Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Ue8maKUfAZ37iCfns7Ibo-2iKZg.roa
File:                     Ue8maKUfAZ37iCfns7Ibo-2iKZg.roa (raw, json)
Hash identifier:          jlAQh/y5BcwqsTSUTKN/ps3qpeKvb+isw2jjX7OsMAU=
Subject key identifier:   51:EF:26:68:A5:1F:01:9D:FB:88:27:E7:B3:B2:1B:A3:ED:A2:29:98
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       356E880B
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Ue8maKUfAZ37iCfns7Ibo-2iKZg.roa
Signing time:             Sat 01 Jan 2022 15:55:18 +0000
ROA not before:           Sat 01 Jan 2022 15:55:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202061
IP address blocks:        93.159.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896436235 (0x356e880b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  1 15:55:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51ef2668a51f019dfb8827e7b3b21ba3eda22998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:c9:3d:9a:f6:fc:5a:0f:43:29:50:61:e2:
                    a8:b1:c9:24:62:3c:8c:6f:47:48:2c:10:f6:3e:5b:
                    aa:a4:ef:c8:12:00:6d:ee:65:1f:4c:9c:a4:70:62:
                    be:0f:9b:9b:c1:3a:99:d4:38:03:30:7c:f6:d5:d2:
                    f2:e3:2b:5d:93:fd:19:f2:e6:54:27:9a:1b:ea:7d:
                    72:03:78:6d:1e:84:99:52:ec:ae:21:8c:0b:57:b3:
                    f5:e9:67:f5:20:2f:fb:8b:b9:34:32:d6:3f:84:ad:
                    71:90:e4:d3:21:1d:a9:d4:bc:70:b2:d7:13:18:24:
                    b7:b6:fc:01:d4:3d:66:1d:13:9d:33:21:79:d2:c5:
                    c8:88:ce:32:58:df:40:61:0b:34:8c:09:49:79:c2:
                    45:8a:09:35:c4:49:bf:ed:85:14:f5:98:b5:b9:33:
                    d7:fc:f2:46:9a:b9:8a:59:2c:a4:ff:24:c9:a0:aa:
                    16:8f:44:17:3d:b3:00:fe:66:1d:7f:fe:e7:d8:21:
                    f8:21:51:2c:57:fd:20:b3:c5:3a:6e:dc:74:06:e1:
                    66:46:36:81:dc:0f:a0:55:09:09:44:a6:55:e1:51:
                    6c:22:dd:e7:a1:91:61:61:ad:89:54:41:14:a6:4a:
                    79:eb:47:1d:db:5a:4d:11:37:af:40:1e:79:95:cd:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EF:26:68:A5:1F:01:9D:FB:88:27:E7:B3:B2:1B:A3:ED:A2:29:98
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Ue8maKUfAZ37iCfns7Ibo-2iKZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:7e:d6:d3:6b:01:1a:d0:56:33:73:4e:93:91:b3:37:cc:
         16:f1:9f:7e:e8:66:ee:17:a1:12:f8:3f:b9:02:15:0b:9b:10:
         d1:48:f5:e2:53:18:9c:15:4a:02:71:0f:7d:a8:1a:14:89:97:
         83:7c:22:45:bc:f8:44:b9:05:20:9f:3b:45:1a:5f:23:3d:34:
         15:dc:f0:62:55:ee:12:79:8e:87:48:71:f9:d7:41:7a:22:7c:
         35:a9:cc:44:5d:d1:6d:db:05:14:e9:e3:02:7c:65:57:b4:0c:
         09:f5:e7:c6:af:9a:de:95:88:8a:b2:87:8d:e4:66:b5:e5:de:
         3b:e2:77:37:c0:b2:ed:99:77:f3:1d:ba:dd:0a:b1:a6:b9:97:
         b3:91:1c:fc:37:21:9a:a3:47:02:5c:64:76:39:bd:08:64:f7:
         18:c7:49:c4:2b:e5:c4:7e:11:06:6d:ab:a4:d9:5b:d2:36:d8:
         fb:14:69:bc:9f:15:45:ca:b5:bf:f0:93:f1:8c:f4:e7:9c:fa:
         2a:1e:fe:65:ce:c4:6f:63:b6:7a:a7:9c:56:30:38:56:19:dd:
         a3:f7:cf:c9:03:32:a5:55:f6:ec:15:26:81:49:43:55:f7:28:
         d0:aa:b0:5f:de:98:7a:31:47:0f:9f:f8:94:4c:8f:8b:c6:b1:
         0f:24:3a:34
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENW6ICzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjJhNjQ2YmVkNGM0MTdhNmI0ODA1ZjkzZDc3YTdhNDY1ZTM0YjkzMB4XDTIyMDEw
MTE1NTUxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTFlZjI2NjhhNTFm
MDE5ZGZiODgyN2U3YjNiMjFiYTNlZGEyMjk5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKpyT2a9vxaD0MpUGHiqLHJJGI8jG9HSCwQ9j5bqqTvyBIA
be5lH0ycpHBivg+bm8E6mdQ4AzB89tXS8uMrXZP9GfLmVCeaG+p9cgN4bR6EmVLs
riGMC1ez9eln9SAv+4u5NDLWP4StcZDk0yEdqdS8cLLXExgkt7b8AdQ9Zh0TnTMh
edLFyIjOMljfQGELNIwJSXnCRYoJNcRJv+2FFPWYtbkz1/zyRpq5ilkspP8kyaCq
Fo9EFz2zAP5mHX/+59gh+CFRLFf9ILPFOm7cdAbhZkY2gdwPoFUJCUSmVeFRbCLd
56GRYWGtiVRBFKZKeetHHdtaTRE3r0AeeZXNpNkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRR7yZopR8BnfuIJ+ezshuj7aIpmDAfBgNVHSMEGDAWgBQSKmRr7UxBemtI
Bfk9d6ekZeNLkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VpcGthLTFNUVhwclNBWDVQWGVucEdYalM1TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvYTU5NmUyLTI5ZDItNDhjNi05YmFiLTVjYmQxZjNmZjM5YS8x
L1VlOG1hS1VmQVozN2lDZm5zN0liby0yaUtaZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
YTU5NmUyLTI5ZDItNDhjNi05YmFiLTVjYmQxZjNmZjM5YS8xL0VpcGthLTFNUVhw
clNBWDVQWGVucEdYalM1TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2fuTANBgkqhkiG9w0BAQsFAAOC
AQEATv9+1tNrARrQVjNzTpORszfMFvGffuhm7hehEvg/uQIVC5sQ0Uj14lMYnBVK
AnEPfagaFImXg3wiRbz4RLkFIJ87RRpfIz00FdzwYlXuEnmOh0hx+ddBeiJ8NanM
RF3RbdsFFOnjAnxlV7QMCfXnxq+a3pWIirKHjeRmteXeO+J3N8Cy7Zl38x263Qqx
prmXs5Ec/DchmqNHAlxkdjm9CGT3GMdJxCvlxH4RBm2rpNlb0jbY+xRpvJ8VRcq1
v/CT8Yz055z6Kh7+Zc7Eb2O2eqecVjA4Vhndo/fPyQMypVX27BUmgUlDVfco0Kqw
X96YejFHD5/4lEyPi8axDyQ6NA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:44 2024 by rpki-client on console-ams.rpki-client.org