Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/Fk8FxNU2c7feCYCIU8xrWDgZm3Y.roa
File:                     Fk8FxNU2c7feCYCIU8xrWDgZm3Y.roa (raw, json)
Hash identifier:          mIVQiq64F4v801EvFDEwS4PlVocOvwPMFwwCuX1pe3c=
Subject key identifier:   16:4F:05:C4:D5:36:73:B7:DE:09:80:88:53:CC:6B:58:38:19:9B:76
Certificate issuer:       /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial:       0BBDA0B0
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/Fk8FxNU2c7feCYCIU8xrWDgZm3Y.roa
Signing time:             Sat 01 Jan 2022 06:06:16 +0000
ROA not before:           Sat 01 Jan 2022 06:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212041
IP address blocks:        185.252.130.0/24 maxlen: 31
                          185.252.129.0/24 maxlen: 31
                          185.252.128.0/24 maxlen: 31
                          185.252.131.0/24 maxlen: 31

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196976816 (0xbbda0b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
        Validity
            Not Before: Jan  1 06:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=164f05c4d53673b7de09808853cc6b5838199b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:7e:d8:e3:0e:91:03:52:66:44:0d:14:a8:
                    63:1e:09:be:b2:58:c0:d4:a2:0b:77:b7:6b:5e:92:
                    08:ec:01:87:ad:61:a4:1c:0c:3d:c9:ac:d6:56:d0:
                    71:59:6c:30:a7:69:aa:26:4b:a7:99:8b:ca:a6:fb:
                    f2:bb:04:bc:db:55:3f:84:32:52:90:19:f0:2e:cf:
                    09:db:d7:62:c6:65:ed:fc:be:43:16:c8:ec:1f:b0:
                    a8:8c:e0:79:7e:84:03:2d:fb:d7:aa:9b:6d:52:6e:
                    b9:1e:f9:8f:3c:c0:39:5e:db:4e:1d:e2:b4:44:47:
                    8c:43:2c:cc:0e:5c:4f:5e:a4:cb:80:81:87:4e:e9:
                    c3:84:b1:cb:f8:bc:8b:78:77:85:39:b9:98:ad:69:
                    1e:0f:ff:ac:cc:2f:3e:93:ba:08:ae:bf:35:ea:20:
                    c8:ab:9f:08:0c:a5:8c:3d:6d:e0:75:6e:cd:77:1f:
                    09:8c:8f:f5:3d:ba:59:96:2b:31:62:a8:51:22:1b:
                    56:be:96:c0:3c:b1:01:e8:92:bc:cc:54:ef:7b:6a:
                    39:76:bf:f3:ab:bb:00:c9:fb:a5:a3:7b:45:6d:26:
                    83:bc:1b:97:90:92:e8:52:18:c9:39:46:58:08:b2:
                    49:b3:9f:89:e4:65:23:51:22:7b:73:71:7e:48:d3:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:05:C4:D5:36:73:B7:DE:09:80:88:53:CC:6B:58:38:19:9B:76
            X509v3 Authority Key Identifier:
                keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/Fk8FxNU2c7feCYCIU8xrWDgZm3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:54:5c:5a:36:98:d6:90:c8:32:f7:49:74:db:75:be:ef:
         b0:e5:07:40:c4:5e:c3:99:2c:b6:bb:f6:a8:1c:7c:18:7e:61:
         75:50:b6:84:4b:19:55:1d:e2:e7:c6:95:53:7a:d6:55:25:31:
         a4:32:c2:66:09:b2:df:4e:17:2c:6d:55:a3:80:07:5e:b7:b8:
         5e:56:e5:bf:cb:0e:87:6a:5a:b4:78:9a:cc:15:54:56:e2:12:
         d0:ae:99:3a:74:d8:6e:28:bf:85:f4:d8:24:7b:90:0d:18:77:
         67:61:4d:f0:b3:95:1b:21:9e:ef:3c:f3:6c:93:20:47:b0:70:
         5c:0f:89:7f:bf:0d:28:b6:e8:d1:e2:4b:f1:ab:b9:0d:cf:73:
         09:ae:0e:2a:e3:37:45:e2:b9:4d:e4:6b:5c:b2:74:e3:0b:c4:
         b3:35:77:e9:88:24:f1:85:41:72:72:2b:3b:15:56:05:f6:ab:
         79:29:1e:54:8d:63:4e:79:6f:77:51:cc:17:db:b0:00:95:8c:
         75:f6:c5:3a:21:c4:29:c0:a0:74:eb:3b:de:e7:c2:68:3a:69:
         64:c5:bd:80:89:54:9c:e3:69:1a:98:00:be:46:ee:b0:ef:77:
         ed:ca:2a:5b:28:e1:fa:4f:9e:c3:f0:95:c0:ec:ac:22:cd:e9:
         21:43:64:51
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC72gsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NTk0ZjAwNDcxZTI0OGFiZTM5NGQ1MjFlOTZjYmE5NjMwZDg1MjBlMB4XDTIyMDEw
MTA2MDYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTY0ZjA1YzRkNTM2
NzNiN2RlMDk4MDg4NTNjYzZiNTgzODE5OWI3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJIftjjDpEDUmZEDRSoYx4JvrJYwNSiC3e3a16SCOwBh61h
pBwMPcms1lbQcVlsMKdpqiZLp5mLyqb78rsEvNtVP4QyUpAZ8C7PCdvXYsZl7fy+
QxbI7B+wqIzgeX6EAy3716qbbVJuuR75jzzAOV7bTh3itERHjEMszA5cT16ky4CB
h07pw4Sxy/i8i3h3hTm5mK1pHg//rMwvPpO6CK6/NeogyKufCAyljD1t4HVuzXcf
CYyP9T26WZYrMWKoUSIbVr6WwDyxAeiSvMxU73tqOXa/86u7AMn7paN7RW0mg7wb
l5CS6FIYyTlGWAiySbOfieRlI1Eie3NxfkjT8PsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQWTwXE1TZzt94JgIhTzGtYOBmbdjAfBgNVHSMEGDAWgBQVlPAEceJIq+OU
1SHpbLqWMNhSDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZaVHdCSEhpU0t2amxOVWg2V3k2bGpEWVVnNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTIvNzlhNjRlLTA2OWYtNDk5ZC1hNjMxLThjZDQyY2VkZTIyMC8x
L0ZrOEZ4TlUyYzdmZUNZQ0lVOHhyV0RnWm0zWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIv
NzlhNjRlLTA2OWYtNDk5ZC1hNjMxLThjZDQyY2VkZTIyMC8xL0ZaVHdCSEhpU0t2
amxOVWg2V3k2bGpEWVVnNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn8gDANBgkqhkiG9w0BAQsFAAOC
AQEAN+ZUXFo2mNaQyDL3SXTbdb7vsOUHQMRew5kstrv2qBx8GH5hdVC2hEsZVR3i
58aVU3rWVSUxpDLCZgmy304XLG1Vo4AHXre4Xlblv8sOh2patHiazBVUVuIS0K6Z
OnTYbii/hfTYJHuQDRh3Z2FN8LOVGyGe7zzzbJMgR7BwXA+Jf78NKLbo0eJL8au5
Dc9zCa4OKuM3ReK5TeRrXLJ04wvEszV36Ygk8YVBcnIrOxVWBfareSkeVI1jTnlv
d1HMF9uwAJWMdfbFOiHEKcCgdOs73ufCaDppZMW9gIlUnONpGpgAvkbusO937coq
Wyjh+k+ew/CVwOysIs3pIUNkUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:32 2023 by rpki-client on console-fra.rpki-client.org