Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa
File:                     eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa (raw, json)
Hash identifier:          bbjxVPrrh2wbB7NJeKP9kXVvufuLOFQTzM0y6rU7Ge0=
Subject key identifier:   78:AE:99:A4:7C:F7:70:38:D6:83:4B:79:0E:F7:3D:69:FE:7A:41:2F
Certificate issuer:       /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial:       0C81641C
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa
Signing time:             Sat 01 Jan 2022 09:56:48 +0000
ROA not before:           Sat 01 Jan 2022 09:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15693
IP address blocks:        195.191.120.0/23 maxlen: 23
                          46.183.248.0/21 maxlen: 21
                          185.29.62.0/23 maxlen: 23
                          185.29.60.0/24 maxlen: 24
                          2a01:8800::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209806364 (0xc81641c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
        Validity
            Not Before: Jan  1 09:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78ae99a47cf77038d6834b790ef73d69fe7a412f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:47:90:ec:d0:e6:69:b6:b7:d3:61:0f:7d:
                    32:14:a4:d6:02:33:62:44:e3:d6:7c:53:8b:e7:20:
                    36:33:40:04:f7:60:59:cb:1c:06:c2:b8:f6:32:d4:
                    7b:93:5f:0e:75:3d:55:be:69:34:97:75:25:2f:c5:
                    55:70:6f:4d:3c:69:fa:8d:90:4b:58:12:77:3b:b8:
                    71:8a:ee:c0:45:68:ce:a4:a4:3a:6f:18:d0:f1:73:
                    14:6e:1d:70:ed:08:a2:9a:68:d7:e7:be:1f:53:ba:
                    9e:ec:71:ac:7d:ae:3e:a9:30:79:17:55:08:2c:d7:
                    18:c2:24:ca:6b:dc:93:27:97:68:c2:7f:90:79:a6:
                    54:e8:ce:5a:61:cd:82:43:1c:c9:0a:72:ce:80:cc:
                    5b:76:f4:5b:40:54:f0:56:76:5e:07:a4:5a:a1:23:
                    8e:46:aa:b2:9a:d0:f4:05:55:3b:0a:4f:a2:af:e2:
                    37:78:b8:a0:b3:ec:80:9e:70:a7:88:49:f6:87:dd:
                    2a:23:82:21:f5:41:b5:00:bc:00:7e:41:1d:61:8a:
                    c0:c8:e1:26:0a:20:d9:89:c7:52:a5:c8:85:2b:a2:
                    c2:94:a6:b4:46:5f:d9:98:d6:90:52:64:b8:8a:5d:
                    dc:a1:42:d7:4b:22:0e:99:dd:1c:b3:7e:64:a3:69:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AE:99:A4:7C:F7:70:38:D6:83:4B:79:0E:F7:3D:69:FE:7A:41:2F
            X509v3 Authority Key Identifier:
                keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.248.0/21
                  185.29.60.0/24
                  185.29.62.0/23
                  195.191.120.0/23
                IPv6:
                  2a01:8800::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:b4:b3:d3:0f:c8:a5:da:5f:69:c4:81:79:c6:70:26:3b:
         84:5f:ba:e0:39:9b:f9:fd:3f:0a:09:47:3f:b0:d8:13:d0:d3:
         2e:60:8c:26:16:cd:45:e9:aa:13:67:bc:c4:bf:52:4d:f0:96:
         ff:d5:46:41:e0:d3:11:72:20:05:f2:d6:cd:6e:eb:57:d1:fd:
         eb:61:1d:87:ed:18:93:e1:f5:c9:45:f9:d3:cb:f3:79:1c:ed:
         ef:ac:67:89:29:d0:4d:92:ed:2a:78:5f:e5:b6:75:6f:ed:4c:
         21:a1:0f:f7:de:64:e7:e0:7e:64:b6:a4:5b:bc:6b:df:e3:77:
         c6:04:cf:6e:46:86:e1:f6:dd:a1:2a:96:b2:5b:39:22:00:9b:
         9f:78:07:f2:41:af:97:7a:d2:13:99:86:8e:d9:00:aa:df:49:
         84:28:ff:1a:4a:a9:51:a7:7e:e4:a4:a3:65:51:17:7c:c9:75:
         86:0a:2b:db:7a:48:3e:3c:e7:be:b2:80:a8:5b:bd:1e:3a:47:
         07:10:f0:d4:05:d6:fe:ea:8c:46:30:9f:f3:52:5d:be:8f:61:
         23:1a:c1:92:a6:9d:b6:bb:dd:eb:fd:71:34:b9:e0:c0:51:32:
         39:60:f4:7a:a9:a2:7b:f5:f5:55:d4:54:71:e5:37:68:f3:60:
         c3:39:cb:23
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEDIFkHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTFhN2I4MGM2ODQ2Mjg1OTIzMmI4NmYyYjQ1MjY1OGQ4ZjdmODQ5MB4XDTIyMDEw
MTA5NTY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzhhZTk5YTQ3Y2Y3
NzAzOGQ2ODM0Yjc5MGVmNzNkNjlmZTdhNDEyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDrR5Ds0OZptrfTYQ99MhSk1gIzYkTj1nxTi+cgNjNABPdg
WcscBsK49jLUe5NfDnU9Vb5pNJd1JS/FVXBvTTxp+o2QS1gSdzu4cYruwEVozqSk
Om8Y0PFzFG4dcO0Ioppo1+e+H1O6nuxxrH2uPqkweRdVCCzXGMIkymvckyeXaMJ/
kHmmVOjOWmHNgkMcyQpyzoDMW3b0W0BU8FZ2XgekWqEjjkaqsprQ9AVVOwpPoq/i
N3i4oLPsgJ5wp4hJ9ofdKiOCIfVBtQC8AH5BHWGKwMjhJgog2YnHUqXIhSuiwpSm
tEZf2ZjWkFJkuIpd3KFC10siDpndHLN+ZKNpNTECAwEAAaOCAiowggImMB0GA1Ud
DgQWBBR4rpmkfPdwONaDS3kO9z1p/npBLzAfBgNVHSMEGDAWgBRqGnuAxoRihZIy
uG8rRSZY2Pf4STAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FocDdnTWFFWW9XU01yaHZLMFVtV05qMy1Fay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNDllOGQ2LWJiZjYtNGNhNy1iYTVkLWYxZDNjZmY1NTI3YS8x
L2VLNlpwSHozY0RqV2cwdDVEdmM5YWY1NlFTOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NDllOGQ2LWJiZjYtNGNhNy1iYTVkLWYxZDNjZmY1NTI3YS8xL2FocDdnTWFFWW9X
U01yaHZLMFVtV05qMy1Fay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAy63+AMEALkdPAMEAbkdPgMEAcO/
eDANBAIAAjAHAwUDKgGIADANBgkqhkiG9w0BAQsFAAOCAQEAUNS0s9MPyKXaX2nE
gXnGcCY7hF+64Dmb+f0/CglHP7DYE9DTLmCMJhbNRemqE2e8xL9STfCW/9VGQeDT
EXIgBfLWzW7rV9H962Edh+0Yk+H1yUX508vzeRzt76xniSnQTZLtKnhf5bZ1b+1M
IaEP995k5+B+ZLakW7xr3+N3xgTPbkaG4fbdoSqWsls5IgCbn3gH8kGvl3rSE5mG
jtkAqt9JhCj/GkqpUad+5KSjZVEXfMl1hgor23pIPjznvrKAqFu9HjpHBxDw1AXW
/uqMRjCf81Jdvo9hIxrBkqadtrvd6/1xNLngwFEyOWD0eqmie/X1VdRUceU3aPNg
wznLIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:35 2024 by rpki-client on console-fra.rpki-client.org