Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vO2_hyhYL2VcD0SR4MkT9FH9GsM.roa
File:                     vO2_hyhYL2VcD0SR4MkT9FH9GsM.roa (raw, json)
Hash identifier:          FrL9Z+mX/MVF67XkpFiO7CXiVBcLMnbkGknfg76dZf0=
Subject key identifier:   BC:ED:BF:87:28:58:2F:65:5C:0F:44:91:E0:C9:13:F4:51:FD:1A:C3
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       058003C0
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vO2_hyhYL2VcD0SR4MkT9FH9GsM.roa
Signing time:             Sat 01 Jan 2022 05:01:18 +0000
ROA not before:           Sat 01 Jan 2022 05:01:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59598
IP address blocks:        2a05:1084::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92275648 (0x58003c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcedbf8728582f655c0f4491e0c913f451fd1ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:76:ed:90:f5:9d:9d:a8:45:a1:be:ea:f4:
                    16:17:2a:ab:7c:97:b9:e7:9a:ae:2b:82:8f:24:db:
                    3f:d8:5f:0d:89:fd:ee:f9:fd:41:49:38:3d:68:e1:
                    dd:ff:17:e0:12:fb:4e:eb:12:97:18:41:a3:03:9b:
                    f0:8c:e9:7e:4e:f8:79:37:fb:8e:6e:16:a6:f3:df:
                    22:51:16:dc:41:9c:ff:34:4d:b2:1a:57:3a:0f:72:
                    91:21:b7:3a:0c:a4:21:46:bc:ae:98:e7:7c:ec:60:
                    54:3a:1a:e8:32:83:1f:5a:99:0b:8b:67:f1:46:ba:
                    53:23:40:a0:1b:bb:b9:ae:0c:e6:49:eb:bd:47:78:
                    ee:70:d4:e4:f5:d0:34:77:8c:e6:3a:ea:c9:6b:90:
                    74:52:ed:cc:e6:33:bf:fe:6d:0b:44:cc:7f:c2:43:
                    7d:9d:52:b0:72:44:49:1f:22:ec:7d:da:4c:55:7d:
                    b7:05:86:3a:be:2d:51:44:db:0f:8a:c5:b6:d3:30:
                    47:4a:ae:26:d2:33:35:85:00:f9:e9:2e:4b:e3:69:
                    8f:f4:f2:5a:fb:e9:15:5b:90:05:b8:00:d8:58:c2:
                    8a:ff:9c:15:4b:e1:e9:ae:fc:aa:05:14:86:9b:09:
                    08:c3:7f:55:e3:b8:88:ad:42:5b:cc:82:20:71:1e:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:BF:87:28:58:2F:65:5C:0F:44:91:E0:C9:13:F4:51:FD:1A:C3
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vO2_hyhYL2VcD0SR4MkT9FH9GsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1084::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:5e:ad:45:f4:b4:6f:45:aa:5b:41:50:d1:c9:2a:6e:83:
         07:6f:97:d8:ff:a6:9d:b5:f4:76:4f:8c:43:f1:3a:66:1c:99:
         2f:be:22:bf:4b:4c:e7:60:cb:db:b2:2f:a9:aa:92:99:b9:7c:
         f7:c1:06:df:ad:31:f1:f2:56:91:05:76:06:e7:bd:94:9b:69:
         f1:af:01:0e:a3:2c:25:07:12:13:3e:bb:88:c4:bf:f3:0a:54:
         c9:8a:6b:68:ad:8e:2e:ad:b3:f8:f9:4c:37:f8:11:18:82:8f:
         b6:d8:06:6e:2d:80:67:ed:7c:9c:97:2c:89:14:bb:cc:eb:c1:
         7d:c9:10:0d:74:47:6c:4f:1b:4a:f8:40:50:01:e0:92:15:6a:
         77:a1:73:30:94:28:c8:71:69:d4:0d:53:62:c5:3b:48:59:5e:
         a1:a3:7a:ef:83:b5:a8:71:94:dc:77:ce:f3:65:79:b1:3c:6a:
         f0:89:5e:3b:58:7b:44:88:d2:7d:b2:58:c0:b1:a4:ed:06:22:
         98:20:da:ba:2a:25:af:77:bd:e2:f8:73:30:bf:80:04:b4:f9:
         46:c2:dc:74:83:1d:90:50:26:63:d8:de:34:09:c8:f5:54:82:
         1b:36:fb:33:3d:53:e1:66:c9:54:37:7d:f0:26:d3:95:6e:df:
         58:66:7d:95
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBYADwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2M2OWQwNDU4MzUwMGM1ZWY4MTEzNjgzMTIzNzU5M2UwYmI4NmNlMB4XDTIyMDEw
MTA1MDExOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmNlZGJmODcyODU4
MmY2NTVjMGY0NDkxZTBjOTEzZjQ1MWZkMWFjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdDdu2Q9Z2dqEWhvur0Fhcqq3yXueeariuCjyTbP9hfDYn9
7vn9QUk4PWjh3f8X4BL7TusSlxhBowOb8Izpfk74eTf7jm4WpvPfIlEW3EGc/zRN
shpXOg9ykSG3OgykIUa8rpjnfOxgVDoa6DKDH1qZC4tn8Ua6UyNAoBu7ua4M5knr
vUd47nDU5PXQNHeM5jrqyWuQdFLtzOYzv/5tC0TMf8JDfZ1SsHJESR8i7H3aTFV9
twWGOr4tUUTbD4rFttMwR0quJtIzNYUA+ekuS+Npj/TyWvvpFVuQBbgA2FjCiv+c
FUvh6a78qgUUhpsJCMN/VeO4iK1CW8yCIHEeJ6MCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBS87b+HKFgvZVwPRJHgyRP0Uf0awzAfBgNVHSMEGDAWgBRzxp0EWDUAxe+B
E2gxI3WT4LuGzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M4YWRCRmcxQU1YdmdSTm9NU04xay1DN2hzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8x
L3ZPMl9oeWhZTDJWY0QwU1I0TWtUOUZIOUdzTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8xL2M4YWRCRmcxQU1Y
dmdSTm9NU04xay1DN2hzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoFEIQwDQYJKoZIhvcNAQELBQAD
ggEBAAjYXq1F9LRvRapbQVDRySpugwdvl9j/pp219HZPjEPxOmYcmS++Ir9LTOdg
y9uyL6mqkpm5fPfBBt+tMfHyVpEFdgbnvZSbafGvAQ6jLCUHEhM+u4jEv/MKVMmK
a2itji6ts/j5TDf4ERiCj7bYBm4tgGftfJyXLIkUu8zrwX3JEA10R2xPG0r4QFAB
4JIVanehczCUKMhxadQNU2LFO0hZXqGjeu+DtahxlNx3zvNlebE8avCJXjtYe0SI
0n2yWMCxpO0GIpgg2roqJa93veL4czC/gAS0+UbC3HSDHZBQJmPY3jQJyPVUghs2
+zM9U+FmyVQ3ffAm05Vu31hmfZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org