Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1-2pgkFedjC3Ol_aGvlZSxcTvbTE.roa
File:                     1-2pgkFedjC3Ol_aGvlZSxcTvbTE.roa (raw, json)
Hash identifier:          k6bqhWgvR7mj6M7WZUxGZ5dlPw03isCHI3CIdhQ/O9E=
Subject key identifier:   FB:6A:60:90:57:9D:8C:2D:CE:97:F6:86:BE:56:52:C5:C4:EF:6D:31
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0581DB12
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1-2pgkFedjC3Ol_aGvlZSxcTvbTE.roa
Signing time:             Sat 01 Jan 2022 05:01:19 +0000
ROA not before:           Sat 01 Jan 2022 05:01:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136918
IP address blocks:        2a05:1082:5::/48 maxlen: 48
                          2a05:1082:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92396306 (0x581db12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb6a6090579d8c2dce97f686be5652c5c4ef6d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:a5:ce:36:3c:05:a0:d8:69:f3:ae:c0:eb:
                    46:d5:6e:c4:b9:6a:9f:07:c1:23:4e:3e:08:9f:01:
                    ef:3e:e3:f4:d4:e7:58:6f:24:03:4c:15:4b:39:ce:
                    46:55:43:7b:bc:03:85:a5:9f:9e:d5:ab:ce:6f:ac:
                    d3:78:5b:0c:4a:9b:fa:f7:b8:cc:07:e3:96:41:c0:
                    75:1f:90:32:4c:c1:35:67:04:51:32:c6:aa:2a:56:
                    a9:4b:4a:fb:95:8e:55:74:90:d3:81:a3:da:77:ef:
                    55:6e:b4:34:c4:fb:22:53:7e:fa:94:67:20:1f:e2:
                    79:63:5e:59:b2:12:4b:54:ee:83:bc:76:c2:f7:79:
                    d7:37:3b:63:02:fa:be:6a:00:43:2f:3a:13:38:84:
                    7f:81:74:31:72:61:5d:41:c6:71:f7:fc:c4:15:4e:
                    28:46:26:33:ec:93:29:76:1e:3e:b5:05:ee:ad:81:
                    a0:f8:a3:1c:92:6d:d3:ef:b3:0a:d0:a9:0e:7b:2b:
                    50:22:38:e0:c8:79:52:5b:6f:e0:07:9b:ee:38:47:
                    cd:8c:95:b6:69:1e:24:7a:13:f7:51:91:85:fe:40:
                    0a:3f:6b:ac:2a:a8:94:36:96:80:6c:b4:72:e8:72:
                    88:c0:e8:fa:9c:26:3b:9a:d8:f1:1b:f4:9c:7e:b9:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6A:60:90:57:9D:8C:2D:CE:97:F6:86:BE:56:52:C5:C4:EF:6D:31
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1-2pgkFedjC3Ol_aGvlZSxcTvbTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1082:1::/48
                  2a05:1082:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:19:93:33:25:40:33:24:1f:dc:8a:8c:f8:81:ba:27:a3:
         73:c8:d2:d7:a1:0b:2e:b8:80:3c:fe:30:e6:fc:04:78:46:b7:
         27:9e:48:93:a5:29:a7:92:d4:90:bd:7d:79:5a:71:71:91:a2:
         1a:65:f6:96:34:de:d7:2a:4d:2a:71:42:ee:10:21:25:c1:a8:
         13:54:08:24:3a:9a:51:a4:3a:9b:5f:c7:6a:50:b1:f2:55:62:
         84:90:78:07:2a:4e:42:6d:a0:bc:90:0f:85:66:4f:20:bc:32:
         f8:6c:ab:07:ed:a7:18:64:47:68:28:68:4c:3f:a2:de:fe:0c:
         39:fa:c9:4d:22:9b:f4:21:bc:16:f8:59:8d:61:27:7f:ad:ad:
         8f:77:fc:3d:22:4d:bf:36:32:8c:52:1e:cc:ee:03:df:9c:96:
         77:e3:10:02:a8:1a:a9:d7:6f:94:fc:64:6b:21:46:42:11:73:
         97:d0:b7:1e:76:12:e3:18:c6:04:f6:33:d7:c9:4c:bf:43:5e:
         ce:a6:cc:ad:58:5d:52:a5:3b:e4:34:a9:bc:da:94:73:cb:28:
         08:b0:42:75:06:4e:fa:dd:da:b6:00:36:b8:3a:53:ed:ed:1d:
         42:a8:a7:d5:2e:0a:d7:2c:fe:69:37:c7:43:37:7a:77:22:73:
         5d:f7:cd:eb
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEBYHbEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2M2OWQwNDU4MzUwMGM1ZWY4MTEzNjgzMTIzNzU5M2UwYmI4NmNlMB4XDTIyMDEw
MTA1MDExOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmI2YTYwOTA1Nzlk
OGMyZGNlOTdmNjg2YmU1NjUyYzVjNGVmNmQzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvZpc42PAWg2GnzrsDrRtVuxLlqnwfBI04+CJ8B7z7j9NTn
WG8kA0wVSznORlVDe7wDhaWfntWrzm+s03hbDEqb+ve4zAfjlkHAdR+QMkzBNWcE
UTLGqipWqUtK+5WOVXSQ04Gj2nfvVW60NMT7IlN++pRnIB/ieWNeWbISS1Tug7x2
wvd51zc7YwL6vmoAQy86EziEf4F0MXJhXUHGcff8xBVOKEYmM+yTKXYePrUF7q2B
oPijHJJt0++zCtCpDnsrUCI44Mh5Ultv4Aeb7jhHzYyVtmkeJHoT91GRhf5ACj9r
rCqolDaWgGy0cuhyiMDo+pwmO5rY8Rv0nH657tECAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBT7amCQV52MLc6X9oa+VlLFxO9tMTAfBgNVHSMEGDAWgBRzxp0EWDUAxe+B
E2gxI3WT4LuGzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M4YWRCRmcxQU1YdmdSTm9NU04xay1DN2hzNC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8x
LzEtMnBna0ZlZGpDM09sX2FHdmxaU3hjVHZiVEUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
LzZmNmNlMi1lNmVlLTRlMmEtOTA1ZC1mOWNiMGE3YjIwNmMvMS9jOGFkQkZnMUFN
WHZnUk5vTVNOMWstQzdoczQuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqBRCCAAEDBwAqBRCCAAUwDQYJ
KoZIhvcNAQELBQADggEBAKp/GZMzJUAzJB/cioz4gbono3PI0tehCy64gDz+MOb8
BHhGtyeeSJOlKaeS1JC9fXlacXGRohpl9pY03tcqTSpxQu4QISXBqBNUCCQ6mlGk
Optfx2pQsfJVYoSQeAcqTkJtoLyQD4VmTyC8MvhsqwftpxhkR2goaEw/ot7+DDn6
yU0im/QhvBb4WY1hJ3+trY93/D0iTb82MoxSHszuA9+clnfjEAKoGqnXb5T8ZGsh
RkIRc5fQtx52EuMYxgT2M9fJTL9DXs6mzK1YXVKlO+Q0qbzalHPLKAiwQnUGTvrd
2rYANrg6U+3tHUKop9UuCtcs/mk3x0M3encic133zes=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org