQbyI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.132.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:f8:11:58:a8:6a:a3:cc:fb:1a:3d:26:e7:ce:8a:ac:68:
         95:49:0d:a0:a4:1e:ab:51:e0:2f:0f:1d:11:2f:e4:8a:70:36:
         8a:cb:43:24:06:8f:6c:57:0b:27:a3:78:18:ae:da:77:fb:8a:
         14:9b:01:e4:5f:e0:f4:67:78:1a:f2:65:dd:5e:02:73:1b:40:
         8b:2f:d2:0a:66:2b:6f:75:8c:d9:44:88:6f:88:a5:70:cb:73:
         fe:51:a7:d9:6e:07:7b:02:ac:90:d6:45:62:b2:ad:26:fb:60:
         1c:3b:47:23:d5:1a:97:dc:f2:b8:23:ba:be:5a:bd:dd:e4:3b:
         26:92:93:13:da:ef:78:4c:41:02:87:16:0a:a6:c0:e1:e0:3d:
         48:ae:dd:c0:9f:0d:34:83:1e:46:4a:56:95:73:ce:fc:3e:cf:
         a7:cf:0a:23:d4:51:40:75:d6:db:09:21:e5:c8:1c:22:ac:3c:
         f2:94:5f:bd:bf:5d:5e:49:69:2c:99:88:a7:f7:ca:df:f9:7f:
         c9:6f:6d:d2:02:c1:96:75:01:d9:0e:79:33:c8:3f:bb:73:43:
         15:eb:3c:15:81:16:d4:39:61:37:3d:42:25:ca:95:6f:5b:df:
         01:21:2e:ce:15:9c:7a:a9:17:0b:a5:47:4c:98:2a:af:8c:48:
         26:7b:c5:8b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN7PDBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTI1MmE0NzcyNDJmYjQ1ZjIwYmIwODAyMGE0MDNhMmJiNDY2YTliMB4XDTIyMDEw
MTAyNTE1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBkZTk5ZTZjMGEy
ZmFiMjI3YzdhMzlhZGZhZjhiZWI4ODkwNmYyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkL5wPa8Vl90GYCKIdK9i8TYT6K1rgBuyAWNmW6rWI/jYKX
Qgl35IySz7N4NB9xvjo9oYrwxlckNKPouoWP+toALNqW7cHrYPJCDSp/qjyX0Ls3
dRrHtdrF9cG4vjAAqNT5wrWRpyqVpGo3uij3CB7nZ72ZhYcpNYrXzZrw43guW7QD
B4mCwxva18mFUjE8as4qE5gFVpurddVmTvhaC6sWUHfTabae0mAmPGyjFOYs+QCI
ROmOr2p7WGsBckhbY4g5nzgPxCKcdOvX5C4IYbz/uYA0Mfjj1lHaIe2HL3Ml+o8p
d0o6CGBrifEvJOgm4Vv1jXz6r1JMtxp5ERHkVO0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQQ3pnmwKL6sifHo5rfr4vriJBvIjAfBgNVHSMEGDAWgBQuJSpHckL7RfIL
sIAgpAOiu0ZqmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xpVXFSM0pDLTBYeUM3Q0FJS1FEb3J0R2Fwcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvYjEwNTYyLTI2YTEtNDY0NS04ZDJiLTE2ZjE0NmJlZjk5NS8x
L0VONlo1c0NpLXJJbng2T2EzNi1MNjRpUWJ5SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
YjEwNTYyLTI2YTEtNDY0NS04ZDJiLTE2ZjE0NmJlZjk5NS8xL0xpVXFSM0pDLTBY
eUM3Q0FJS1FEb3J0R2Fwcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWEMjANBgkqhkiG9w0BAQsFAAOC
AQEASlL4EVioaqPM+xo9JufOiqxolUkNoKQeq1HgLw8dES/kinA2istDJAaPbFcL
J6N4GK7ad/uKFJsB5F/g9Gd4GvJl3V4CcxtAiy/SCmYrb3WM2USIb4ilcMtz/lGn
2W4HewKskNZFYrKtJvtgHDtHI9Ual9zyuCO6vlq93eQ7JpKTE9rveExBAocWCqbA
4eA9SK7dwJ8NNIMeRkpWlXPO/D7Pp88KI9RRQHXW2wkh5cgcIqw88pRfvb9dXklp
LJmIp/fK3/l/yW9t0gLBlnUB2Q55M8g/u3NDFes8FYEW1DlhNz1CJcqVb1vfASEu
zhWceqkXC6VHTJgqr4xIJnvFiw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:46 2024 by rpki-client on console-fra.rpki-client.org